last executing test programs: 13m8.262573163s ago: executing program 2 (id=2670): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003780)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13m7.13515133s ago: executing program 2 (id=2673): mkdir(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) 13m5.975630147s ago: executing program 2 (id=2676): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) 13m2.147617246s ago: executing program 2 (id=2683): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[], 0xfe, 0x61cb, &(0x7f0000006c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 12m59.415452658s ago: executing program 2 (id=2691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000073000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r1, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x81) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x6, 0xfffffffc, {{0x19, 0x4, 0x1, 0x30, 0x64, 0x66, 0x0, 0x5a, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x14, 0xee, 0x0, 0x7, [0x8000, 0x800, 0xb73c, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0xb, [{@remote, 0x25b066fe}, {@multicast2, 0x1}, {@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@remote, 0xff}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xe7, [@multicast1, @multicast2]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x5, 0x8000, 0x1240, 0xffffffffffffffff, 0xfffffffc, '\x00', r2, r3, 0x5, 0x3, 0x0, 0x4, @void, @value, @void, @value}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117300000000008510000002000000850000000500000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, 0x0, 0x4000) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r8, 0x0, 0xffffffff000) sendmsg$RDMA_NLDEV_CMD_SET(r5, 0x0, 0x4040001) openat$cgroup_ro(r8, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) 12m58.780939927s ago: executing program 2 (id=2693): syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x181a02, 0x16) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 12m58.255533815s ago: executing program 32 (id=2693): syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x181a02, 0x16) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 4.497243373s ago: executing program 4 (id=6658): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x70]}}]}) 4.314380725s ago: executing program 4 (id=6661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x6) write(r7, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r5, 0x0, 0x0) r8 = accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) 3.839417552s ago: executing program 1 (id=6663): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x20040000) 3.687763175s ago: executing program 1 (id=6664): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee8", 0xc3}], 0x1}}], 0x1, 0x40000d0) 3.32389052s ago: executing program 1 (id=6666): openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000000c0)={0x8, 0x4, 0xa, 0x7, 0xff, 0x14, 0x1e, "c3d241a6efd7f638e6b6895708d4ef8ea7511c6b", "9fd09f8c742273d418a719236c3f596d744ab47a"}) 3.023416005s ago: executing program 4 (id=6669): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x70]}}]}) 2.758995489s ago: executing program 4 (id=6672): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x20040000) 2.622844761s ago: executing program 4 (id=6673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="6401005800e1ffff02f91f03b80e5e76f1be29c4cf2bf82596167652b2333f660f09fb628b372b155cd897eb23aea3eecd70b3b72751c8a730d571899ce1de", @ANYRES16=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x40088d1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="d4dd627bd8ad6148c7d35361997384377a3c74cc51c52464aa3334f6b2ab7c137becc8ffca4bb74d27f8d83c02468b3d5840f0c1b837b919c135561d66a21b92e2b146dc3c960f687dbfcffa2a9cdea21b2ef8f0562a13ca85"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x7}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r8, 0x2000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@lazytime}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.323619755s ago: executing program 0 (id=6676): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)='\\', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x8, 0x3, 0x32}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.246200456s ago: executing program 0 (id=6677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x6) write(r7, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r5, 0x0, 0x0) r8 = accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) 2.237637846s ago: executing program 1 (id=6678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000", @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000740)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x840000000002, 0x3, 0xfa) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) flistxattr(r7, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2275, &(0x7f00000018c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 1.501613737s ago: executing program 3 (id=6679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rt_sigpending(0x0, 0x0) 1.403874579s ago: executing program 1 (id=6680): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 1.252694491s ago: executing program 3 (id=6681): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x20040000) 1.070198294s ago: executing program 3 (id=6682): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x70]}}]}) 959.278715ms ago: executing program 1 (id=6683): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x8000000, 0x0, 0x0, 0x83f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x400, 0x40) 926.105236ms ago: executing program 0 (id=6684): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000500)=""/137, 0x89}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 668.470589ms ago: executing program 0 (id=6685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xd8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x184}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 665.13146ms ago: executing program 3 (id=6686): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)='\\', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x8, 0x3, 0x32}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 343.918144ms ago: executing program 3 (id=6687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f3791212", 0x76}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a", 0x24}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {0x0}], 0x2) 302.414615ms ago: executing program 0 (id=6688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000", @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000740)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x840000000002, 0x3, 0xfa) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) flistxattr(r7, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2275, &(0x7f00000018c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 217.882386ms ago: executing program 3 (id=6689): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 202.462437ms ago: executing program 4 (id=6690): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x80) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=6691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbff, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x85}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000c1, 0xa00) kernel console output (not intermixed with test programs): n not be enslaved while up [ 1525.094257][T22966] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1529.783309][T22983] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1530.317818][T23001] sctp: [Deprecated]: syz.1.5676 (pid 23001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1530.317818][T23001] Use struct sctp_sack_info instead [ 1530.376983][T22999] loop4: detected capacity change from 0 to 8192 [ 1531.352822][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 1531.352840][ T27] audit: type=1326 audit(1531.312:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.416961][ T27] audit: type=1326 audit(1531.312:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.464767][ T27] audit: type=1326 audit(1531.342:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.488930][ T27] audit: type=1326 audit(1531.342:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.520649][ T27] audit: type=1326 audit(1531.342:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.551919][ T27] audit: type=1326 audit(1531.352:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.574323][ T27] audit: type=1326 audit(1531.352:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.597270][ T27] audit: type=1326 audit(1531.352:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.619868][ T27] audit: type=1326 audit(1531.352:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.645604][ T27] audit: type=1326 audit(1531.352:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.1.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1531.679425][T23031] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1531.737261][T23033] sctp: [Deprecated]: syz.3.5691 (pid 23033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1531.737261][T23033] Use struct sctp_sack_info instead [ 1531.867942][T23037] loop1: detected capacity change from 0 to 1024 [ 1531.907175][T23037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1531.984400][T23037] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1531.987042][T23043] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1532.034350][T23037] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1532.080932][T23037] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1532.080932][T23037] [ 1532.101661][T23037] EXT4-fs (loop1): Total free blocks count 0 [ 1532.107724][T23037] EXT4-fs (loop1): Free/Dirty block details [ 1532.119684][T23037] EXT4-fs (loop1): free_blocks=4293918720 [ 1532.128293][T23037] EXT4-fs (loop1): dirty_blocks=112 [ 1532.140341][T23037] EXT4-fs (loop1): Block reservation details [ 1532.170454][T23037] EXT4-fs (loop1): i_reserved_data_blocks=7 [ 1532.346237][T10536] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1533.060787][T23065] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5703'. [ 1533.326472][T23071] loop3: detected capacity change from 0 to 1024 [ 1533.334724][T23071] EXT4-fs: Ignoring removed nobh option [ 1533.346294][T23071] EXT4-fs: Ignoring removed bh option [ 1533.364297][T23071] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1533.413081][T23071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.483708][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.508790][T23077] sctp: [Deprecated]: syz.4.5707 (pid 23077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1533.508790][T23077] Use struct sctp_sack_info instead [ 1534.044683][T23088] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5712'. [ 1535.117567][T23122] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5723'. [ 1535.488698][T23131] sctp: [Deprecated]: syz.4.5726 (pid 23131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1535.488698][T23131] Use struct sctp_sack_info instead [ 1536.029957][T23130] loop3: detected capacity change from 0 to 40427 [ 1536.046804][T23130] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1536.054670][T23130] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1536.077709][T23130] F2FS-fs (loop3): invalid crc value [ 1536.119724][T23130] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1536.636358][T23130] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1536.677862][T23130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1536.788973][T23138] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1537.125123][ T27] kauditd_printk_skb: 290 callbacks suppressed [ 1537.125141][ T27] audit: type=1326 audit(1537.072:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.224246][ T27] audit: type=1326 audit(1537.072:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.288997][ T27] audit: type=1326 audit(1537.082:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.320053][ T27] audit: type=1326 audit(1537.082:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.813256][ T27] audit: type=1326 audit(1537.082:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.843459][ T27] audit: type=1326 audit(1537.092:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.866278][ T27] audit: type=1326 audit(1537.092:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.910078][ T27] audit: type=1326 audit(1537.092:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.936526][ T27] audit: type=1326 audit(1537.092:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1537.988844][ T27] audit: type=1326 audit(1537.092:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23163 comm="syz.4.5735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1538.035338][T23179] sctp: [Deprecated]: syz.0.5739 (pid 23179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1538.035338][T23179] Use struct sctp_sack_info instead [ 1539.402087][T23206] netlink: 'syz.3.5742': attribute type 10 has an invalid length. [ 1539.460999][T23206] bond0: (slave dummy0): Releasing backup interface [ 1539.482932][T23206] team0: Port device dummy0 added [ 1539.508830][T23211] netlink: 'syz.3.5742': attribute type 10 has an invalid length. [ 1539.602527][T23211] team0: Port device dummy0 removed [ 1539.625489][T23211] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1539.837405][T23221] sctp: [Deprecated]: syz.4.5752 (pid 23221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1539.837405][T23221] Use struct sctp_sack_info instead [ 1540.463396][T23244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1540.646049][T23247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5762'. [ 1541.536426][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1541.579228][T23273] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5771'. [ 1541.961884][T23283] loop1: detected capacity change from 0 to 1024 [ 1542.015593][T23283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1542.082707][T23283] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1542.099120][T23283] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1542.112439][T23283] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1542.112439][T23283] [ 1542.126448][T23283] EXT4-fs (loop1): Total free blocks count 0 [ 1542.132920][T23283] EXT4-fs (loop1): Free/Dirty block details [ 1542.139277][T23283] EXT4-fs (loop1): free_blocks=4293918720 [ 1542.151689][T23283] EXT4-fs (loop1): dirty_blocks=80 [ 1542.159651][T23283] EXT4-fs (loop1): Block reservation details [ 1542.174332][T23283] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 1542.273742][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.334934][T23300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1542.651125][T23308] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5785'. [ 1542.763862][ T27] kauditd_printk_skb: 119 callbacks suppressed [ 1542.763882][ T27] audit: type=1326 audit(1542.722:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1542.807267][ T27] audit: type=1326 audit(1542.722:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1542.834880][ T27] audit: type=1326 audit(1542.752:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1542.865794][ T27] audit: type=1326 audit(1542.752:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1542.902189][ T27] audit: