last executing test programs: 1m39.884121283s ago: executing program 4 (id=377): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd41e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x2020005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x88, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 1m39.841039625s ago: executing program 4 (id=379): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @random="ecbeba5e4101", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "87404a1521cd01f9df5ed1edadd5f225602902d238b3605ef3d3776442bc6a4a", "f34f90b9c395844234c7cdd78918f38e", {"876f904f4b9b8b0be78ecf3ecf498db8", "6fce414cc0adba1f2cab5d665e273346"}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) 1m39.787457269s ago: executing program 4 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x29, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x12090, 0x10000, 0x28c7dbd0, 0x6, 0xb3d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1m39.259359819s ago: executing program 4 (id=388): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m39.214596342s ago: executing program 4 (id=389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/41, &(0x7f0000000080)=0x29) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @rand_addr=' \x01\x00', 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x108}}], 0x1, 0x0) 1m37.846376861s ago: executing program 4 (id=413): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000180)={0x0, 0x5, 0x10000}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 1m37.336900741s ago: executing program 32 (id=413): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000180)={0x0, 0x5, 0x10000}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 1m23.01996906s ago: executing program 0 (id=700): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x43, 0x4}}], 0x18}}], 0x1, 0x810) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 1m22.923130676s ago: executing program 0 (id=703): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c4, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.872106099s ago: executing program 0 (id=705): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)="dc02e8", 0x3}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1m22.811958823s ago: executing program 0 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) 1m22.731542017s ago: executing program 0 (id=713): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x5c, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x8af, 0x7, 0x2, 0x401, 0x7fffffff}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814) 1m22.519357569s ago: executing program 0 (id=719): prctl$PR_SET_SECUREBITS(0x1c, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') pread64(r0, &(0x7f0000000080)=""/162, 0xa2, 0x9) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1m22.51874358s ago: executing program 33 (id=719): prctl$PR_SET_SECUREBITS(0x1c, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') pread64(r0, &(0x7f0000000080)=""/162, 0xa2, 0x9) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 1m13.090444076s ago: executing program 1 (id=938): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m13.042764709s ago: executing program 1 (id=940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800804, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m13.00643637s ago: executing program 1 (id=942): r0 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) r1 = epoll_create(0xaf2) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 1m12.148502921s ago: executing program 1 (id=959): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) 1m11.79357015s ago: executing program 1 (id=963): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu=_0!|!') 1m11.332312287s ago: executing program 1 (id=974): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1m11.273784141s ago: executing program 34 (id=974): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 38.261141884s ago: executing program 7 (id=1724): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7c8, &(0x7f0000001a80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x20) 38.056430615s ago: executing program 7 (id=1729): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {0x7, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0xfffffffe, 0x33}, 0x0, @in6=@loopback, 0x1000, 0x4, 0x3, 0xff, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7}]}]}, 0x13c}}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 37.929624403s ago: executing program 7 (id=1732): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0x8) 37.821014759s ago: executing program 7 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0) 37.785217971s ago: executing program 7 (id=1738): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)=@newlink={0x38, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)="6f3d12caa129679e", 0x8, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) 36.840788486s ago: executing program 7 (id=1746): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00006c5000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x6, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x80000000, 0x0) 36.824735457s ago: executing program 35 (id=1746): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00006c5000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x6, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x80000000, 0x0) 18.313476269s ago: executing program 2 (id=2078): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 18.230239364s ago: executing program 2 (id=2080): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) 17.287884469s ago: executing program 2 (id=2091): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000000500)="00ac", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) 16.254658619s ago: executing program 2 (id=2111): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@grpjquota}, {@debug}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f00000005c0)="$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") mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 15.923285928s ago: executing program 2 (id=2118): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 15.779912856s ago: executing program 2 (id=2123): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 15.766472157s ago: executing program 36 (id=2123): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.221337144s ago: executing program 8 (id=2345): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.067289621s ago: executing program 8 (id=2355): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2.023963483s ago: executing program 6 (id=2356): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.917345609s ago: executing program 8 (id=2358): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x29, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x12090, 0x10000, 0x28c7dbd0, 0x6, 0xb3d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 1.513762683s ago: executing program 6 (id=2377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.325397313s ago: executing program 3 (id=2369): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000080)='./control\x00', 0x44) rmdir(&(0x7f0000000280)='./control\x00') r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) 1.321811714s ago: executing program 6 (id=2380): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, 0x0, 0x20000040) 1.232902199s ago: executing program 3 (id=2371): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = dup(r0) shutdown(r1, 0x1) recvmsg$inet_nvme(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000122) 1.231007329s ago: executing program 5 (id=2372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x845}, 0x8000) 1.181648922s ago: executing program 3 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}, [{0x8, 0xb, 0xb60}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.112107256s ago: executing program 8 (id=2375): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 1.070731088s ago: executing program 5 (id=2376): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 877.11096ms ago: executing program 5 (id=2381): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="11"], 0x11) 831.001692ms ago: executing program 3 (id=2383): r0 = socket$inet6(0xa, 0x5, 0x0) setuid(0xee00) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) 787.435255ms ago: executing program 5 (id=2384): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 762.211916ms ago: executing program 6 (id=2394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000101"], 0xd8}}, 0x0) 761.798526ms ago: executing program 8 (id=2385): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 755.527497ms ago: executing program 3 (id=2387): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 568.029738ms ago: executing program 5 (id=2388): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000900)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000240)) 561.998138ms ago: executing program 3 (id=2390): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x3c, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mq_timedreceive(r0, &(0x7f0000000280)=""/196, 0xc4, 0x27, 0x0) mq_timedreceive(r0, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) 550.915518ms ago: executing program 8 (id=2391): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="701f09"], 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) 490.106522ms ago: executing program 5 (id=2392): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 320.498732ms ago: executing program 6 (id=2396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000100085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 206.907918ms ago: executing program 9 (id=2397): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000150a0102000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 206.382349ms ago: executing program 6 (id=2398): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = epoll_create1(0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa000202f}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x10}) 166.491891ms ago: executing program 9 (id=2399): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@quota}, {@errors_continue}, {@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0xfe, 0x5cb, &(0x7f0000000c40)="$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") 136.830793ms ago: executing program 9 (id=2400): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4439, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x10009, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 103.366614ms ago: executing program 9 (id=2401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 24.628849ms ago: executing program 9 (id=2402): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) dup3(r0, r2, 0x80000) 0s ago: executing program 9 (id=2403): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140)={[{@delalloc}, {@noload}, {@mb_optimize_scan}, {@nodiscard}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(1770968290.851:641): avc: denied { setattr } for pid=6737 comm="syz.6.1096" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.263925][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.612434][ T6758] netlink: 'syz.2.1105': attribute type 6 has an invalid length. [ 92.630459][ T6758] netlink: 'syz.2.1105': attribute type 5 has an invalid length. [ 92.647822][ T6758] netlink: 'syz.2.1105': attribute type 6 has an invalid length. [ 92.665873][ T6758] netlink: 'syz.2.1105': attribute type 5 has an invalid length. [ 92.729664][ T28] audit: type=1326 audit(1770968291.381:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 92.798248][ T28] audit: type=1326 audit(1770968291.381:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 92.863852][ T28] audit: type=1326 audit(1770968291.381:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 92.897221][ T28] audit: type=1326 audit(1770968291.381:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 92.986650][ T28] audit: type=1326 audit(1770968291.381:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 93.015562][ T28] audit: type=1326 audit(1770968291.391:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 93.041268][ T28] audit: type=1326 audit(1770968291.391:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 93.082302][ T28] audit: type=1326 audit(1770968291.391:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 93.110199][ T28] audit: type=1326 audit(1770968291.391:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 93.145686][ T6783] __nla_validate_parse: 5 callbacks suppressed [ 93.145764][ T6783] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1116'. [ 93.153049][ T28] audit: type=1326 audit(1770968291.401:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.2.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 93.189464][ T6783] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 93.197618][ T6783] ..0ªî{X¹¦: entered allmulticast mode [ 93.203948][ T6783] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 93.281416][ T6789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6789 comm=syz.7.1118 [ 93.342850][ T6793] loop2: detected capacity change from 0 to 1024 [ 93.377655][ T6797] sd 0:0:1:0: device reset [ 93.394640][ T6793] EXT4-fs: Ignoring removed orlov option [ 93.401001][ T6793] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 93.470780][ T6799] loop7: detected capacity change from 0 to 512 [ 93.490309][ T6793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.507978][ T6799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.521555][ T6799] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.558476][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.584041][ T6292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.606356][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 93.615466][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 93.712803][ T6822] loop5: detected capacity change from 0 to 1024 [ 93.736004][ T6822] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 93.749848][ T6822] System zones: 0-1, 3-36 [ 93.771281][ T6822] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1129: bad orphan inode 134217728 [ 93.783841][ T6822] loop5: lost filesystem error report for type 5 error -117 [ 93.866561][ T6832] loop6: detected capacity change from 0 to 128 [ 93.953494][ T6838] loop2: detected capacity change from 0 to 2048 [ 93.999589][ T6838] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.141974][ T6846] loop7: detected capacity change from 0 to 1024 [ 94.159631][ T6846] EXT4-fs: Ignoring removed nobh option [ 94.165373][ T6846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.167459][ T6844] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1136: bg 0: block 345: padding at end of block bitmap is not set [ 94.194719][ T6844] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1598 with error 117 [ 94.231524][ T6844] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.231524][ T6844] [ 94.266577][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1614 with max blocks 1 with error 28 [ 94.336761][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.336761][ T12] [ 94.346567][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 94.352703][ T12] EXT4-fs (loop2): Free/Dirty block details [ 94.358651][ T12] EXT4-fs (loop2): free_blocks=0 [ 94.363699][ T12] EXT4-fs (loop2): dirty_blocks=16 [ 94.368884][ T12] EXT4-fs (loop2): Block reservation details [ 94.374907][ T12] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 94.490886][ T6857] loop6: detected capacity change from 0 to 512 [ 94.498728][ T6857] EXT4-fs: Ignoring removed bh option [ 94.514429][ T6857] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 94.545407][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1145'. [ 94.557587][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1145'. [ 94.603099][ T6857] EXT4-fs (loop6): 1 truncate cleaned up [ 94.807774][ T6880] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.1153'. [ 94.838277][ T6880] netlink: zone id is out of range [ 94.843519][ T6880] netlink: zone id is out of range [ 94.867417][ T6880] netlink: zone id is out of range [ 94.872638][ T6880] netlink: zone id is out of range [ 94.882526][ T6880] netlink: zone id is out of range [ 94.893553][ T6880] netlink: zone id is out of range [ 94.903910][ T6876] loop6: detected capacity change from 0 to 8192 [ 94.907084][ T6880] netlink: zone id is out of range [ 94.921089][ T6880] netlink: del zone limit has 8 unknown bytes [ 95.214019][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.228453][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.323436][ T1716] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.720362][ T6938] loop6: detected capacity change from 0 to 32768 [ 95.773775][ T6938] loop6: p1 p3 < > [ 95.990337][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 96.066304][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1191'. [ 96.093992][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.116696][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1191'. [ 96.141929][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.189909][ T6988] xt_hashlimit: size too large, truncated to 1048576 [ 96.198186][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1197'. [ 96.451310][ T408] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 96.463779][ T408] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.469414][ T7007] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 96.488311][ T7007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1206'. [ 96.498988][ T7007] team0: Port device geneve1 added [ 96.504306][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.512728][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.521235][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.541201][ T408] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 96.563355][ T408] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.594497][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.631832][ T408] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 96.642384][ T408] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.682064][ T408] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 96.695834][ T408] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.806178][ T408] bridge_slave_1: left allmulticast mode [ 96.812730][ T408] bridge_slave_1: left promiscuous mode [ 96.818823][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.827728][ T408] bridge_slave_0: left allmulticast mode [ 96.834538][ T408] bridge_slave_0: left promiscuous mode [ 96.840557][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.908393][ T7042] loop3: detected capacity change from 0 to 256 [ 96.989899][ T408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.000291][ T408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.010737][ T408] bond0 (unregistering): Released all slaves [ 97.021728][ T7013] chnl_net:caif_netlink_parms(): no params data found [ 97.065501][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.075559][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.082938][ T7013] bridge_slave_0: entered allmulticast