type=1326 audit(1542.752:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1542.932921][ T27] audit: type=1326 audit(1542.762:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1543.000712][ T27] audit: type=1326 audit(1542.762:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1543.059784][ T27] audit: type=1326 audit(1542.762:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1543.115699][ T27] audit: type=1326 audit(1542.762:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1543.128352][T23326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5792'. [ 1543.167181][ T27] audit: type=1326 audit(1542.762:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23312 comm="syz.4.5787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1543.535750][T23333] loop1: detected capacity change from 0 to 1024 [ 1543.626115][T23333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1543.700093][T23333] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1543.751599][T23333] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1543.797510][T23333] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1543.797510][T23333] [ 1543.836142][T23333] EXT4-fs (loop1): Total free blocks count 0 [ 1543.847488][T23333] EXT4-fs (loop1): Free/Dirty block details [ 1543.857104][T23333] EXT4-fs (loop1): free_blocks=4293918720 [ 1543.865425][T23333] EXT4-fs (loop1): dirty_blocks=80 [ 1543.873236][T23333] EXT4-fs (loop1): Block reservation details [ 1543.884508][T23333] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 1543.974385][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.166752][T23349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5801'. [ 1544.532178][T23362] loop3: detected capacity change from 0 to 1024 [ 1544.578637][T23362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1544.676317][T23362] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1544.695612][T23362] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1544.709720][T23373] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5811'. [ 1544.713789][T23362] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1544.713789][T23362] [ 1544.729997][T23362] EXT4-fs (loop3): Total free blocks count 0 [ 1544.736386][T23362] EXT4-fs (loop3): Free/Dirty block details [ 1544.746442][T23362] EXT4-fs (loop3): free_blocks=4293918720 [ 1544.752410][T23362] EXT4-fs (loop3): dirty_blocks=112 [ 1544.757922][T23362] EXT4-fs (loop3): Block reservation details [ 1544.764239][T23362] EXT4-fs (loop3): i_reserved_data_blocks=7 [ 1544.815107][T10550] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1545.124825][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5816'. [ 1545.784391][T23397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5820'. [ 1545.924717][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.939058][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.018800][T23401] loop4: detected capacity change from 0 to 1024 [ 1546.096337][T23401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1546.149752][T23401] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1546.183981][T23401] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1546.247021][T23401] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1546.247021][T23401] [ 1546.276584][T23401] EXT4-fs (loop4): Total free blocks count 0 [ 1546.296761][T23401] EXT4-fs (loop4): Free/Dirty block details [ 1546.317358][T23401] EXT4-fs (loop4): free_blocks=4293918720 [ 1546.331467][T23401] EXT4-fs (loop4): dirty_blocks=112 [ 1546.344438][T23401] EXT4-fs (loop4): Block reservation details [ 1546.364040][T23401] EXT4-fs (loop4): i_reserved_data_blocks=7 [ 1546.493279][T10536] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1546.666645][T23420] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5830'. [ 1547.097091][T23437] loop1: detected capacity change from 0 to 1024 [ 1547.171393][T23437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1547.250150][T23446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5840'. [ 1547.307712][T23437] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1547.334770][T23448] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5839'. [ 1547.354228][T23437] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1547.422122][T23437] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1547.422122][T23437] [ 1547.464054][T23437] EXT4-fs (loop1): Total free blocks count 0 [ 1547.470118][T23437] EXT4-fs (loop1): Free/Dirty block details [ 1547.495576][T23437] EXT4-fs (loop1): free_blocks=4293918720 [ 1547.501676][T23437] EXT4-fs (loop1): dirty_blocks=112 [ 1547.514787][T23437] EXT4-fs (loop1): Block reservation details [ 1547.525026][T23437] EXT4-fs (loop1): i_reserved_data_blocks=7 [ 1547.635002][ T1024] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1547.853930][T23464] loop4: detected capacity change from 0 to 1024 [ 1547.886022][T23464] EXT4-fs: Ignoring removed nobh option [ 1547.908653][T23464] EXT4-fs: Ignoring removed bh option [ 1547.932858][T23464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1547.991380][T23464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1548.115501][ T27] kauditd_printk_skb: 142 callbacks suppressed [ 1548.115520][ T27] audit: type=1800 audit(1548.072:4897): pid=23464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5846" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1548.118399][T23464] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4036: comm syz.4.5846: Allocating blocks 497-513 which overlap fs metadata [ 1548.180789][T23464] EXT4-fs (loop4): pa ffff88807794d0e8: logic 256, phys. 369, len 9 [ 1548.189000][T23464] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 1548.233278][T23475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5850'. [ 1548.246340][T23464] EXT4-fs error (device loop4): mb_free_blocks:1943: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 1548.365657][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.463630][T23481] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5852'. [ 1548.858152][T23491] loop4: detected capacity change from 0 to 1024 [ 1548.897444][T23491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1548.990387][T23491] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1549.022323][T23491] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1549.035217][T23491] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1549.035217][T23491] [ 1549.046546][T23491] EXT4-fs (loop4): Total free blocks count 0 [ 1549.054124][T23491] EXT4-fs (loop4): Free/Dirty block details [ 1549.060730][T23491] EXT4-fs (loop4): free_blocks=4293918720 [ 1549.066640][T23491] EXT4-fs (loop4): dirty_blocks=80 [ 1549.072415][T23491] EXT4-fs (loop4): Block reservation details [ 1549.078586][T23491] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 1549.175252][T23498] netlink: 'syz.1.5858': attribute type 10 has an invalid length. [ 1549.199648][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.218224][T23498] bond0: (slave dummy0): Releasing backup interface [ 1549.266530][T23498] team0: Port device dummy0 added [ 1549.284421][T23502] netlink: 'syz.1.5858': attribute type 10 has an invalid length. [ 1549.358703][T23502] team0: Port device dummy0 removed [ 1549.367696][T23505] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1549.371045][T23502] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1549.392210][T23507] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5860'. [ 1549.395453][T23508] loop3: detected capacity change from 0 to 1024 [ 1549.417507][T23508] EXT4-fs: Ignoring removed nobh option [ 1549.426585][T23508] EXT4-fs: Ignoring removed bh option [ 1549.456767][T23508] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1549.498510][T23508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1549.577853][ T27] audit: type=1326 audit(1549.532:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.668859][ T27] audit: type=1326 audit(1549.532:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.704304][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.721888][ T27] audit: type=1326 audit(1549.562:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.754646][ T27] audit: type=1326 audit(1549.562:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.777906][ T27] audit: type=1326 audit(1549.562:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.800145][ T27] audit: type=1326 audit(1549.562:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.838748][ T27] audit: type=1326 audit(1549.562:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.870873][ T27] audit: type=1326 audit(1549.562:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1549.906608][ T27] audit: type=1326 audit(1549.562:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23513 comm="syz.1.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1550.077901][T23531] loop3: detected capacity change from 0 to 1024 [ 1550.107932][T23531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1550.243122][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.398282][T23541] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5872'. [ 1550.661313][T23546] netlink: 'syz.1.5873': attribute type 10 has an invalid length. [ 1550.745025][T23546] bond0: (slave dummy0): Releasing backup interface [ 1550.801990][T23546] team0: Port device dummy0 added [ 1550.807970][T23550] netlink: 'syz.1.5873': attribute type 10 has an invalid length. [ 1550.909969][T23550] team0: Port device dummy0 removed [ 1550.936591][T23550] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1553.294476][T23569] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1553.676222][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 1553.676242][ T27] audit: type=1326 audit(1553.622:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1553.763191][T23573] loop3: detected capacity change from 0 to 256 [ 1553.803262][ T27] audit: type=1326 audit(1553.622:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1553.928187][ T27] audit: type=1326 audit(1553.682:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.019997][ T27] audit: type=1326 audit(1553.682:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.130567][ T27] audit: type=1326 audit(1553.682:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.190524][ T27] audit: type=1326 audit(1553.682:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.266859][ T27] audit: type=1326 audit(1553.682:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.346693][ T27] audit: type=1326 audit(1553.682:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.388163][ T27] audit: type=1326 audit(1553.682:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.416033][ T27] audit: type=1326 audit(1553.682:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23571 comm="syz.3.5884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1554.602348][T23587] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5888'. [ 1554.680642][T23590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5889'. [ 1554.784351][T23593] loop4: detected capacity change from 0 to 1024 [ 1554.835922][T23593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1555.041755][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1555.888436][T23626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5902'. [ 1556.924917][T23646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1557.152691][T23654] loop4: detected capacity change from 0 to 256 [ 1558.288928][T23678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5923'. [ 1558.677810][T23690] block device autoloading is deprecated and will be removed. [ 1558.839359][ T27] kauditd_printk_skb: 210 callbacks suppressed [ 1558.839378][ T27] audit: type=1326 audit(1558.782:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23685 comm="syz.4.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1558.900886][ T27] audit: type=1326 audit(1558.782:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23685 comm="syz.4.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1559.349651][T23702] loop4: detected capacity change from 0 to 512 [ 1559.361470][T23702] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1559.403439][T23702] EXT4-fs: error: could not find journal device path [ 1559.437096][T23706] loop1: detected capacity change from 0 to 1024 [ 1559.526440][T23706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1559.643825][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.667674][T23716] netlink: 'syz.4.5940': attribute type 10 has an invalid length. [ 1559.680136][T23719] loop3: detected capacity change from 0 to 256 [ 1559.754823][T23716] bond0: (slave dummy0): Releasing backup interface [ 1559.839327][T23716] team0: Port device dummy0 added [ 1559.846877][T23720] netlink: 'syz.4.5940': attribute type 10 has an invalid length. [ 1559.896441][T23720] team0: Port device dummy0 removed [ 1559.911883][T23720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1560.039533][T23730] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5945'. [ 1560.163798][T23736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1560.418885][T23743] loop4: detected capacity change from 0 to 1024 [ 1560.492395][T23743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.513644][T23748] loop1: detected capacity change from 0 to 256 [ 1560.557065][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1560.569034][T23743] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1560.595018][T23743] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1560.646046][T23743] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1560.646046][T23743] [ 1560.659600][T23743] EXT4-fs (loop4): Total free blocks count 0 [ 1560.668942][ T27] audit: type=1326 audit(1560.622:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1560.670465][T23743] EXT4-fs (loop4): Free/Dirty block details [ 1560.691815][ T27] audit: type=1326 audit(1560.652:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1560.729467][T23743] EXT4-fs (loop4): free_blocks=4293918720 [ 1560.735876][T23743] EXT4-fs (loop4): dirty_blocks=80 [ 1560.745149][T23743] EXT4-fs (loop4): Block reservation details [ 1560.755478][T23743] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 1560.786981][ T27] audit: type=1326 audit(1560.682:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1560.817094][ T27] audit: type=1326 audit(1560.682:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1560.839805][ T27] audit: type=1326 audit(1560.682:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1560.888721][ T27] audit: type=1326 audit(1560.682:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1560.918055][ T27] audit: type=1326 audit(1560.682:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1560.927155][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.940679][ T27] audit: type=1326 audit(1560.682:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.1.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1561.151502][T23765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1561.798981][T23781] lo speed is unknown, defaulting to 1000 [ 1561.806868][T23781] lo speed is unknown, defaulting to 1000 [ 1561.823144][T23781] lo speed is unknown, defaulting to 1000 [ 1561.910580][T23781] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1562.085550][T23781] lo speed is unknown, defaulting to 1000 [ 1562.102316][T23781] lo speed is unknown, defaulting to 1000 [ 1562.117865][T23781] lo speed is unknown, defaulting to 1000 [ 1562.133656][T23781] lo speed is unknown, defaulting to 1000 [ 1562.149671][T23781] lo speed is unknown, defaulting to 1000 [ 1562.164596][T23781] lo speed is unknown, defaulting to 1000 [ 1562.708556][T23790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5972'. [ 1562.844474][T23797] wg2: entered promiscuous mode [ 1562.959953][T23799] loop1: detected capacity change from 0 to 2048 [ 1563.031407][T23799] loop1: p1 < > p4 [ 1563.042934][T23799] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1563.266022][T23799] loop1: detected capacity change from 0 to 2048 [ 1563.491125][T23816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5983'. [ 1563.619445][T23818] netlink: 'syz.4.5984': attribute type 10 has an invalid length. [ 1563.629455][T23818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5984'. [ 1563.690424][T23799] loop1: unable to read partition table [ 1563.696457][T23799] loop1: partition table beyond EOD, truncated [ 1563.703350][T23799] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1563.711077][T23818] team0: Port device geneve0 added [ 1563.795604][T23825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1563.822761][T23827] loop3: detected capacity change from 0 to 1024 [ 1563.841467][T23827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1563.861371][T23827] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1563.928736][T23832] loop4: detected capacity change from 0 to 256 [ 1563.931584][T23827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.057038][T23827] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.3.5988: corrupted in-inode xattr: bad e_name length [ 1564.135458][T23827] EXT4-fs (loop3): Remounting filesystem read-only [ 1564.303259][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 1564.303275][ T27] audit: type=1326 audit(1564.262:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23826 comm="syz.3.5988" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9576b8e929 code=0x0 [ 1564.347116][T23846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5994'. [ 1564.496151][ T27] audit: type=1326 audit(1564.452:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1564.499265][T23853] syz.4.5998[23853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1564.525828][ T27] audit: type=1326 audit(1564.452:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1564.532636][T23853] syz.4.5998[23853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1564.538937][ T27] audit: type=1326 audit(1564.452:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1564.579918][T23852] lo speed is unknown, defaulting to 1000 [ 1564.607626][ T27] audit: type=1326 audit(1564.562:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1564.674960][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.677210][ T27] audit: type=1326 audit(1564.562:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1564.730277][ T27] audit: type=1326 audit(1564.612:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1564.759499][ T27] audit: type=1326 audit(1564.612:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23850 comm="syz.4.5998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1565.049008][ T27] audit: type=1326 audit(1565.002:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23867 comm="syz.4.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1565.110831][ T27] audit: type=1326 audit(1565.002:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23867 comm="syz.4.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1565.671934][T23876] lo speed is unknown, defaulting to 1000 [ 1566.175613][T23879] loop0: detected capacity change from 0 to 512 [ 1566.296407][T23879] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1566.363113][T23879] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.6007: bad orphan inode 13 [ 1566.394037][T23879] ext4_test_bit(bit=12, block=18) = 1 [ 1566.399635][T23879] is_bad_inode(inode)=0 [ 1566.412478][T23879] NEXT_ORPHAN(inode)=2130706432 [ 1566.417519][T23879] max_ino=32 [ 1566.421034][T23879] i_nlink=1 [ 1566.425759][T23879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1566.595009][T23879] syz.0.6007[23879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1566.599022][T23879] syz.0.6007[23879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1567.067571][T23882] netlink: '+}[@': attribute type 10 has an invalid length. [ 1567.413397][T23882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.429936][T23882] bond0: (slave team0): Enslaving as an active interface with an up link [ 1567.460431][T23886] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1567.490474][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.690665][T23898] netlink: 'syz.4.6013': attribute type 10 has an invalid length. [ 1567.751526][T23898] bond0: (slave dummy0): Releasing backup interface [ 1567.821732][T23898] team0: Port device dummy0 added [ 1567.844539][T23903] netlink: 'syz.4.6013': attribute type 10 has an invalid length. [ 1568.160417][T23903] team0: Port device dummy0 removed [ 1568.216053][T23903] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1568.686262][T23914] lo speed is unknown, defaulting to 1000 [ 1569.622289][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1569.622307][ T27] audit: type=1326 audit(1569.582:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23923 comm="syz.0.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1569.652304][ T27] audit: type=1326 audit(1569.582:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23923 comm="syz.0.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1569.744421][T23922] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1570.279300][ T27] audit: type=1326 audit(1570.232:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1570.325828][ T27] audit: type=1326 audit(1570.262:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1570.357829][ T27] audit: type=1326 audit(1570.262:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1570.469467][ T27] audit: type=1326 audit(1570.262:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1570.524683][ T27] audit: type=1326 audit(1570.262:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1570.587939][ T27] audit: type=1326 audit(1570.262:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1570.660406][ T27] audit: type=1326 audit(1570.262:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1570.732445][ T27] audit: type=1326 audit(1570.262:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23936 comm="syz.0.6028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1571.674300][T23954] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1571.832164][T23967] loop0: detected capacity change from 0 to 1024 [ 1571.852061][T23967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1571.870553][T23967] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1571.903043][T23967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1571.949924][T23967] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.0.6041: corrupted in-inode xattr: bad e_name length [ 1571.992110][T23967] EXT4-fs (loop0): Remounting filesystem read-only [ 1572.583761][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.620890][T23957] lo speed is unknown, defaulting to 1000 [ 1572.963412][T23984] netlink: 'syz.0.6047': attribute type 11 has an invalid length. [ 1574.215604][T24001] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1574.224512][T24001] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1574.234548][T24001] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1574.243578][T24001] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1574.437179][T24001] lo speed is unknown, defaulting to 1000 [ 1575.208146][T24017] loop1: detected capacity change from 0 to 1024 [ 1575.215433][T24017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1575.222695][T24017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1575.237933][T24017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.265501][T24017] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.1.6061: corrupted in-inode xattr: bad e_name length [ 1575.284363][T24017] EXT4-fs (loop1): Remounting filesystem read-only [ 1575.796595][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 1575.796614][ T27] audit: type=1326 audit(1575.742:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1575.860011][ T27] audit: type=1326 audit(1575.742:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1575.905006][ T27] audit: type=1326 audit(1575.742:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1575.959818][ T27] audit: type=1326 audit(1575.742:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1575.966639][T24036] loop4: detected capacity change from 0 to 1024 [ 1576.039228][ T27] audit: type=1326 audit(1575.742:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1576.055820][T24036] EXT4-fs: Ignoring removed nobh option [ 1576.070460][ T27] audit: type=1326 audit(1575.742:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1576.094148][T24036] EXT4-fs: Ignoring removed bh option [ 1576.103590][ T27] audit: type=1326 audit(1575.742:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1576.120386][T24036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1576.150016][ T27] audit: type=1326 audit(1575.742:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1576.179207][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.186569][ T27] audit: type=1326 audit(1575.742:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1576.215429][ T27] audit: type=1326 audit(1575.742:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.4.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1576.340849][T24036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.386047][T24050] loop1: detected capacity change from 0 to 1024 [ 1576.437091][T24050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1576.486032][T24050] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1576.516296][T24050] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1576.543989][T24050] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1576.543989][T24050] [ 1576.560961][T24050] EXT4-fs (loop1): Total free blocks count 0 [ 1576.567171][T24050] EXT4-fs (loop1): Free/Dirty block details [ 1576.575213][T24050] EXT4-fs (loop1): free_blocks=4293918720 [ 1576.583135][T24050] EXT4-fs (loop1): dirty_blocks=80 [ 1576.591760][T24050] EXT4-fs (loop1): Block reservation details [ 1576.597900][T24050] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 1576.680743][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.139624][T24074] loop3: detected capacity change from 0 to 1024 [ 1577.146730][T24074] EXT4-fs: Ignoring removed i_version option [ 1577.156036][T24074] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1577.245961][T24075] siw: device registration error -23 [ 1577.810826][T24074] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.6083: Invalid block bitmap block 0 in block_group 0 [ 1577.895474][T24074] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.6083: Failed to acquire dquot type 0 [ 1577.962489][T24074] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.6083: Freeing blocks not in datazone - block = 0, count = 4096 [ 1577.996411][T24074] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.6083: Invalid inode bitmap blk 0 in block_group 0 [ 1578.012224][ T1024] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 0 [ 1578.033304][T24074] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 1578.050888][T24074] EXT4-fs (loop3): 1 orphan inode deleted [ 1578.063718][T24074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.113488][T24081] loop0: detected capacity change from 0 to 512 [ 1578.168058][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.169497][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.191386][T24081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.260107][T24081] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #2: comm syz.0.6087: corrupted inode contents [ 1578.266829][T24086] loop3: detected capacity change from 0 to 1024 [ 1578.290409][T24081] EXT4-fs error (device loop0): ext4_dirty_inode:6100: inode #2: comm syz.0.6087: mark_inode_dirty error [ 1578.313047][T24081] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #2: comm syz.0.6087: corrupted inode contents [ 1578.330880][T24086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.354153][T24081] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.6087: mark_inode_dirty error [ 1578.416561][T24086] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1578.444164][T24086] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1578.457034][T24086] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1578.457034][T24086] [ 1578.466863][T24086] EXT4-fs (loop3): Total free blocks count 0 [ 1578.473133][T24086] EXT4-fs (loop3): Free/Dirty block details [ 1578.479314][T24086] EXT4-fs (loop3): free_blocks=4293918720 [ 1578.485684][T24086] EXT4-fs (loop3): dirty_blocks=80 [ 1578.490578][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.491063][T24086] EXT4-fs (loop3): Block reservation details [ 1578.508044][T24086] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 1578.626329][T24097] loop1: detected capacity change from 0 to 1024 [ 1578.644953][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.757380][T24097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.758069][T24105] siw: device registration error -23 [ 1578.856690][T24097] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1578.885770][T24097] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1578.899706][T24097] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1578.899706][T24097] [ 1578.910138][T24097] EXT4-fs (loop1): Total free blocks count 0 [ 1578.916360][T24097] EXT4-fs (loop1): Free/Dirty block details [ 1578.952516][T24097] EXT4-fs (loop1): free_blocks=4293918720 [ 1578.970531][T24097] EXT4-fs (loop1): dirty_blocks=80 [ 1578.975809][T24097] EXT4-fs (loop1): Block reservation details [ 1578.990845][T24097] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 1579.184165][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.367289][T24141] loop0: detected capacity change from 0 to 1024 [ 1580.425128][T24141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1580.507800][T24150] siw: device registration error -23 [ 1580.773169][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.039563][T24161] lo speed is unknown, defaulting to 1000 [ 1581.955390][T24164] netlink: 'syz.4.6119': attribute type 21 has an invalid length. [ 1582.007822][T24164] netlink: 'syz.4.6119': attribute type 1 has an invalid length. [ 1582.041625][T24164] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1582.126945][T24168] netlink: 'syz.0.6118': attribute type 21 has an invalid length. [ 1582.143150][T24168] netlink: 'syz.0.6118': attribute type 1 has an invalid length. [ 1582.151233][T24168] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6118'. [ 1582.162552][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 1582.162570][ T27] audit: type=1326 audit(1582.122:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.225957][ T27] audit: type=1326 audit(1582.162:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.284718][ T27] audit: type=1326 audit(1582.172:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.336996][ T27] audit: type=1326 audit(1582.172:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.411503][ T27] audit: type=1326 audit(1582.172:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.494895][ T27] audit: type=1326 audit(1582.172:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.557042][T24179] loop4: detected capacity change from 0 to 1024 [ 1582.560291][ T27] audit: type=1326 audit(1582.172:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.624111][ T27] audit: type=1326 audit(1582.172:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.629259][T24179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.664727][ T27] audit: type=1326 audit(1582.172:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.699709][ T27] audit: type=1326 audit(1582.172:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.0.