mode [ 97.095128][ T7013] bridge_slave_0: entered promiscuous mode [ 97.121693][ T408] hsr_slave_0: left promiscuous mode [ 97.137582][ T408] hsr_slave_1: left promiscuous mode [ 97.152213][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.160292][ T408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.171998][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.179670][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.192673][ T408] veth1_macvtap: left promiscuous mode [ 97.198360][ T408] veth0_macvtap: left promiscuous mode [ 97.203956][ T408] veth1_vlan: left promiscuous mode [ 97.212093][ T408] veth0_vlan: left promiscuous mode [ 97.313751][ T408] team0 (unregistering): Port device team_slave_1 removed [ 97.326274][ T408] team0 (unregistering): Port device team_slave_0 removed [ 97.365935][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.367583][ T4690] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.373117][ T4774] Bluetooth: hci0: command 0x1003 tx timeout [ 97.385459][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.402381][ T7013] bridge_slave_1: entered allmulticast mode [ 97.412983][ T7013] bridge_slave_1: entered promiscuous mode [ 97.438032][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.449179][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.474506][ T7013] team0: Port device team_slave_0 added [ 97.483757][ T7013] team0: Port device team_slave_1 added [ 97.512873][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.538767][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.575502][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.589071][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.603946][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.632330][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.713958][ T7013] hsr_slave_0: entered promiscuous mode [ 97.720901][ T7090] loop2: detected capacity change from 0 to 512 [ 97.736521][ T7013] hsr_slave_1: entered promiscuous mode [ 97.742860][ T7090] EXT4-fs: Ignoring removed bh option [ 97.760106][ T7013] debugfs: 'hsr0' already exists in 'hsr' [ 97.774657][ T7090] EXT4-fs: inline encryption not supported [ 97.776787][ T7013] Cannot create hsr debugfs directory [ 97.808499][ T7090] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.879311][ T7090] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 97.944487][ T7090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1224: bg 0: block 248: padding at end of block bitmap is not set [ 97.976608][ T7090] loop2: lost filesystem error report for type 5 error -117 [ 97.976907][ T7090] __quota_error: 71 callbacks suppressed [ 97.976928][ T7090] Quota error (device loop2): write_blk: dquota write failed [ 97.998429][ T7090] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.008737][ T7090] EXT4-fs error (device loop2): ext4_acquire_dquot:6998: comm syz.2.1224: Failed to acquire dquot type 1 [ 98.031613][ T7090] loop2: lost filesystem error report for type 5 error -117 [ 98.077488][ T7090] EXT4-fs (loop2): 1 truncate cleaned up [ 98.103739][ T7114] loop6: detected capacity change from 0 to 128 [ 98.124683][ T7114] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.147803][ T7118] loop3: detected capacity change from 0 to 128 [ 98.193661][ T7118] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 98.202027][ T7114] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.224848][ T7118] ext2 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.270504][ T331] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.345659][ T7013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.376259][ T7013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.399070][ T7013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.415194][ T7013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.425935][ T7140] netlink: 'syz.7.1237': attribute type 13 has an invalid length. [ 98.434017][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1237'. [ 98.454224][ T7140] netlink: 'syz.7.1237': attribute type 13 has an invalid length. [ 98.462832][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1237'. [ 98.463513][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.481022][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.496357][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.518661][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.590365][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.638642][ T7159] netlink: 'syz.2.1240': attribute type 3 has an invalid length. [ 98.650500][ T7159] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 98.663057][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.682843][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.689981][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.690855][ T7159] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1240'. [ 98.729929][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.737150][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.797202][ T7013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.953408][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.127695][ T7219] loop6: detected capacity change from 0 to 4096 [ 99.169987][ T7228] loop2: detected capacity change from 0 to 128 [ 99.202294][ T28] audit: type=1400 audit(1770968297.861:723): avc: denied { setattr } for pid=7231 comm="syz.7.1259" name="/" dev="configfs" ino=1914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.267973][ T7228] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.376368][ T7228] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.1258: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 99.457705][ T7013] veth0_vlan: entered promiscuous mode [ 99.465537][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1264'. [ 99.489865][ T7013] veth1_vlan: entered promiscuous mode [ 99.493546][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1264'. [ 99.507827][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1264'. [ 99.530145][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1264'. [ 99.547687][ T7013] veth0_macvtap: entered promiscuous mode [ 99.556135][ T7013] veth1_macvtap: entered promiscuous mode [ 99.612450][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.638103][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.671258][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.720336][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.747453][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.778345][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.851963][ T7279] loop7: detected capacity change from 0 to 1024 [ 99.911226][ T7279] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1272'. [ 99.917331][ T28] audit: type=1400 audit(1770968298.571:724): avc: denied { nlmsg_read } for pid=7278 comm="syz.7.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.988119][ T7276] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1271'. [ 99.997602][ T7276] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 100.103972][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1280'. [ 100.184025][ T7317] syz.2.1287: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 100.211712][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.2.1287 Tainted: G W syzkaller #0 PREEMPT(full) [ 100.211833][ T7317] Tainted: [W]=WARN [ 100.211843][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.211859][ T7317] Call Trace: [ 100.211867][ T7317] [ 100.211876][ T7317] __dump_stack+0x1d/0x30 [ 100.211906][ T7317] dump_stack_lvl+0x95/0xd0 [ 100.211933][ T7317] dump_stack+0x15/0x1b [ 100.211956][ T7317] warn_alloc+0x145/0x1c0 [ 100.212027][ T7317] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 100.212131][ T7317] ? __futex_wait+0x1fd/0x260 [ 100.212216][ T7317] ? __pfx_futex_wake_mark+0x10/0x10 [ 100.212248][ T7317] ? __rcu_read_unlock+0x4e/0x70 [ 100.212292][ T7317] ? avc_has_perm_noaudit+0xab/0x130 [ 100.212335][ T7317] ? should_fail_ex+0x30/0x280 [ 100.212428][ T7317] ? xskq_create+0x36/0xe0 [ 100.212494][ T7317] vmalloc_user_noprof+0x7d/0xb0 [ 100.212539][ T7317] ? xskq_create+0x80/0xe0 [ 100.212573][ T7317] xskq_create+0x80/0xe0 [ 100.212716][ T7317] xsk_init_queue+0x91/0xe0 [ 100.212794][ T7317] xsk_setsockopt+0x477/0x640 [ 100.212824][ T7317] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.212854][ T7317] __sys_setsockopt+0x184/0x200 [ 100.212952][ T7317] __x64_sys_setsockopt+0x64/0x80 [ 100.212979][ T7317] x64_sys_call+0x2327/0x3020 [ 100.213054][ T7317] do_syscall_64+0x12c/0x370 [ 100.213091][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.213119][ T7317] RIP: 0033:0x7fc5d4e1bf79 [ 100.213140][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.213164][ T7317] RSP: 002b:00007fc5d386f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.213255][ T7317] RAX: ffffffffffffffda RBX: 00007fc5d5095fa0 RCX: 00007fc5d4e1bf79 [ 100.213273][ T7317] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 100.213288][ T7317] RBP: 00007fc5d4eb27e0 R08: 0000000000000004 R09: 0000000000000000 [ 100.213304][ T7317] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 100.213319][ T7317] R13: 00007fc5d5096038 R14: 00007fc5d5095fa0 R15: 00007ffc56a174e8 [ 100.213344][ T7317] [ 100.265357][ T7320] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 100.267188][ T7317] Mem-Info: [ 100.473847][ T7317] active_anon:9314 inactive_anon:1 isolated_anon:0 [ 100.473847][ T7317] active_file:20869 inactive_file:3865 isolated_file:0 [ 100.473847][ T7317] unevictable:0 dirty:336 writeback:0 [ 100.473847][ T7317] slab_reclaimable:3572 slab_unreclaimable:40259 [ 100.473847][ T7317] mapped:29080 shmem:209 pagetables:5761 [ 100.473847][ T7317] sec_pagetables:0 bounce:0 [ 100.473847][ T7317] kernel_misc_reclaimable:0 [ 100.473847][ T7317] free:1852297 free_pcp:8304 free_cma:0 [ 100.519652][ T7317] Node 0 active_anon:37256kB inactive_anon:4kB active_file:83476kB inactive_file:15460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116320kB dirty:1344kB writeback:0kB shmem:836kB kernel_stack:4176kB pagetables:23044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 100.577603][ T50] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.604754][ T50] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.625120][ T50] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.640590][ T7317] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 100.670553][ T50] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.689478][ T7317] lowmem_reserve[]: 0 2880 7858 7858 [ 100.696073][ T7317] Node 0 DMA32 free:2945740kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949268kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 100.729448][ T7317] lowmem_reserve[]: 0 0 4978 4978 [ 100.734627][ T7317] Node 0 Normal free:4449712kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37488kB inactive_anon:4kB active_file:83476kB inactive_file:15432kB unevictable:0kB writepending:1336kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:28072kB local_pcp:5100kB free_cma:0kB [ 100.771122][ T7317] lowmem_reserve[]: 0 0 0 0 [ 100.776924][ T7317] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.801704][ T7317] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 4*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2945740kB [ 100.820165][ T7317] Node 0 Normal: 510*4kB (UME) 1263*8kB (UME) 658*16kB (UM) 569*32kB (UME) 371*64kB (UME) 213*128kB (UME) 131*256kB (UM) 110*512kB (UM) 102*1024kB (UME) 83*2048kB (UM) 975*4096kB (UM) = 4449776kB [ 100.841879][ T7317] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 100.851346][ T7317] 24932 total pagecache pages [ 100.856218][ T7317] 1 pages in swap cache [ 100.860475][ T7317] Free swap = 124980kB [ 100.864845][ T7317] Total swap = 124996kB [ 100.869190][ T7317] 2097051 pages RAM [ 100.873146][ T7317] 0 pages HighMem/MovableOnly [ 100.878089][ T7317] 81334 pages reserved [ 101.111621][ T7374] netlink: 'syz.2.1300': attribute type 4 has an invalid length. [ 101.318410][ T28] audit: type=1400 audit(1770968299.961:725): avc: denied { shutdown } for pid=7384 comm="syz.3.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.530298][ T28] audit: type=1400 audit(1770968300.191:726): avc: denied { setopt } for pid=7413 comm="syz.3.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.086967][ T7466] loop7: detected capacity change from 0 to 512 [ 102.113260][ T7466] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 102.121457][ T7466] EXT4-fs (loop7): orphan cleanup on readonly fs [ 102.131367][ T7466] EXT4-fs warning (device loop7): ext4_enable_quotas:7233: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 102.146822][ T7466] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 102.154187][ T7466] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.1323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 102.172471][ T7466] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.180018][ T7473] loop5: detected capacity change from 0 to 128 [ 102.195707][ T7466] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1323: couldn't read orphan inode 13 (err -117) [ 102.211528][ T7466] loop7: lost filesystem error report for type 5 error -117 [ 102.215205][ T7466] EXT4-fs mount: 18 callbacks suppressed [ 102.215221][ T7466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.241704][ T7473] bio_check_eod: 46 callbacks suppressed [ 102.241776][ T7473] syz.5.1327: attempt to access beyond end of device [ 102.241776][ T7473] loop5: rw=8390657, sector=171, nr_sectors = 1 limit=128 [ 102.262010][ T7473] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 102.276579][ T7466] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 102.288232][ T7466] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 102.332600][ T7466] EXT4-fs warning (device loop7): ext4_enable_quotas:7233: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 102.384605][ T7466] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 102.394117][ T7466] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 102.426824][ T7466] EXT4-fs warning (device loop7): ext4_enable_quotas:7233: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 102.544632][ T7497] netlink: 'syz.2.1337': attribute type 39 has an invalid length. [ 102.553438][ T7497] hsr_slave_1 (unregistering): left promiscuous mode [ 102.562406][ T6292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.603506][ T28] audit: type=1400 audit(1770968301.261:727): avc: denied { accept } for pid=7499 comm="syz.7.1338" path="socket:[17397]" dev="sockfs" ino=17397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.692608][ T7506] loop2: detected capacity change from 0 to 128 [ 102.728513][ T7509] loop6: detected capacity change from 0 to 2048 [ 102.739218][ T7506] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 102.757928][ T7506] FAT-fs (loop2): Filesystem has been set read-only [ 102.765606][ T7509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.790255][ T7506] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 102.940719][ T12] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 102.955753][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 102.968590][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 102.968590][ T12] [ 103.000945][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 103.011400][ T12] EXT4-fs (loop6): Free/Dirty block details [ 103.022929][ T12] EXT4-fs (loop6): free_blocks=2415919504 [ 103.034383][ T12] EXT4-fs (loop6): dirty_blocks=208 [ 103.045348][ T12] EXT4-fs (loop6): Block reservation details [ 103.056871][ T12] EXT4-fs (loop6): i_reserved_data_blocks=13 [ 103.071350][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.136742][ T7533] loop5: detected capacity change from 0 to 512 [ 103.144125][ T7533] EXT4-fs: Ignoring removed i_version option [ 103.150585][ T7533] EXT4-fs: Ignoring removed bh option [ 103.170010][ T7533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.184812][ T7533] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.222860][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.669805][ T7580] loop7: detected capacity change from 0 to 1024 [ 103.713540][ T28] audit: type=1326 audit(1770968558.367:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 103.753082][ T28] audit: type=1326 audit(1770968558.367:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 103.782298][ T28] audit: type=1326 audit(1770968558.367:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 103.809281][ T7580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.878705][ T7592] netlink: 'syz.5.1377': attribute type 83 has an invalid length. [ 103.889768][ T6292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.935470][ T28] audit: type=1326 audit(1770968558.367:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 103.970215][ T7596] loop7: detected capacity change from 0 to 1024 [ 103.985281][ T28] audit: type=1326 audit(1770968558.367:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 104.010446][ T7596] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.030681][ T7596] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 104.044785][ T7599] __nla_validate_parse: 6 callbacks suppressed [ 104.044799][ T7599] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1380'. [ 104.069736][ T7596] JBD2: no valid journal superblock found [ 104.077404][ T28] audit: type=1326 audit(1770968558.367:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 104.105254][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1380'. [ 104.114939][ T7596] EXT4-fs (loop7): Could not load journal inode [ 104.131861][ T28] audit: type=1326 audit(1770968558.387:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 104.155640][ T7596] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 104.197834][ T28] audit: type=1326 audit(1770968558.397:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 104.225210][ T28] audit: type=1326 audit(1770968558.397:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 104.266379][ T28] audit: type=1326 audit(1770968558.397:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d4e1bf79 code=0x7ffc0000 [ 104.297558][ T7603] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 104.345053][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1385'. [ 104.383895][ T7611] loop7: detected capacity change from 0 to 512 [ 104.420855][ T7611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.433849][ T7611] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.450660][ T7611] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 104.465616][ T7611] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 104.479465][ T7611] EXT4-fs (loop7): This should not happen!! Data will be lost [ 104.479465][ T7611] [ 104.490373][ T7611] EXT4-fs (loop7): Total free blocks count 0 [ 104.496486][ T7611] EXT4-fs (loop7): Free/Dirty block details [ 104.502585][ T7611] EXT4-fs (loop7): free_blocks=65280 [ 104.507975][ T7611] EXT4-fs (loop7): dirty_blocks=33 [ 104.518605][ T7611] EXT4-fs (loop7): Block reservation details [ 104.532979][ T7611] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 104.556835][ T7624] loop6: detected capacity change from 0 to 128 [ 104.590562][ T6292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.639232][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.639232][ T7629] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 104.654074][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.654074][ T7629] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 104.668113][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.668113][ T7629] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 104.681844][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.681844][ T7629] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 104.704269][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.704269][ T7629] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 104.717706][ T7632] loop7: detected capacity change from 0 to 764 [ 104.739056][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.739056][ T7629] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 104.752738][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.752738][ T7629] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 104.766117][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.766117][ T7629] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 104.779410][ T7629] syz.6.1391: attempt to access beyond end of device [ 104.779410][ T7629] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 104.848388][ T7638] EXT4-fs: Ignoring removed orlov option [ 104.855465][ T7638] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.862575][ T7638] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.883555][ T7638] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.1397: corrupted in-inode xattr: e_value size too large [ 104.905218][ T7638] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.908871][ T7638] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1397: couldn't read orphan inode 15 (err -117) [ 104.931415][ T7641] vfat: Unknown parameter '18446744073709551615ÿÿ£P}úò2Í'|8QŒuºÚ¢ÓáT' [ 104.942046][ T7638] loop7: lost filesystem error report for type 5 error -117 [ 104.948095][ T7638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.994804][ T6292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.156998][ T3295] loop2: p1 p3 p4 [ 105.162065][ T3295] loop2: p4 size 589824 extends beyond EOD, truncated [ 105.180000][ T7655] loop2: p1 p3 p4 [ 105.186057][ T7663] EXT4-fs: Ignoring removed bh option [ 105.194719][ T7655] loop2: p4 size 589824 extends beyond EOD, truncated [ 105.204281][ T7663] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 105.246245][ T7663] EXT4-fs (loop6): 1 truncate cleaned up [ 105.260965][ T7663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.308638][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 105.312043][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 105.330298][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 105.371697][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.487692][ T7681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.503203][ T7687] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 105.541646][ T7685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.576057][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.597122][ T7696] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967280. macoff=96 [ 105.652917][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.865108][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.909997][ T7714] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.611605][ T7746] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 106.627482][ T7746] EXT4-fs (loop7): orphan cleanup on readonly fs [ 106.659448][ T7746] EXT4-fs error (device loop7): ext4_acquire_dquot:6998: comm syz.7.1442: Failed to acquire dquot type 1 [ 106.713475][ T7746] loop7: lost filesystem error report for type 5 error -117 [ 106.713720][ T7746] EXT4-fs (loop7): Remounting filesystem read-only [ 106.777400][ T7746] EXT4-fs (loop7): 1 truncate cleaned up [ 106.783299][ T36] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 106.805594][ T36] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 106.826489][ T36] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 106.836817][ T7751] veth0: entered promiscuous mode [ 106.842527][ T7751] veth0: left promiscuous mode [ 106.848118][ T7746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 106.861394][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.921948][ T6292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 106.932228][ T7755] netlink: 'syz.2.1444': attribute type 2 has an invalid length. [ 106.940206][ T7755] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1444'. [ 107.271044][ T7784] netlink: 'syz.5.1458': attribute type 39 has an invalid length. [ 107.308503][ T7784] hsr_slave_1 (unregistering): left promiscuous mode [ 108.015934][ T7839] Process accounting resumed [ 108.046062][ T7843] set_capacity_and_notify: 8 callbacks suppressed [ 108.046077][ T7843] loop2: detected capacity change from 0 to 764 [ 108.093384][ T7847] loop2: detected capacity change from 0 to 1024 [ 108.109583][ T7847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.135023][ T7847] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.150456][ T7847] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1488: bg 0: block 112: padding at end of block bitmap is not set [ 108.183058][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.753915][ T7869] syzkaller1: entered promiscuous mode [ 108.764019][ T7869] syzkaller1: entered allmulticast mode [ 109.585455][ T7907] loop5: detected capacity change from 0 to 2048 [ 109.630601][ T7907] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.682308][ T7907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.711556][ T7907] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1514: bg 0: block 234: padding at end of block bitmap is not set [ 109.763336][ T7907] EXT4-fs (loop5): Remounting filesystem read-only [ 109.770243][ T7907] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 109.794261][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.011696][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1520'. [ 110.062570][ T7931] netlink: 'syz.7.1521': attribute type 18 has an invalid length. [ 110.093948][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1521'. [ 110.115016][ T7931] netlink: 'syz.7.1521': attribute type 18 has an invalid length. [ 110.148130][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1521'. [ 110.245603][ T7940] loop3: detected capacity change from 0 to 512 [ 110.273240][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1526'. [ 110.282775][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1526'. [ 110.302076][ T7940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.316912][ T7940] ext4 filesystem being mounted at /275/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.320681][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1526'. [ 110.338218][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1526'. [ 110.370553][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.515097][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1532'. [ 110.548618][ T30] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.568274][ T30] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.577153][ T30] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.606356][ T30] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.083437][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1542'. [ 111.226147][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 111.226164][ T28] audit: type=1326 audit(2000000003.210:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.287296][ T28] audit: type=1326 audit(2000000003.210:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.319109][ T7990] loop6: detected capacity change from 0 to 512 [ 111.350120][ T7990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.353489][ T28] audit: type=1326 audit(2000000003.220:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.419041][ T7990] EXT4-fs (loop6): 1 truncate cleaned up [ 111.425356][ T7990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.434857][ T28] audit: type=1326 audit(2000000003.240:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.540369][ T28] audit: type=1326 audit(2000000003.240:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.577569][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.586775][ T28] audit: type=1326 audit(2000000003.250:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.614148][ T28] audit: type=1326 audit(2000000003.250:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.637772][ T28] audit: type=1326 audit(2000000003.250:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.728823][ T28] audit: type=1326 audit(2000000003.250:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 111.776415][ T8009] loop5: detected capacity change from 0 to 8192 [ 111.783432][ T28] audit: type=1326 audit(2000000003.250:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 112.004995][ T8028] netlink: 'syz.5.1562': attribute type 1 has an invalid length. [ 112.449136][ T8038] loop6: detected capacity change from 0 to 8192 [ 112.474264][ T8038] macvlan2: entered promiscuous mode [ 112.487978][ T8038] batman_adv: batadv0: Adding interface: macvlan2 [ 112.494553][ T8038] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.537361][ T8038] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 112.634603][ T8040] tipc: Started in network mode [ 112.654017][ T8040] tipc: Node identity 405d, cluster identity 4711 [ 112.660992][ T8040] tipc: Enabling of bearer rejected, failed