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1582.712544][T24181] netlink: 'syz.3.6126': attribute type 1 has an invalid length. [ 1582.821337][T24171] loop0: detected capacity change from 0 to 512 [ 1582.848874][T24171] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1582.895244][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.059798][T24171] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6 [ 1583.106158][T24192] netlink: 'syz.4.6129': attribute type 13 has an invalid length. [ 1583.543779][T24192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.552769][T24192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.869888][T24192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.922489][T24192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.247932][T24192] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.256916][T24192] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.266809][T24192] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.275768][T24192] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.374019][ T23] lo speed is unknown, defaulting to 1000 [ 1584.425883][T24203] netlink: 'syz.1.6133': attribute type 21 has an invalid length. [ 1584.434171][T24203] netlink: 'syz.1.6133': attribute type 1 has an invalid length. [ 1584.442191][T24203] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6133'. [ 1584.895310][T24216] netlink: 'syz.0.6139': attribute type 1 has an invalid length. [ 1585.093937][T24220] siw: device registration error -23 [ 1586.006185][T24226] netlink: 'syz.4.6143': attribute type 21 has an invalid length. [ 1586.020479][T24226] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6143'. [ 1586.050020][T24228] bond0: (slave dummy0): Releasing backup interface [ 1586.085310][T24228] bridge_slave_0: left allmulticast mode [ 1586.114920][T24228] bridge_slave_0: left promiscuous mode [ 1586.125008][T24228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.148905][T24228] bridge_slave_1: left allmulticast mode [ 1586.159385][T24228] bridge_slave_1: left promiscuous mode [ 1586.169346][T24228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.189571][T24228] bond0: (slave bond_slave_0): Releasing backup interface [ 1586.207441][T24228] bond0: (slave bond_slave_1): Releasing backup interface [ 1586.249050][T24228] team0: Port device team_slave_0 removed [ 1586.270940][T24228] team0: Port device team_slave_1 removed [ 1586.277701][T24228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.285625][T24228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.294394][T24228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.303124][T24228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.438039][T24241] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6147'. [ 1586.879299][T24240] loop1: detected capacity change from 0 to 512 [ 1586.903098][T24252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6152'. [ 1586.916840][T24240] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1587.178178][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 1587.178196][ T27] audit: type=1326 audit(1587.132:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1587.181620][T24240] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 1587.221754][ T27] audit: type=1326 audit(1587.182:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1588.622362][T24276] validate_nla: 4 callbacks suppressed [ 1588.622379][T24276] netlink: 'syz.4.6161': attribute type 1 has an invalid length. [ 1588.951456][ T27] audit: type=1326 audit(1588.902:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24285 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.015030][ T27] audit: type=1326 audit(1588.902:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24285 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.318576][T24294] netlink: 'syz.3.6170': attribute type 21 has an invalid length. [ 1589.337202][T24294] netlink: 'syz.3.6170': attribute type 1 has an invalid length. [ 1589.364654][T24294] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6170'. [ 1589.398449][ T27] audit: type=1326 audit(1589.352:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.3.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.470478][ T27] audit: type=1326 audit(1589.352:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.3.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.526724][ T27] audit: type=1326 audit(1589.402:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.3.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.580706][ T27] audit: type=1326 audit(1589.402:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.3.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.641242][ T27] audit: type=1326 audit(1589.402:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.3.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.680739][ T27] audit: type=1326 audit(1589.462:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.3.6170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1589.977704][T24299] loop3: detected capacity change from 0 to 512 [ 1590.003870][T24299] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 1590.236631][T24299] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 1590.431127][T24332] netlink: 'syz.1.6187': attribute type 1 has an invalid length. [ 1591.216493][T24358] netlink: 'syz.3.6200': attribute type 10 has an invalid length. [ 1591.239148][T24358] team0: Port device dummy0 added [ 1591.275483][T24358] netlink: 'syz.3.6200': attribute type 10 has an invalid length. [ 1591.324218][T24358] team0: Port device dummy0 removed [ 1591.346269][T24358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1591.360642][T24364] netlink: 'syz.4.6201': attribute type 21 has an invalid length. [ 1591.371908][T24364] netlink: 'syz.4.6201': attribute type 1 has an invalid length. [ 1591.379982][T24364] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6201'. [ 1591.797019][T24379] syz.3.6209[24379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1591.797184][T24379] syz.3.6209[24379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1591.845394][T24371] loop4: detected capacity change from 0 to 512 [ 1591.874969][T24371] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1592.074470][T24371] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 1592.193380][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 1592.193398][ T27] audit: type=1326 audit(1592.152:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24360 comm="syz.4.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1592.255241][ T27] audit: type=1326 audit(1592.152:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24360 comm="syz.4.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1592.292123][ T27] audit: type=1326 audit(1592.152:5518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24360 comm="syz.4.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1593.432244][T24402] siw: device registration error -23 [ 1593.526997][T24411] loop0: detected capacity change from 0 to 512 [ 1593.612618][T24411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1593.734227][T24416] loop3: detected capacity change from 0 to 1024 [ 1593.742797][T24416] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1593.779579][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.812922][T24416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1593.925150][T24424] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6226'. [ 1593.945035][T24420] netlink: 'syz.1.6224': attribute type 21 has an invalid length. [ 1593.972790][ T27] audit: type=1326 audit(1593.932:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24415 comm="syz.3.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1594.007465][T24420] netlink: 'syz.1.6224': attribute type 1 has an invalid length. [ 1594.028392][T24420] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1594.058275][ T27] audit: type=1326 audit(1593.952:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24415 comm="syz.3.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1594.117548][ T27] audit: type=1326 audit(1593.952:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24415 comm="syz.3.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1594.164546][ T27] audit: type=1326 audit(1593.952:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24415 comm="syz.3.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1594.220530][ T27] audit: type=1326 audit(1593.962:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24417 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1594.248034][ T27] audit: type=1326 audit(1593.972:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24415 comm="syz.3.6223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1594.279848][ T27] audit: type=1326 audit(1593.962:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24417 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1594.355884][T24434] loop0: detected capacity change from 0 to 512 [ 1594.417956][T24434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.521383][T24420] loop1: detected capacity change from 0 to 512 [ 1594.541155][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.550995][T24420] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1594.724166][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.738331][T24420] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 1595.771282][T24446] lo speed is unknown, defaulting to 1000 [ 1596.624668][T24457] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6237'. [ 1596.861473][T24463] loop4: detected capacity change from 0 to 512 [ 1596.899266][T24463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1596.935524][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.100364][T24473] netlink: 'syz.0.6243': attribute type 21 has an invalid length. [ 1597.109041][T24473] netlink: 'syz.0.6243': attribute type 1 has an invalid length. [ 1597.117709][T24473] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6243'. [ 1597.581805][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 1597.581824][ T27] audit: type=1326 audit(1597.542:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1597.772834][ T27] audit: type=1326 audit(1597.542:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1597.814547][T24473] loop0: detected capacity change from 0 to 512 [ 1597.842791][ T27] audit: type=1326 audit(1597.702:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1597.865478][ T27] audit: type=1326 audit(1597.702:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1597.889088][T24473] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1597.913587][ T27] audit: type=1326 audit(1597.702:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1598.055420][T24491] lo speed is unknown, defaulting to 1000 [ 1598.531038][ T27] audit: type=1326 audit(1597.702:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1598.655915][ T27] audit: type=1326 audit(1597.702:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1598.772261][ T27] audit: type=1326 audit(1597.702:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1598.839470][ T27] audit: type=1326 audit(1597.702:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1598.880062][T24473] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6 [ 1598.898525][ T27] audit: type=1326 audit(1597.702:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.0.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1598.937519][T24495] loop4: detected capacity change from 0 to 512 [ 1598.947161][T24495] EXT4-fs: Ignoring removed mblk_io_submit option [ 1598.953964][T24495] ext4: Unknown parameter 'seclabel' [ 1598.995231][T24499] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6253'. [ 1599.244817][T24503] loop1: detected capacity change from 0 to 1024 [ 1599.287447][T24503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.438580][T24503] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.6254: Allocating blocks 497-513 which overlap fs metadata [ 1599.488149][T24516] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6256'. [ 1599.790021][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.229204][T24533] lo speed is unknown, defaulting to 1000 [ 1601.338188][T24539] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1601.523799][T24543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1601.563691][T24543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1601.634789][T24545] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6267'. [ 1601.743424][T24547] loop1: detected capacity change from 0 to 512 [ 1601.815173][T24547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.984836][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.207315][T24568] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6276'. [ 1602.359115][T24570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6277'. [ 1602.375799][T24570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6277'. [ 1602.541403][T24574] siw: device registration error -23 [ 1603.345729][T24581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6281'. [ 1603.504222][T24585] loop3: detected capacity change from 0 to 512 [ 1603.552351][T24585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.610096][T24591] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6285'. [ 1603.662630][T24593] loop1: detected capacity change from 0 to 2048 [ 1603.673643][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.742947][T24593] Alternate GPT is invalid, using primary GPT. [ 1603.749538][T24593] loop1: p2 p3 p7 [ 1603.807002][ T27] kauditd_printk_skb: 97 callbacks suppressed [ 1603.807022][ T27] audit: type=1326 audit(1603.752:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1603.876885][ T27] audit: type=1326 audit(1603.752:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1603.901917][ T27] audit: type=1326 audit(1603.762:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1603.931719][ T27] audit: type=1326 audit(1603.762:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1603.957697][ T27] audit: type=1326 audit(1603.772:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1603.979831][ T27] audit: type=1326 audit(1603.772:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1604.007351][ T27] audit: type=1326 audit(1603.772:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1604.035191][ T27] audit: type=1326 audit(1603.772:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1604.063573][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1604.080277][ T27] audit: type=1326 audit(1603.772:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1604.107982][ T27] audit: type=1326 audit(1603.772:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24599 comm="syz.3.6288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1604.354015][T24617] loop3: detected capacity change from 0 to 512 [ 1604.367889][T24619] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6298'. [ 1604.383243][T24617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.448059][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.451200][T24623] loop1: detected capacity change from 0 to 512 [ 1604.503487][T24623] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.6299: inode #15: comm syz.1.6299: iget: illegal inode # [ 1604.530290][T24623] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6299: couldn't read orphan inode 15 (err -117) [ 1604.551083][T24623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.593619][T24623] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.6299: inode #15: comm syz.1.6299: iget: illegal inode # [ 1604.595475][T24628] netlink: 'syz.3.6301': attribute type 10 has an invalid length. [ 1604.633418][T24628] bond0: (slave dummy0): Releasing backup interface [ 1604.661598][T24628] team0: Port device dummy0 added [ 1604.683949][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.687094][T24628] netlink: 'syz.3.6301': attribute type 10 has an invalid length. [ 1604.726206][T24631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6302'. [ 1604.747188][T24628] team0: Port device dummy0 removed [ 1604.760353][T24628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1605.085737][T24647] loop0: detected capacity change from 0 to 512 [ 1605.176556][T24647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1605.298213][T24652] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 1605.309099][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.413047][T24654] siw: device registration error -23 [ 1605.467398][T24652] loop1: detected capacity change from 0 to 764 [ 1605.637127][T24652] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1607.371028][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.387130][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.690614][T24682] lo speed is unknown, defaulting to 1000 [ 1610.201913][T24687] __nla_validate_parse: 1 callbacks suppressed [ 1610.201934][T24687] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6324'. [ 1611.325269][ T27] kauditd_printk_skb: 295 callbacks suppressed [ 1611.325286][ T27] audit: type=1326 audit(1611.282:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.357170][ T27] audit: type=1326 audit(1611.312:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.395577][ T27] audit: type=1326 audit(1611.312:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.427708][ T27] audit: type=1326 audit(1611.312:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.450416][ T27] audit: type=1326 audit(1611.312:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.472678][ T27] audit: type=1326 audit(1611.342:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.494846][ T27] audit: type=1326 audit(1611.342:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.516590][T24707] loop0: detected capacity change from 0 to 1024 [ 1611.518881][ T27] audit: type=1326 audit(1611.342:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.556743][ T27] audit: type=1326 audit(1611.342:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.586232][ T27] audit: type=1326 audit(1611.342:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.3.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1611.619392][T24707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1611.656056][T24707] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1611.677346][T24707] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1611.690078][T24707] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1611.690078][T24707] [ 1611.700502][T24707] EXT4-fs (loop0): Total free blocks count 0 [ 1611.706526][T24707] EXT4-fs (loop0): Free/Dirty block details [ 1611.713685][T24707] EXT4-fs (loop0): free_blocks=4293918720 [ 1611.719441][T24707] EXT4-fs (loop0): dirty_blocks=80 [ 1611.724649][T24707] EXT4-fs (loop0): Block reservation details [ 1611.730965][T24707] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 1611.870764][T24716] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6333'. [ 1611.977372][T10530] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1612.918953][T24724] loop0: detected capacity change from 0 to 2048 [ 1613.034748][T24724] Alternate GPT is invalid, using primary GPT. [ 1613.051691][T24724] loop0: p2 p3 p7 [ 1613.343439][T24741] loop4: detected capacity change from 0 to 1024 [ 1613.524384][T24742] lo speed is unknown, defaulting to 1000 [ 1614.037964][T24741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1614.147460][T24741] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1614.460626][T24741] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1614.692528][T24753] loop0: detected capacity change from 0 to 40427 [ 1614.734598][T24753] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1614.742766][T24753] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1614.776976][T24753] F2FS-fs (loop0): invalid crc value [ 1614.838508][T24753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1615.142201][T24741] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1615.142201][T24741] [ 1615.162844][T24753] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1615.170357][T24753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1615.422975][T24741] EXT4-fs (loop4): Total free blocks count 0 [ 1615.429063][T24741] EXT4-fs (loop4): Free/Dirty block details [ 1615.436453][T24741] EXT4-fs (loop4): free_blocks=4293918720 [ 1615.458953][T24741] EXT4-fs (loop4): dirty_blocks=112 [ 1615.464739][T24741] EXT4-fs (loop4): Block reservation details [ 1615.471284][T24741] EXT4-fs (loop4): i_reserved_data_blocks=7 [ 1616.490741][T10528] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1616.657714][T24774] netlink: 'syz.4.6349': attribute type 13 has an invalid length. [ 1616.680643][T24771] netlink: 'syz.3.6350': attribute type 21 has an invalid length. [ 1616.699060][T24771] netlink: 'syz.3.6350': attribute type 1 has an invalid length. [ 1616.731976][T24771] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1616.822344][ T27] kauditd_printk_skb: 136 callbacks suppressed [ 1616.822364][ T27] audit: type=1326 audit(1616.742:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1616.851855][ T27] audit: type=1326 audit(1616.742:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1616.874748][ T27] audit: type=1326 audit(1616.742:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1616.932152][ T27] audit: type=1326 audit(1616.742:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1616.991730][ T27] audit: type=1326 audit(1616.742:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1617.130833][ T27] audit: type=1326 audit(1616.742:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1617.222508][ T27] audit: type=1326 audit(1616.742:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1617.284441][T24781] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1617.718436][ T27] audit: type=1326 audit(1616.742:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1617.752455][ T27] audit: type=1326 audit(1616.742:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1617.780552][ T27] audit: type=1326 audit(1616.742:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.3.6350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1617.984670][T24785] loop1: detected capacity change from 0 to 512 [ 1617.997467][T24785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1617.998820][T24787] loop4: detected capacity change from 0 to 1024 [ 1618.026676][T24785] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.6356: bad orphan inode 17 [ 1618.041409][T24787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1618.055147][T24785] EXT4-fs (loop1): Remounting filesystem read-only [ 1618.065421][T24771] loop3: detected capacity change from 0 to 512 [ 1618.075647][T24787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1618.087404][T24785] ext4_test_bit(bit=16, block=4) = 1 [ 1618.098328][T24771] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 1618.107611][T24785] is_bad_inode(inode)=0 [ 1618.117342][T24785] NEXT_ORPHAN(inode)=2147418128 [ 1618.132118][T24785] max_ino=32 [ 1618.135383][T24785] i_nlink=0 [ 1618.153578][T24787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.181983][T24785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.380788][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.402762][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1618.444101][T24771] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 1618.641265][T24796] lo speed is unknown, defaulting to 1000 [ 1619.275172][T24801] loop1: detected capacity change from 0 to 1024 [ 1619.361730][T24801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1619.535422][T24801] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1619.573871][T24801] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1619.605098][T24810] netlink: 'syz.0.6361': attribute type 10 has an invalid length. [ 1619.610449][T24801] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1619.610449][T24801] [ 1619.635177][T24801] EXT4-fs (loop1): Total free blocks count 0 [ 1619.643657][T24801] EXT4-fs (loop1): Free/Dirty block details [ 1619.649642][T24801] EXT4-fs (loop1): free_blocks=4293918720 [ 1619.650086][T24810] bond0: (slave dummy0): Releasing backup interface [ 1619.658307][T24801] EXT4-fs (loop1): dirty_blocks=112 [ 1619.667970][T24801] EXT4-fs (loop1): Block reservation details [ 1619.674285][T24801] EXT4-fs (loop1): i_reserved_data_blocks=7 [ 1619.685742][T24810] team0: Port device dummy0 added [ 1619.711879][T24813] netlink: 'syz.0.6361': attribute type 10 has an invalid length. [ 1619.749182][T24813] team0: Port device dummy0 removed [ 1619.775244][T24813] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1619.812162][T24815] netlink: 'syz.3.6364': attribute type 13 has an invalid length. [ 1619.813122][T10528] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1620.973128][T24825] loop1: detected capacity change from 0 to 1024 [ 1620.980824][T24825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1621.002035][T24825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1621.023492][T24825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1621.242400][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.259284][T24842] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1622.266121][T24842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1622.275188][T24842] vhci_hcd vhci_hcd.0: Device attached [ 1622.287076][T24842] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 1622.293739][T24842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1622.301408][T24842] vhci_hcd vhci_hcd.0: Device attached [ 1622.312090][T24842] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 1622.318759][T24842] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1622.326738][T24842] vhci_hcd vhci_hcd.0: Device attached [ 1622.336297][T24842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1622.359235][T24842] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 1622.365892][T24842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1622.374946][T24842] vhci_hcd vhci_hcd.0: Device attached [ 1622.389944][T24842] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 1622.396701][T24842] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1622.405025][T24842] vhci_hcd vhci_hcd.0: Device attached [ 1622.414814][T24842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1622.425805][T24842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1622.437139][T24842] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1622.456100][T24842] vhci_hcd vhci_hcd.0: port 0 already used [ 1622.495177][T24849] vhci_hcd: connection closed [ 1622.496029][T24845] vhci_hcd: connection closed [ 1622.496288][T24851] vhci_hcd: connection closed [ 1622.504075][T24843] vhci_hcd: connection closed [ 1622.506357][T10530] vhci_hcd: stop threads [ 1622.514941][T24847] vhci_hcd: connection closed [ 1622.524147][T10530] vhci_hcd: release socket [ 1622.538575][T10530] vhci_hcd: disconnect device [ 1622.547044][T10530] vhci_hcd: stop threads [ 1622.551821][T24204] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 1622.559929][T10530] vhci_hcd: release socket [ 1622.565191][T24844] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1622.566479][T10530] vhci_hcd: disconnect device [ 1622.576678][T10530] vhci_hcd: stop threads [ 1622.581084][T10530] vhci_hcd: release socket [ 1622.585595][T10530] vhci_hcd: disconnect device [ 1622.598971][T10530] vhci_hcd: stop threads [ 1622.603631][T10530] vhci_hcd: release socket [ 1622.608312][T10530] vhci_hcd: disconnect device [ 1622.619468][T10530] vhci_hcd: stop threads [ 1622.626847][T10530] vhci_hcd: release socket [ 1622.631714][T10530] vhci_hcd: disconnect device [ 1623.014326][T24815] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.023467][T24815] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.032952][T24815] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.042811][T24815] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.156375][T24856] loop1: detected capacity change from 0 to 1024 [ 1623.191755][T24856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.226242][T24856] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1623.246929][T24856] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 1623.260955][T24856] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1623.260955][T24856] [ 1623.277977][T24836] lo speed is unknown, defaulting to 1000 [ 1623.369977][T24856] EXT4-fs (loop1): Total free blocks count 0 [ 1623.397055][T24856] EXT4-fs (loop1): Free/Dirty block details [ 1623.435573][T24856] EXT4-fs (loop1): free_blocks=4293918720 [ 1623.445843][T24856] EXT4-fs (loop1): dirty_blocks=80 [ 1623.455943][T24856] EXT4-fs (loop1): Block reservation details [ 1623.462250][T24856] EXT4-fs (loop1): i_reserved_data_blocks=7 [ 1623.534425][T10550] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 92 with error 28 [ 1623.952062][T24875] siw: device registration error -23 [ 1624.786518][T24873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1624.800869][T24873] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1624.822748][T24882] loop3: detected capacity change from 0 to 1024 [ 1624.826706][T24881] syz.0.6381[24881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1624.829353][T24881] syz.0.6381[24881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1624.830505][T24882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1624.841549][T24873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1624.868907][T24882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1624.878965][T24873] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1624.897401][T24882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1624.916144][T24873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1624.923845][T24873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1624.938988][T24881] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1624.939458][T24873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1624.970628][T24873] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1625.150844][T24884] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 171: padding at end of block bitmap is not set [ 1625.195616][T24884] EXT4-fs (loop3): Remounting filesystem read-only [ 1625.244987][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.118239][T24899] netlink: 'syz.3.6388': attribute type 10 has an invalid length. [ 1626.127766][T24899] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1626.380011][T24907] bridge0: entered promiscuous mode [ 1626.386938][T24907] macsec0: entered promiscuous mode [ 1626.403448][T24907] bridge0: port 3(macsec0) entered blocking state [ 1626.415412][T24907] bridge0: port 3(macsec0) entered disabled state [ 1626.422446][T24907] macsec0: entered allmulticast mode [ 1626.427947][T24907] bridge0: entered allmulticast mode [ 1626.451658][T24907] macsec0: left allmulticast mode [ 1626.457346][T24907] bridge0: left allmulticast mode [ 1626.471130][T24907] bridge0: left promiscuous mode [ 1626.576593][T24909] siw: device registration error -23 [ 1626.800419][T20500] Bluetooth: hci2: command 0x0406 tx timeout [ 1626.880839][T20500] Bluetooth: hci1: command 0x0406 tx timeout [ 1626.960599][T20500] Bluetooth: hci0: command 0x0406 tx timeout [ 1626.967519][T20500] Bluetooth: hci3: command 0x0406 tx timeout [ 1627.264322][T24912] loop4: detected capacity change from 0 to 1024 [ 1627.272771][T24912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1627.303063][T24912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1627.375389][T24912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1627.467487][T24920] netlink: 'syz.3.6395': attribute type 10 has an invalid length. [ 1627.508115][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.730374][ T27] kauditd_printk_skb: 166 callbacks suppressed [ 1627.730392][ T27] audit: type=1326 audit(1627.682:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1627.779828][ T27] audit: type=1326 audit(1627.682:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1627.816834][T24204] vhci_hcd: vhci_device speed not set [ 1627.921205][T24935] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.929973][T24935] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.938763][T24935] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.947805][T24935] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1628.640505][ T27] audit: type=1326 audit(1627.732:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1628.860530][ T27] audit: type=1326 audit(1627.732:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1628.890398][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 1628.910990][ T27] audit: type=1326 audit(1627.732:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1628.940084][ T27] audit: type=1326 audit(1627.762:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1628.962582][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 1628.969377][ T27] audit: type=1326 audit(1627.762:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1628.991827][ T27] audit: type=1326 audit(1627.762:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1629.014781][ T27] audit: type=1326 audit(1627.762:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1629.042419][ T27] audit: type=1326 audit(1627.762:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24928 comm="syz.0.6401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1629.073532][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 1629.080809][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 1629.608576][T24948] loop0: detected capacity change from 0 to 1024 [ 1629.619938][T24948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1629.629780][T24948] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1629.649730][T24937] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1629.653349][T24948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.662707][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6407'. [ 1629.728521][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.736204][T24952] loop4: detected capacity change from 0 to 512 [ 1629.768193][T24952] EXT4-fs (loop4): 1 truncate cleaned up [ 1629.775380][T24952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1629.792838][ T5805] usb usb36-port1: attempt power cycle [ 1629.892069][T24955] netlink: 'syz.0.6408': attribute type 10 has an invalid length. [ 1629.928963][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.182919][T24964] netlink: 'syz.4.6411': attribute type 13 has an invalid length. [ 1630.566662][ T5805] usb usb36-port1: unable to enumerate USB device [ 1631.497217][T24978] lo speed is unknown, defaulting to 1000 [ 1632.009535][T24981] siw: device registration error -23 [ 1633.479505][T24987] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1633.527149][T24997] loop3: detected capacity change from 0 to 512 [ 1633.591894][T25001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6422'. [ 1633.619109][T24997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.698365][T24997] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.6421: corrupted inode contents [ 1633.769104][T24997] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #2: comm syz.3.6421: mark_inode_dirty error [ 1633.824960][T24997] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.6421: corrupted inode contents [ 1633.856944][T25006] netlink: 'syz.0.6423': attribute type 13 has an invalid length. [ 1633.874900][T25004] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.6421: corrupted inode contents [ 1633.889227][T25004] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #2: comm syz.3.6421: mark_inode_dirty error [ 1633.903426][T25004] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.6421: corrupted inode contents [ 1633.915921][T25004] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.6421: mark_inode_dirty error [ 1633.936469][T25004] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.6421: corrupted inode contents [ 1633.949118][T25004] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #2: comm syz.3.6421: mark_inode_dirty error [ 1634.155231][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.944169][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 1634.944186][ T27] audit: type=1326 audit(1634.902:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.040322][ T27] audit: type=1326 audit(1634.902:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.071277][T25006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.077614][ T27] audit: type=1326 audit(1634.942:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.078759][T25006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.150644][ T27] audit: type=1326 audit(1634.942:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.220292][ T27] audit: type=1326 audit(1634.942:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.300541][ T27] audit: type=1326 audit(1634.952:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.333134][T24960] syz.1.6410: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1635.360382][ T27] audit: type=1326 audit(1634.952:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.384426][T24960] CPU: 0 PID: 24960 Comm: syz.1.6410 Not tainted 6.6.93-syzkaller #0 [ 1635.392559][T24960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1635.402669][T24960] Call Trace: [ 1635.405984][T24960] [ 1635.408949][T24960] dump_stack_lvl+0x16c/0x230 [ 1635.413677][T24960] ? show_regs_print_info+0x20/0x20 [ 1635.418897][T24960] ? load_image+0x3b0/0x3b0 [ 1635.423420][T24960] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1635.429936][T24960] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1635.436465][T24960] warn_alloc+0x210/0x300 [ 1635.440813][T24960] ? zone_watermark_ok_safe+0x230/0x230 [ 1635.446371][T24960] ? _raw_spin_unlock+0x28/0x40 [ 1635.451252][T24960] __vmalloc_node_range+0x662/0x1320 [ 1635.456579][T24960] ? free_vm_area+0x50/0x50 [ 1635.461187][T24960] ? _raw_spin_unlock+0x28/0x40 [ 1635.466055][T24960] ? __kasan_kmalloc+0x8f/0xa0 [ 1635.470923][T24960] __vmalloc_node_range+0x568/0x1320 [ 1635.476222][T24960] ? hash_netiface_create+0x361/0xff0 [ 1635.481614][T24960] ? __asan_memset+0x22/0x40 [ 1635.486246][T24960] ? free_vm_area+0x50/0x50 [ 1635.490772][T24960] ? kvmalloc_node+0x70/0x180 [ 1635.495474][T24960] ? rcu_is_watching+0x15/0xb0 [ 1635.500249][T24960] ? kvmalloc_node+0x70/0x180 [ 1635.504937][T24960] ? trace_kmalloc+0x1f/0xa0 [ 1635.509535][T24960] kvmalloc_node+0x13f/0x180 [ 1635.514141][T24960] ? hash_netiface_create+0x361/0xff0 [ 1635.519525][T24960] hash_netiface_create+0x361/0xff0 [ 1635.524734][T24960] ? __lock_acquire+0x7c80/0x7c80 [ 1635.529769][T24960] ? __nla_parse+0x40/0x50 [ 1635.534194][T24960] ? hash_netport6_gc+0x570/0x570 [ 1635.539235][T24960] ip_set_create+0xa87/0x18e0 [ 1635.543920][T24960] ? ip_set_create+0x4b2/0x18e0 [ 1635.548783][T24960] ? ip_set_protocol+0x5d0/0x5d0 [ 1635.553721][T24960] ? trace_contention_end+0x39/0xe0 [ 1635.558959][T24960] nfnetlink_rcv_msg+0xb49/0x1130 [ 1635.563998][T24960] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1635.570085][T24960] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 1635.575310][T24960] ? nfnetlink_unbind+0x160/0x160 [ 1635.580365][T24960] ? __dev_queue_xmit+0x1a64/0x35a0 [ 1635.585573][T24960] ? __netlink_deliver_tap+0x5ab/0x830 [ 1635.591046][T24960] ? netlink_deliver_tap+0x19c/0x1b0 [ 1635.596345][T24960] ? netlink_unicast+0x72b/0x8c0 [ 1635.601288][T24960] ? netlink_sendmsg+0x8c1/0xbe0 [ 1635.606237][T24960] ? ____sys_sendmsg+0x5bf/0x950 [ 1635.611182][T24960] ? ___sys_sendmsg+0x220/0x290 [ 1635.616043][T24960] ? __se_sys_sendmsg+0x1a5/0x270 [ 1635.621072][T24960] ? do_syscall_64+0x55/0xb0 [ 1635.625690][T24960] netlink_rcv_skb+0x216/0x480 [ 1635.630469][T24960] ? nfnetlink_unbind+0x160/0x160 [ 1635.635512][T24960] ? netlink_ack+0x1110/0x1110 [ 1635.640311][T24960] ? apparmor_capable+0x137/0x1a0 [ 1635.645350][T24960] ? bpf_lsm_capable+0x9/0x10 [ 1635.650038][T24960] ? security_capable+0x89/0xb0 [ 1635.654911][T24960] nfnetlink_rcv+0x274/0x2180 [ 1635.659611][T24960] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1635.664997][T24960] ? lockdep_hardirqs_on+0x98/0x150 [ 1635.670293][T24960] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1635.675679][T24960] ? _local_bh_enable+0xa0/0xa0 [ 1635.680542][T24960] ? __dev_queue_xmit+0x245/0x35a0 [ 1635.685708][T24960] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1635.691278][T24960] ? __dev_queue_xmit+0x245/0x35a0 [ 1635.696442][T24960] ? ref_tracker_free+0x634/0x7d0 [ 1635.701585][T24960] ? __copy_skb_header+0xa7/0x550 [ 1635.706621][T24960] ? refcount_inc+0x70/0x70 [ 1635.711142][T24960] ? __skb_clone+0x63/0x790 [ 1635.715666][T24960] ? __skb_clone+0x480/0x790 [ 1635.720279][T24960] ? __netlink_deliver_tap+0x7e8/0x830 [ 1635.725771][T24960] ? netlink_deliver_tap+0x2e/0x1b0 [ 1635.730988][T24960] ? __lock_acquire+0x7c80/0x7c80 [ 1635.736033][T24960] ? netlink_deliver_tap+0x2e/0x1b0 [ 1635.741251][T24960] netlink_unicast+0x750/0x8c0 [ 1635.746126][T24960] netlink_sendmsg+0x8c1/0xbe0 [ 1635.750916][T24960] ? netlink_getsockopt+0x580/0x580 [ 1635.756138][T24960] ? aa_sock_msg_perm+0x94/0x150 [ 1635.761094][T24960] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1635.766390][T24960] ? security_socket_sendmsg+0x80/0xa0 [ 1635.771943][T24960] ? netlink_getsockopt+0x580/0x580 [ 1635.777158][T24960] ____sys_sendmsg+0x5bf/0x950 [ 1635.781938][T24960] ? __asan_memset+0x22/0x40 [ 1635.786542][T24960] ? __sys_sendmsg_sock+0x30/0x30 [ 1635.791569][T24960] ? __import_iovec+0x5f2/0x860 [ 1635.796436][T24960] ? import_iovec+0x73/0xa0 [ 1635.800946][T24960] ___sys_sendmsg+0x220/0x290 [ 1635.805632][T24960] ? __sys_sendmsg+0x270/0x270 [ 1635.810453][T24960] __se_sys_sendmsg+0x1a5/0x270 [ 1635.815311][T24960] ? __x64_sys_sendmsg+0x80/0x80 [ 1635.820266][T24960] ? lockdep_hardirqs_on+0x98/0x150 [ 1635.825474][T24960] do_syscall_64+0x55/0xb0 [ 1635.829899][T24960] ? clear_bhb_loop+0x40/0x90 [ 1635.834586][T24960] ? clear_bhb_loop+0x40/0x90 [ 1635.839296][T24960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1635.845233][T24960] RIP: 0033:0x7f41d2b8e929 [ 1635.849675][T24960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1635.869299][T24960] RSP: 002b:00007f41d3a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.877732][T24960] RAX: ffffffffffffffda RBX: 00007f41d2db5fa0 RCX: 00007f41d2b8e929 [ 1635.885720][T24960] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1635.893792][T24960] RBP: 00007f41d2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1635.901774][T24960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1635.910008][T24960] R13: 0000000000000000 R14: 00007f41d2db5fa0 R15: 00007fff6f8bc328 [ 1635.918089][T24960] [ 1635.930275][ T27] audit: type=1326 audit(1634.972:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.940288][T24960] Mem-Info: [ 1635.952355][ T27] audit: type=1326 audit(1634.972:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1635.958893][T24960] active_anon:3367 inactive_anon:0 isolated_anon:0 [ 1635.958893][T24960] active_file:17651 inactive_file:40522 isolated_file:0 [ 1635.958893][T24960] unevictable:768 dirty:192 writeback:0 [ 1635.958893][T24960] slab_reclaimable:11622 slab_unreclaimable:148315 [ 1635.958893][T24960] mapped:24092 shmem:1439 pagetables:408 [ 1635.958893][T24960] sec_pagetables:0 bounce:0 [ 1635.958893][T24960] kernel_misc_reclaimable:0 [ 1635.958893][T24960] free:1253469 free_pcp:11815 free_cma:0 [ 1635.977969][ T27] audit: type=1326 audit(1634.972:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25019 comm="syz.3.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9576b8e929 code=0x7ffc0000 [ 1636.075240][T24960] Node 0 active_anon:13468kB inactive_anon:0kB active_file:70604kB inactive_file:161888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96368kB dirty:764kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10804kB pagetables:1632kB sec_pagetables:0kB all_unreclaimable? no [ 1636.114619][T24960] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1636.175178][T24960] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1636.237742][T24960] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1636.256997][T24960] Node 0 DMA32 free:1105008kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:13420kB inactive_anon:0kB active_file:70604kB inactive_file:160572kB unevictable:1536kB writepending:764kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:23636kB local_pcp:12676kB free_cma:0kB [ 1636.296939][T24960] lowmem_reserve[]: 0 0 1 1 1 [ 1636.306550][T24960] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1636.442980][T24960] lowmem_reserve[]: 0 0 0 0 0 [ 1636.515947][T24960] Node 1 Normal free:3893020kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23968kB local_pcp:18240kB free_cma:0kB [ 1636.604204][T24960] lowmem_reserve[]: 0 0 0 0 0 [ 1636.609109][T24960] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1636.626670][T24960] Node 0 DMA32: 1426*4kB (ME) 1277*8kB (ME) 570*16kB (ME) 517*32kB (ME) 277*64kB (UME) 78*128kB (ME) 30*256kB (UME) 19*512kB (M) 8*1024kB (UM) 3*2048kB (ME) 245*4096kB (M) = 1104560kB [ 1636.745568][T24960] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1636.982523][T24960] Node 1 Normal: 213*4kB (UME) 45*8kB (UME) 36*16kB (UME) 73*32kB (UME) 30*64kB (UE) 3*128kB (UM) 2*256kB (UE) 2*512kB (ME) 0*1024kB 1*2048kB (E) 948*4096kB (UM) = 3893020kB [ 1637.049511][T24960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1637.060513][T24960] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1637.073886][T24960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1637.083563][T24960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1637.093033][T24960] 59541 total pagecache pages [ 1637.097733][T24960] 0 pages in swap cache [ 1637.102698][T24960] Free swap = 124416kB [ 1637.106894][T24960] Total swap = 124996kB [ 1637.116016][T24960] 2097051 pages RAM [ 1637.119876][T24960] 0 pages HighMem/MovableOnly [ 1637.134807][T24960] 416120 pages reserved [ 1637.139193][T24960] 0 pages cma reserved [ 1637.207062][T25006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1637.290502][T25006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1637.989137][T25006] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.998808][T25006] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.007884][T25006] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.017029][T25006] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.222276][T25006] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1638.232317][T25006] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1638.241931][T25006] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1638.251234][T25006] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1638.287514][T25029] netlink: 'syz.3.6429': attribute type 21 has an invalid length. [ 1638.295949][T25029] netlink: 'syz.3.6429': attribute type 1 has an invalid length. [ 1638.304093][T25029] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6429'. [ 1638.337367][T25034] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1638.478498][T25041] loop4: detected capacity change from 0 to 512 [ 1638.504834][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6432'. [ 1638.522367][T25043] netlink: 'syz.3.6434': attribute type 10 has an invalid length. [ 1638.539978][T25045] bond0: (slave dummy0): Releasing backup interface [ 1638.556739][T25041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1638.571225][T25045] bridge_slave_0: left allmulticast mode [ 1638.576934][T25045] bridge_slave_0: left promiscuous mode [ 1638.622329][T25045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.666043][T25045] bridge_slave_1: left allmulticast mode [ 1638.685621][T25045] bridge_slave_1: left promiscuous mode [ 1638.712105][T25045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.735857][T25045] bond0: (slave bond_slave_0): Releasing backup interface [ 1638.758281][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1638.768518][T25045] bond0: (slave bond_slave_1): Releasing backup interface [ 1638.779643][T25045] team0: Port device team_slave_0 removed [ 1638.826431][T25045] team0: Port device team_slave_1 removed [ 1638.850807][T25045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.882464][T25045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.214625][T25062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6438'. [ 1639.271846][T25039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1639.278035][T25039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1639.293963][T25039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1639.307158][T25039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1639.331102][T25064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6439'. [ 1639.340421][T25064] netem: change failed [ 1639.841891][T25069] netlink: 'syz.4.6440': attribute type 13 has an invalid length. [ 1640.509104][T25076] netlink: 'syz.3.6443': attribute type 10 has an invalid length. [ 1640.560440][T20500] Bluetooth: hci2: command 0x0406 tx timeout [ 1640.634064][T25074] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1640.655655][T25086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6448'. [ 1640.910563][T25098] @: renamed from vlan0 (while UP) [ 1640.957692][T25099] netlink: 'syz.3.6453': attribute type 13 has an invalid length. [ 1641.067326][T25104] loop4: detected capacity change from 0 to 512 [ 1641.081454][T25104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1641.097878][T25104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1641.143181][T25109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1641.145494][T25104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1641.185554][T25107] netlink: 'syz.0.6456': attribute type 10 has an invalid length. [ 1641.259991][T25107] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1641.285890][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1641.285908][ T27] audit: type=1800 audit(1641.242:6438): pid=25104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6454" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1641.300831][T20500] Bluetooth: hci1: command 0x0406 tx timeout [ 1641.336974][ T27] audit: type=1800 audit(1641.282:6439): pid=25104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6454" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1641.370748][T20500] Bluetooth: hci0: command 0x0406 tx timeout [ 1641.377007][T20500] Bluetooth: hci3: command 0x0406 tx timeout [ 1641.386760][ T27] audit: type=1800 audit(1641.322:6440): pid=25104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6454" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1641.676910][T25118] pim6reg1: entered promiscuous mode [ 1641.720278][T25118] pim6reg1: entered allmulticast mode [ 1641.904083][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.129202][T25126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1642.138482][T25126] netlink: 'syz.4.6462': attribute type 2 has an invalid length. [ 1642.287467][T25132] netlink: 'syz.0.6465': attribute type 13 has an invalid length. [ 1642.370826][T25116] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 1642.415604][T25138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6466'. [ 1642.557484][T25143] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6470'. [ 1642.745049][T25148] netlink: 'syz.1.6469': attribute type 10 has an invalid length. [ 1642.977623][T25145] loop4: detected capacity change from 0 to 40427 [ 1642.987563][T25145] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1642.995440][T25145] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1643.012434][T25145] F2FS-fs (loop4): invalid crc value [ 1643.051329][T25145] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1643.114993][T25145] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1643.119231][T25160] netlink: 'syz.1.6476': attribute type 13 has an invalid length. [ 1643.122155][T25145] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1643.198042][T25163] loop3: detected capacity change from 0 to 512 [ 1643.298434][T25163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.388494][ T27] audit: type=1800 audit(1643.332:6441): pid=25163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6475" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1643.416649][ T27] audit: type=1800 audit(1643.372:6442): pid=25163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6475" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1644.493450][T25160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.500899][T25160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.959012][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1645.012027][T25160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1645.953762][T25160] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.963082][T25160] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.972469][T25160] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.982274][T25160] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.073979][T25160] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.083140][T25160] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.092399][T25160] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.101640][T25160] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.133909][T25170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6477'. [ 1646.147255][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6475'. [ 1646.185017][T25172] team1: entered promiscuous mode [ 1646.190678][T25172] team1: entered allmulticast mode [ 1646.199851][T25180] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 1646.288155][T25190] loop4: detected capacity change from 0 to 128 [ 1646.309233][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.321247][T25190] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1646.437534][T25193] loop0: detected capacity change from 0 to 1024 [ 1646.479225][T25193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1646.513871][T25193] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1646.545598][T21536] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1646.579250][T25193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.736263][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1646.900343][ T27] audit: type=1326 audit(1646.852:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1646.955186][ T27] audit: type=1326 audit(1646.852:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.017980][ T27] audit: type=1326 audit(1646.882:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.076800][ T27] audit: type=1326 audit(1646.882:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.103664][T25218] loop1: detected capacity change from 0 to 1024 [ 1647.121503][ T27] audit: type=1326 audit(1646.882:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.147657][T25218] EXT4-fs: Ignoring removed nobh option [ 1647.173613][ T27] audit: type=1326 audit(1646.892:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.188331][T25218] EXT4-fs: Ignoring removed bh option [ 1647.220345][ T27] audit: type=1326 audit(1646.892:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.229056][T25218] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1647.282186][ T27] audit: type=1326 audit(1646.892:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.319515][ T27] audit: type=1326 audit(1646.892:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.342519][ T27] audit: type=1326 audit(1646.902:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25209 comm="syz.1.6491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d2b8e929 code=0x7ffc0000 [ 1647.381130][T25218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.438895][T25230] loop0: detected capacity change from 0 to 1024 [ 1647.489779][T25230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1647.511230][T25230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1647.538205][T25230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.544961][T25233] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1647.564404][T25233] team0: Device macvtap1 is already an upper device of the team interface [ 1647.644433][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.657599][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.236545][T25253] netlink: 'syz.3.6509': attribute type 21 has an invalid length. [ 1648.245310][T25253] netlink: 'syz.3.6509': attribute type 1 has an invalid length. [ 1648.255215][T25253] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6509'. [ 1649.312369][T25264] loop3: detected capacity change from 0 to 1024 [ 1649.354967][T25266] siw: device registration error -23 [ 1649.509494][T25264] EXT4-fs: Ignoring removed nobh option [ 1649.631086][T25264] EXT4-fs: Ignoring removed bh option [ 1649.733238][T25264] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1650.039252][T25264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1650.439090][T25280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6518'. [ 1650.458229][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.567510][T25282] netlink: 'syz.3.6519': attribute type 21 has an invalid length. [ 1650.576939][T25282] netlink: 'syz.3.6519': attribute type 1 has an invalid length. [ 1650.585241][T25282] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6519'. [ 1651.888108][T25301] siw: device registration error -23 [ 1652.481079][ T27] kauditd_printk_skb: 83 callbacks suppressed [ 1652.481101][ T27] audit: type=1326 audit(1652.382:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.548452][ T27] audit: type=1326 audit(1652.382:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.571289][ T27] audit: type=1326 audit(1652.392:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.589825][T25311] netlink: 'syz.1.6530': attribute type 21 has an invalid length. [ 1652.593520][ T27] audit: type=1326 audit(1652.392:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.624657][ T27] audit: type=1326 audit(1652.392:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.629645][T25309] loop4: detected capacity change from 0 to 1024 [ 1652.646988][ T27] audit: type=1326 audit(1652.392:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.647041][ T27] audit: type=1326 audit(1652.392:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.647084][ T27] audit: type=1326 audit(1652.392:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.647126][ T27] audit: type=1326 audit(1652.392:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.647169][ T27] audit: type=1326 audit(1652.402:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25307 comm="syz.4.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8f6d8e929 code=0x7ffc0000 [ 1652.647987][T25311] netlink: 'syz.1.6530': attribute type 1 has an invalid length. [ 1652.781305][T25309] EXT4-fs: Ignoring removed nobh option [ 1652.787159][T25309] EXT4-fs: Ignoring removed bh option [ 1652.793918][T25311] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6530'. [ 1652.823760][T25309] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1652.893431][T25309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1653.218497][T25323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6534'. [ 1653.422746][T25325] siw: device registration error -23 [ 1654.118361][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.221614][T25330] loop0: detected capacity change from 0 to 1024 [ 1654.228952][T25330] EXT4-fs: Ignoring removed i_version option [ 1654.248735][T25330] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1654.315332][T25313] loop3: detected capacity change from 0 to 512 [ 1654.349471][T25330] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.6536: Invalid block bitmap block 0 in block_group 0 [ 1654.367598][T25330] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.6536: Failed to acquire dquot type 0 [ 1654.386240][T25313] EXT4-fs: Ignoring removed i_version option [ 1654.395609][T25330] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.6536: Freeing blocks not in datazone - block = 0, count = 4096 [ 1654.413532][T25330] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6536: Invalid inode bitmap blk 0 in block_group 0 [ 1654.440482][T25330] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 1654.449359][T25330] EXT4-fs (loop0): 1 orphan inode deleted [ 1654.457430][T25330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.485135][T25313] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1654.508679][T25313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 1654.534312][T25313] System zones: 1-12 [ 1654.543013][T25313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1654.563879][T25313] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.6531: invalid indirect mapped block 12 (level 1) [ 1654.605602][T25313] EXT4-fs (loop3): Remounting filesystem read-only [ 1654.623358][T25313] EXT4-fs (loop3): 1 truncate cleaned up [ 1654.644505][T25313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1654.729603][T25313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6531'. [ 1654.756027][T25313] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6531'. [ 1654.797195][T25338] netlink: 'syz.1.6540': attribute type 21 has an invalid length. [ 1654.819745][T25338] netlink: 'syz.1.6540': attribute type 1 has an invalid length. [ 1654.845877][T25338] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6540'. [ 1655.122040][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1655.555095][T25344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6544'. [ 1655.960864][T10550] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:22: Failed to release dquot type 0 [ 1656.226334][T25358] loop4: detected capacity change from 0 to 1024 [ 1656.272909][T25358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1656.283360][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.287439][T25358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1656.391913][T25358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1656.496183][T21536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.508269][T25364] netlink: 'syz.0.6549': attribute type 21 has an invalid length. [ 1656.526692][T25364] netlink: 'syz.0.6549': attribute type 1 has an invalid length. [ 1656.536740][T25364] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1656.838216][T25373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1658.434630][T25425] loop3: detected capacity change from 0 to 1024 [ 1658.442068][T25425] EXT4-fs: Ignoring removed i_version option [ 1658.468646][T25425] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1658.602901][T25427] team0: Device is already in use. [ 1658.628128][T25425] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.6558: Invalid block bitmap block 0 in block_group 0 [ 1658.651918][T25425] __quota_error: 27 callbacks suppressed [ 1658.651939][T25425] Quota error (device loop3): write_blk: dquota write failed [ 1658.666199][T25425] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1658.676300][T25425] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.6558: Failed to acquire dquot type 0 [ 1658.690764][T25425] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.6558: Freeing blocks not in datazone - block = 0, count = 4096 [ 1658.707895][T25425] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.6558: Invalid inode bitmap blk 0 in block_group 0 [ 1658.737483][T25430] loop0: detected capacity change from 0 to 1024 [ 1658.764997][T25425] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 1658.774766][T10543] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 1658.774767][T25425] EXT4-fs (loop3): 1 orphan inode deleted [ 1658.785285][T25425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.836646][T25432] netlink: 'syz.4.6560': attribute type 21 has an invalid length. [ 1658.850315][T10543] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:20: Failed to release dquot type 0 [ 1658.880620][T25432] netlink: 'syz.4.6560': attribute type 1 has an invalid length. [ 1658.901270][T25430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1658.908474][T25432] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6560'. [ 1658.921757][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.940519][T25430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1659.012272][T25430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.095188][T25437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6562'. [ 1659.105423][T25437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6562'. [ 1659.151416][T25436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6563'. [ 1659.176043][T20764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.466927][T25443] loop3: detected capacity change from 0 to 512 [ 1659.547147][T25450] siw: device registration error -23 [ 1659.882359][T25443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.407397][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. Stopping sshd: [ 1660.797596][T25467] loop3: detected capacity change from 0 to 1024 [ 1660.836862][T25467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1660.864747][T25467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1660.905871][T25467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. stopped /usr/sbin/sshd (pid 5528) OK Stopping crond: [ 1661.148062][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. stopped /usr/sbin/crond (pid 5511) OK [ 1661.592551][T25489] siw: device registration error -23 Stopping dhcpcd... no /sbin/dhcpcd found; none killed [ 1663.527385][T25506] loop1: detected capacity change from 0 to 1024 [ 1663.573494][T25506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1663.592994][T25506] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1663.608998][T25506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1663.707368][T25515] netlink: 'syz.0.6588': attribute type 10 has an invalid length. Stopping network: [ 1663.759766][T20982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.002250][ T27] audit: type=1326 audit(1663.962:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.062969][ T27] audit: type=1326 audit(1663.982:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.135411][ T27] audit: type=1326 audit(1663.982:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.189033][ T27] audit: type=1326 audit(1663.982:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.268954][ T27] audit: type=1326 audit(1663.982:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.331491][ T27] audit: type=1326 audit(1663.982:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.410318][ T27] audit: type=1326 audit(1663.982:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.482731][ T27] audit: type=1326 audit(1664.002:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.536311][T25536] netlink: 'syz.1.6593': attribute type 21 has an invalid length. [ 1664.565028][T25536] netlink: 'syz.1.6593': attribute type 1 has an invalid length. [ 1664.574827][ T27] audit: type=1326 audit(1664.212:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1664.603692][T25536] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6593'. [ 1664.658003][ T27] audit: type=1326 audit(1664.212:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.0.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 OK [ 1665.056782][T25548] netlink: 'syz.1.6598': attribute type 10 has an invalid length. Stopping iptables: [ 1665.208771][T25555] loop3: detected capacity change from 0 to 512 OK [ 1665.273615][T25555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1665.279908][T25563] netlink: 'syz.1.6604': attribute type 21 has an invalid length. [ 1665.296074][T25563] netlink: 'syz.1.6604': attribute type 1 has an invalid length. [ 1665.303999][T25563] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6604'. [ 1665.318953][T25560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6603'. [ 1665.397906][T20492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. Stopping system message bus: [ 1665.476394][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6605'. done [ 1665.991785][T25585] netlink: 'syz.4.6612': attribute type 10 has an invalid length. [ 1666.185505][T25593] netlink: 'syz.0.6614': attribute type 21 has an invalid length. [ 1666.198063][T25593] netlink: 'syz.0.6614': attribute type 1 has an invalid length. [ 1666.208454][T25593] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6614'. [ 1666.239609][T25567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1666.246868][T25567] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1666.260704][T25567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1666.290736][T25567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1666.418148][T25600] gtp0: entered promiscuous mode [ 1666.431955][T25600] gtp0: entered allmulticast mode [ 1666.639414][T25604] netlink: 'syz.3.6619': attribute type 21 has an invalid length. [ 1666.683241][T25604] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1666.826175][T25610] siw: device registration error -23 [ 1667.600403][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 1667.856367][T25618] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6625'. killall: udevd: no process killed [ 1668.070327][T25604] loop3: detected capacity change from 0 to 512 [ 1668.093779][T25604] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 1668.101147][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1668.246115][T25604] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 Stopping klogd: [ 1668.321750][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 1668.328093][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 1668.332272][T20500] Bluetooth: hci1: command 0x0406 tx timeout start-stop-daemon: warning: killing process 5131: No such process FAIL Stopping acpid: [ 1668.780032][T25650] validate_nla: 4 callbacks suppressed [ 1668.780052][T25650] netlink: 'syz.3.6634': attribute type 21 has an invalid length. [ 1668.794829][T25650] netlink: 'syz.3.6634': attribute type 1 has an invalid length. [ 1668.809577][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.830122][T25650] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6634'. [ 1668.844692][T25622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1668.861499][T25622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1668.866694][T25654] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 1668.867612][T25622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1668.901240][T25654] loop0: detected capacity change from 0 to 764 [ 1668.910349][T25622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1668.938830][T25654] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1669.225868][T25664] netlink: 'syz.4.6640': attribute type 10 has an invalid length. [ 1669.319599][T25668] siw: device registration error -23 OK [ 1670.105872][T20500] Bluetooth: hci2: command 0x0406 tx timeout [ 1670.153402][T25671] netlink: 'syz.0.6642': attribute type 21 has an invalid length. Stopping syslogd: [ 1670.182527][T25671] netlink: 'syz.0.6642': attribute type 1 has an invalid length. [ 1670.200675][T25671] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1670.236489][ T27] kauditd_printk_skb: 122 callbacks suppressed [ 1670.236507][ T27] audit: type=1326 audit(1670.192:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.290386][ T27] audit: type=1326 audit(1670.192:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 stopped /sbin/syslogd (pid 5124) OK [ 1670.380261][ T27] audit: type=1326 audit(1670.192:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.440293][ T27] audit: type=1326 audit(1670.192:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.462892][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1670.493040][ T27] audit: type=1326 audit(1670.192:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.560912][ T27] audit: type=1326 audit(1670.192:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.626591][ T27] audit: type=1326 audit(1670.192:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.722364][ T27] audit: type=1326 audit(1670.202:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.807088][ T27] audit: type=1326 audit(1670.202:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.808866][T25695] netlink: 'syz.1.6651': attribute type 10 has an invalid length. [ 1670.884554][T20500] Bluetooth: hci3: command 0x0406 tx timeout [ 1670.891812][T25636] Bluetooth: hci1: command 0x0406 tx timeout [ 1670.911200][ T27] audit: type=1326 audit(1670.222:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.0.6642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6276f8e929 code=0x7ffc0000 [ 1670.960431][T20500] Bluetooth: hci0: command 0x0406 tx timeout [ 1671.034195][T25671] loop0: detected capacity change from 0 to 512 [ 1671.059981][T25671] EXT4-fs (loop0): external journal device major/minor numbers have changed umount: can't remount debugfs read-only [ 1671.170018][T25682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1671.176696][T25682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1671.184610][T25682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1671.193901][T25682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1671.277421][T25671] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6 [ 1672.554358][T25720] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 1672.569962][T20500] Bluetooth: hci2: command 0x0406 tx timeout [ 1672.583027][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'. [ 1672.891769][T25741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1673.107636][T25749] gtp1: entered promiscuous mode [ 1673.122480][T25749] gtp1: entered allmulticast mode [ 1673.200881][T20500] Bluetooth: hci0: command 0x0406 tx timeout [ 1673.206979][T20500] Bluetooth: hci3: command 0x0406 tx timeout [ 1673.213433][T25636] Bluetooth: hci1: command 0x0406 tx timeout [ 1673.327277][T25758] netlink: 'syz.4.6673': attribute type 21 has an invalid length. [ 1673.342622][T25758] netlink: 'syz.4.6673': attribute type 1 has an invalid length. [ 1673.345715][T25736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.363984][T25758] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6673'. [ 1673.367203][T25736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1673.426598][T25736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1673.454696][T25736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1674.642268][T20500] Bluetooth: hci2: command 0x0406 tx timeout [ 1674.672190][T25777] bond0: (slave veth0_to_hsr): Error: Device is in use and cannot be enslaved [ 1674.712813][T25774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6680'. [ 1674.728911][T25755] loop4: detected capacity change from 0 to 512 [ 1674.794040][T25755] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1675.164180][T25755] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 1675.364541][T25791] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1675.440611][T20500] Bluetooth: hci3: command 0x0406 tx timeout [ 1675.440699][T25636] Bluetooth: hci1: command 0x0406 tx timeout [ 1675.520388][T25636] Bluetooth: hci0: command 0x0406 tx timeout [ 1675.685820][T25796] netlink: 'syz.4.6690': attribute type 10 has an invalid length. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.182 closed by remote host. Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 1678.117944][T25801] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1678.142363][T25801] ACPI: PM: Preparing to enter system sleep state S5 [ 1678.157899][T25801] kvm: exiting hardware virtualization [ 1678.167774][T25419] hsr_slave_0: left promiscuous mode [ 1678.173226][T25801] reboot: Power down serialport: VM disconnected.