to enable media [ 113.039588][ T8063] netlink: 'syz.5.1578': attribute type 1 has an invalid length. [ 113.082965][ T8063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.115044][ T8065] bond1: (slave geneve2): making interface the new active one [ 113.136178][ T8065] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 113.159494][ T331] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.176234][ T331] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.206030][ T331] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.234342][ T331] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.284887][ T8067] hub 3-0:1.0: USB hub found [ 113.295248][ T8067] hub 3-0:1.0: 8 ports detected [ 113.398333][ T8071] veth1_to_bridge: entered allmulticast mode [ 113.410803][ T8071] veth1_to_bridge: left allmulticast mode [ 114.118898][ T8084] loop2: detected capacity change from 0 to 256 [ 114.130376][ T8084] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 114.288289][ T8112] loop6: detected capacity change from 0 to 128 [ 114.310688][ T8112] sg_write: data in/out 32732/8 bytes for SCSI command 0xbd-- guessing data in; [ 114.310688][ T8112] program syz.6.1597 not setting count and/or reply_len properly [ 114.466345][ T8126] ip6gre1: entered promiscuous mode [ 114.472034][ T8126] ip6gre1: entered allmulticast mode [ 114.486366][ T1716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.495276][ T8126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.498730][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1605'. [ 114.503866][ T1716] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.512580][ T8130] netlink: 'syz.6.1606': attribute type 2 has an invalid length. [ 114.519463][ T4587] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.536936][ T8130] netlink: 'syz.6.1606': attribute type 4 has an invalid length. [ 114.672207][ T8143] bridge0: port 3(vlan3) entered blocking state [ 114.679793][ T8143] bridge0: port 3(vlan3) entered disabled state [ 114.686464][ T8143] vlan3: entered allmulticast mode [ 114.691754][ T8143] bridge0: entered allmulticast mode [ 114.697674][ T8143] vlan3: left allmulticast mode [ 114.702594][ T8143] bridge0: left allmulticast mode [ 114.707601][ T4581] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.718439][ T8146] team0 (unregistering): Port device team_slave_0 removed [ 114.726410][ T8146] team0 (unregistering): Port device team_slave_1 removed [ 114.736373][ T8146] team0 (unregistering): Port device geneve1 removed [ 114.747949][ T331] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.756987][ T331] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.766332][ T331] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.775007][ T331] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.916792][ T8165] loop6: detected capacity change from 0 to 512 [ 114.947714][ T4585] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.976871][ T8165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.801551][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.863030][ T8195] loop2: detected capacity change from 0 to 1024 [ 115.871243][ T8198] __nla_validate_parse: 5 callbacks suppressed [ 115.871260][ T8198] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1632'. [ 115.936547][ T8195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.953259][ T8195] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1631: Allocating blocks 449-513 which overlap fs metadata [ 116.015148][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.025804][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1636'. [ 116.034885][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1636'. [ 116.079480][ T8206] geneve2: entered promiscuous mode [ 116.095256][ T8206] geneve2: entered allmulticast mode [ 116.197698][ T8210] loop6: detected capacity change from 0 to 8192 [ 116.228729][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 116.228747][ T28] audit: type=1400 audit(2000000008.220:854): avc: denied { mount } for pid=8209 comm="syz.6.1638" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 116.296077][ T8232] loop3: detected capacity change from 0 to 1024 [ 116.301446][ T8230] netlink: 'syz.2.1647': attribute type 10 has an invalid length. [ 116.304780][ T28] audit: type=1400 audit(2000000008.250:855): avc: denied { create } for pid=8209 comm="syz.6.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.337586][ T8232] EXT4-fs: Ignoring removed orlov option [ 116.345093][ T8232] EXT4-fs: Ignoring removed bh option [ 116.368195][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 116.380394][ T28] audit: type=1400 audit(2000000008.260:856): avc: denied { prog_load } for pid=8229 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.401245][ T28] audit: type=1400 audit(2000000008.260:857): avc: denied { bpf } for pid=8229 comm="syz.2.1647" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.447650][ T8239] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1650'. [ 116.458385][ T28] audit: type=1400 audit(2000000008.280:858): avc: denied { perfmon } for pid=8229 comm="syz.2.1647" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.480094][ T8232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.480846][ T28] audit: type=1400 audit(2000000008.280:859): avc: denied { execmem } for pid=8227 comm="syz.5.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.512734][ T28] audit: type=1400 audit(2000000008.280:860): avc: denied { execute } for pid=8227 comm="syz.5.1646" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 116.539212][ T28] audit: type=1400 audit(2000000008.280:861): avc: denied { prog_run } for pid=8229 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.558847][ T28] audit: type=1400 audit(2000000008.280:862): avc: denied { open } for pid=8229 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.578236][ T28] audit: type=1400 audit(2000000008.280:863): avc: denied { kernel } for pid=8229 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.664144][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.749702][ T8248] loop5: detected capacity change from 0 to 8192 [ 116.779741][ T8248] bio_check_eod: 52 callbacks suppressed [ 116.779755][ T8248] syz.5.1654: attempt to access beyond end of device [ 116.779755][ T8248] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 117.053355][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 117.209425][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 117.783112][ T8310] vhci_hcd vhci_hcd.2: invalid port number 96 [ 117.789334][ T8310] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 117.819417][ T8315] loop2: detected capacity change from 0 to 1024 [ 117.866101][ T8315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.011770][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.111030][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1688'. [ 118.144384][ T8333] bond1: option mode: unable to set because the bond device has slaves [ 118.247322][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.489802][ T8340] loop6: detected capacity change from 0 to 32768 [ 118.502081][ T8359] loop2: detected capacity change from 0 to 512 [ 118.521929][ T8359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.535137][ T8359] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.546502][ T3295] loop6: p1 p3 < > [ 118.548889][ T8359] EXT4-fs (loop2): shut down requested (0) [ 118.576574][ T8340] loop6: p1 p3 < > [ 118.624272][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.719684][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 118.747334][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 118.908258][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 118.933051][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 118.975013][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 118.985370][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 119.422656][ T8420] netlink: 'syz.6.1723': attribute type 10 has an invalid length. [ 119.506727][ T8420] team0: Port device netdevsim1 added [ 119.563069][ T8428] loop6: detected capacity change from 0 to 1024 [ 119.608294][ T8428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.863475][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.962153][ T8452] loop2: detected capacity change from 0 to 512 [ 119.986447][ T8452] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 120.010113][ T8451] loop6: detected capacity change from 0 to 4096 [ 120.034861][ T8452] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1739: bg 0: block 104: invalid block bitmap [ 120.071425][ T8451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.106161][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.116751][ T8452] loop2: lost filesystem error report for type 5 error -117 [ 120.116914][ T8452] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 120.159585][ T8452] loop2: lost filesystem error report for type 5 error -117 [ 120.159761][ T8452] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1739: invalid indirect mapped block 1 (level 1) [ 120.328121][ T8452] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.328454][ T8452] EXT4-fs (loop2): 1 truncate cleaned up [ 120.344269][ T8452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.448103][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.762273][ T8468] loop2: detected capacity change from 0 to 128 [ 120.880624][ T408] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.897802][ T408] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.968866][ T408] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.008069][ T408] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.110580][ T408] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.121699][ T408] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.238211][ T408] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.251168][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 121.251187][ T28] audit: type=1400 audit(2000000013.239:997): avc: denied { name_bind } for pid=8500 comm="syz.6.1754" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.280455][ T408] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.378626][ T28] audit: type=1400 audit(2000000013.369:998): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 121.438025][ T408] bridge_slave_1: left allmulticast mode [ 121.443891][ T28] audit: type=1400 audit(2000000013.429:999): avc: denied { search } for pid=3032 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.468841][ T408] bridge_slave_1: left promiscuous mode [ 121.485954][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.510965][ T28] audit: type=1400 audit(2000000013.429:1000): avc: denied { search } for pid=3032 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.537468][ T408] bridge_slave_0: left allmulticast mode [ 121.543332][ T408] bridge_slave_0: left promiscuous mode [ 121.553632][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.585174][ T28] audit: type=1400 audit(2000000013.429:1001): avc: denied { search } for pid=3032 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.627461][ T28] audit: type=1400 audit(2000000013.429:1002): avc: denied { read } for pid=3032 comm="dhcpcd" name="n43" dev="tmpfs" ino=9340 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.667112][ T28] audit: type=1400 audit(2000000013.429:1003): avc: denied { open } for pid=3032 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=9340 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.693508][ T28] audit: type=1400 audit(2000000013.429:1004): avc: denied { getattr } for pid=3032 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=9340 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.725616][ T8522] __nla_validate_parse: 2 callbacks suppressed [ 121.725636][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1761'. [ 121.727763][ T28] audit: type=1400 audit(2000000013.549:1005): avc: denied { create } for pid=8511 comm="syz.5.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.799083][ T28] audit: type=1400 audit(2000000013.559:1006): avc: denied { connect } for pid=8511 comm="syz.5.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.930113][ T408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.944745][ T8534] loop2: detected capacity change from 0 to 512 [ 121.955837][ T408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.966072][ T408] bond0 (unregistering): Released all slaves [ 121.974924][ T8534] EXT4-fs: Ignoring removed nobh option [ 121.992351][ T8534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.050277][ T408] hsr_slave_0: left promiscuous mode [ 122.076099][ T8534] EXT4-fs (loop2): 1 truncate cleaned up [ 122.098037][ T8543] loop6: detected capacity change from 0 to 1024 [ 122.105037][ T8534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.105913][ T408] hsr_slave_1: left promiscuous mode [ 122.123250][ T8543] EXT4-fs: Ignoring removed orlov option [ 122.136670][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.144497][ T408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.186719][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.197166][ T8543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.197397][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.241029][ T408] veth1_macvtap: left promiscuous mode [ 122.246665][ T408] veth0_macvtap: left promiscuous mode [ 122.246974][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.261268][ T408] veth1_vlan: left promiscuous mode [ 122.266588][ T408] veth0_vlan: left promiscuous mode [ 122.323217][ T8543] EXT4-fs error (device loop6): __ext4_new_inode:1279: comm syz.6.1767: failed to insert inode 15: doubly allocated? [ 122.367914][ T8543] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 122.390481][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'. [ 122.428480][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'. [ 122.453605][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.468800][ T408] team0 (unregistering): Port device team_slave_1 removed [ 122.480527][ T408] team0 (unregistering): Port device team_slave_0 removed [ 122.613508][ T8485] chnl_net:caif_netlink_parms(): no params data found [ 122.729558][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.742572][ T8599] tls_set_device_offload_rx: netdev not found [ 122.760402][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.790022][ T8485] bridge_slave_0: entered allmulticast mode [ 122.803405][ T8485] bridge_slave_0: entered promiscuous mode [ 122.819629][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.826933][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.840973][ T8485] bridge_slave_1: entered allmulticast mode [ 122.853706][ T8485] bridge_slave_1: entered promiscuous mode [ 122.887638][ T8612] loop6: detected capacity change from 0 to 1024 [ 122.900261][ T8612] EXT4-fs: inline encryption not supported [ 122.932381][ T8612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.957415][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.976531][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.001556][ T8485] team0: Port device team_slave_0 added [ 123.010341][ T8485] team0: Port device team_slave_1 added [ 123.036663][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.054024][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.083860][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.096460][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.109381][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.117145][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.144396][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.254377][ T8485] hsr_slave_0: entered promiscuous mode [ 123.278288][ T8485] hsr_slave_1: entered promiscuous mode [ 123.284776][ T8485] debugfs: 'hsr0' already exists in 'hsr' [ 123.303585][ T8485] Cannot create hsr debugfs directory [ 123.451082][ T8485] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 123.470499][ T8485] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 123.495227][ T8485] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 123.529692][ T8485] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 123.610113][ T8656] loop3: detected capacity change from 0 to 128 [ 123.646043][ T8656] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.661573][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.696355][ T8656] ext4 filesystem being mounted at /331/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.710559][ T8485] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.799296][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.806419][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.860253][ T1716] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.867480][ T1716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.888095][ T8656] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.1792: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 123.956480][ T8656] EXT4-fs error (device loop3) in do_split:2027: Corrupt filesystem [ 124.025987][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.151417][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.233631][ T8699] syzkaller1: entered promiscuous mode [ 124.239312][ T8699] syzkaller1: entered allmulticast mode [ 124.415500][ T8716] netlink: 'syz.2.1803': attribute type 1 has an invalid length. [ 124.469073][ T8716] bond2: entered promiscuous mode [ 124.488641][ T8716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.521327][ T8723] bond2: (slave bridge2): making interface the new active one [ 124.557776][ T8723] bridge2: entered promiscuous mode [ 124.564015][ T8723] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 124.664524][ T8485] veth0_vlan: entered promiscuous mode [ 124.683061][ T8485] veth1_vlan: entered promiscuous mode [ 124.721830][ T8485] veth0_macvtap: entered promiscuous mode [ 124.749533][ T8485] veth1_macvtap: entered promiscuous mode [ 124.779017][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.829039][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.884832][ T8737] loop6: detected capacity change from 0 to 2048 [ 124.888124][ T408] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.921736][ T408] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.944896][ T408] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.960283][ T408] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.050455][ T8737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.321805][ T12] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 125.367736][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 17 with error 28 [ 125.398903][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 125.398903][ T12] [ 125.410725][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1813'. [ 125.427423][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 125.443683][ T12] EXT4-fs (loop6): Free/Dirty block details [ 125.453818][ T12] EXT4-fs (loop6): free_blocks=2415919504 [ 125.464162][ T12] EXT4-fs (loop6): dirty_blocks=32 [ 125.487354][ T12] EXT4-fs (loop6): Block reservation details [ 125.504931][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1813'. [ 125.517333][ T12] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 125.550767][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.565509][ T8759] geneve2: entered promiscuous mode [ 125.599421][ T8759] geneve2: entered allmulticast mode [ 125.777433][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.864036][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1819'. [ 126.386198][ T8787] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8787 comm=syz.6.1825 [ 126.974808][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 126.974822][ T28] audit: type=1400 audit(2000000018.959:1087): avc: denied { append } for pid=8804 comm="syz.5.1833" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.051569][ T28] audit: type=1400 audit(2000000019.039:1088): avc: denied { read write } for pid=8808 comm="syz.3.1834" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.110079][ T28] audit: type=1400 audit(2000000019.039:1089): avc: denied { open } for pid=8808 comm="syz.3.1834" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.183813][ T28] audit: type=1400 audit(2000000019.099:1090): avc: denied { write } for pid=8813 comm="syz.2.1836" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.297687][ T28] audit: type=1400 audit(2000000019.229:1091): avc: denied { setopt } for pid=8817 comm="syz.6.1838" lport=39905 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.380467][ T28] audit: type=1400 audit(2000000019.229:1092): avc: denied { getopt } for pid=8817 comm="syz.6.1838" lport=39905 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.447407][ T28] audit: type=1400 audit(2000000019.239:1093): avc: denied { write } for pid=8818 comm="syz.3.1839" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.517298][ T28] audit: type=1400 audit(2000000019.239:1094): avc: denied { read } for pid=8818 comm="syz.3.1839" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.573032][ T8807] No such timeout policy "syz1" [ 127.636520][ T28] audit: type=1400 audit(2000000019.249:1095): avc: denied { create } for pid=8823 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 127.677141][ T28] audit: type=1400 audit(2000000019.259:1096): avc: denied { read write } for pid=8821 comm="syz.5.1841" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 127.826098][ T8859] loop8: detected capacity change from 0 to 512 [ 127.840185][ T8859] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.853580][ T8859] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 127.862901][ T8859] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 127.872601][ T8859] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 127.880970][ T8859] System zones: 0-2, 18-18, 34-35 [ 127.887649][ T8859] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.919441][ T8485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.964854][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1855'. [ 128.067430][ T8873] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1859'. [ 128.085125][ T8873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.149567][ T8877] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1860'. [ 128.333259][ T8898] loop6: detected capacity change from 0 to 256 [ 128.638999][ T8929] loop8: detected capacity change from 0 to 512 [ 128.665508][ T8932] loop3: detected capacity change from 0 to 512 [ 128.680590][ T8929] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.723209][ T8932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.753063][ T8932] EXT4-fs (loop3): 1 orphan inode deleted [ 128.766249][ T8932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.810204][ T8932] EXT4-fs (loop3): shut down requested (2) [ 128.851801][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.070388][ T8968] netlink: 'syz.6.1884': attribute type 1 has an invalid length. [ 129.189848][ T8968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.425758][ T8975] bond1: (slave geneve2): making interface the new active one [ 129.477103][ T8975] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 129.856279][ T9044] SELinux: security policydb version 16 (MLS) not backwards compatible [ 129.864956][ T9044] SELinux: failed to load policy [ 130.080100][ T9068] loop5: detected capacity change from 0 to 512 [ 130.134887][ T9068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.159632][ T9068] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.183347][ T9068] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1901: bg 0: block 217: padding at end of block bitmap is not set [ 130.216452][ T9077] loop8: detected capacity change from 0 to 128 [ 130.280500][ T9077] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.317741][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.362131][ T9077] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.415843][ T331] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.502380][ T9090] loop3: detected capacity change from 0 to 1024 [ 130.524364][ T9090] EXT4-fs: Ignoring removed orlov option [ 130.575746][ T9090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.697260][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.847963][ T4592] Process accounting resumed [ 131.174395][ T9134] ipvlan2: entered allmulticast mode [ 131.179949][ T9134] dummy0: entered allmulticast mode [ 131.305941][ T9140] loop3: detected capacity change from 0 to 128 [ 131.320913][ T9140] syz.3.1931: attempt to access beyond end of device [ 131.320913][ T9140] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 131.334913][ T9140] syz.3.1931: attempt to access beyond end of device [ 131.334913][ T9140] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 131.352037][ T9140] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 131.367527][ T9140] syz.3.1931: attempt to access beyond end of device [ 131.367527][ T9140] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 131.382483][ T9140] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 131.419890][ T9144] loop8: detected capacity change from 0 to 1024 [ 131.436969][ T9140] syz.3.1931: attempt to access beyond end of device [ 131.436969][ T9140] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 131.453326][ T9144] EXT4-fs: Ignoring removed oldalloc option [ 131.468341][ T9144] EXT4-fs: Ignoring removed bh option [ 131.478689][ T9140] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 131.502823][ T9140] syz.3.1931: attempt to access beyond end of device [ 131.502823][ T9140] loop3: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 131.517218][ T9140] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 131.526246][ T9140] syz.3.1931: attempt to access beyond end of device [ 131.526246][ T9140] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 131.554606][ T9140] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 131.568515][ T9140] syz.3.1931: attempt to access beyond end of device [ 131.568515][ T9140] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 131.617608][ T9140] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 131.638228][ T9154] loop8: detected capacity change from 0 to 128 [ 131.773831][ T9159] loop3: detected capacity change from 0 to 4096 [ 131.789848][ T9159] EXT4-fs: Ignoring removed bh option [ 131.828060][ T9159] EXT4-fs error (device loop3): ext4_readdir:265: inode #12: block 80: comm syz.3.1937: path /370/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 132.136585][ T9170] SELinux: failed to load policy [ 132.710993][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 132.711012][ T28] audit: type=1400 audit(2000000024.699:1191): avc: denied { create } for pid=9184 comm="syz.3.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.743719][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.907881][ T9063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.162503][ T28] audit: type=1400 audit(2000000025.149:1192): avc: denied { ioctl } for pid=9205 comm="syz.2.1956" path="socket:[24946]" dev="sockfs" ino=24946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.456408][ T28] audit: type=1400 audit(2000000025.439:1193): avc: denied { read } for pid=9231 comm="syz.6.1968" path="socket:[23980]" dev="sockfs" ino=23980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.496677][ T9236] loop8: detected capacity change from 0 to 128 [ 133.515074][ T9236] EXT4-fs mount: 4 callbacks suppressed [ 133.515089][ T9236] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.537993][ T9236] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.665233][ T28] audit: type=1400 audit(2000000025.649:1194): avc: denied { mount } for pid=9243 comm="syz.2.1973" name="/" dev="autofs" ino=25005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 133.711469][ T8485] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.433305][ T9268] netlink: 'syz.6.1976': attribute type 10 has an invalid length. [ 134.441514][ T9268] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1976'. [ 134.450786][ T9268] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 134.562880][ T28] audit: type=1400 audit(2000000026.549:1195): avc: denied { bind } for pid=9279 comm="syz.5.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.606107][ T9283] loop2: detected capacity change from 0 to 1024 [ 134.618366][ T9283] EXT4-fs: inline encryption not supported [ 134.659061][ T9283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.733625][ T9295] netlink: 'syz.5.1987': attribute type 1 has an invalid length. [ 134.743706][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.762022][ T9295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.803263][ T9298] bond2: (slave gretap1): making interface the new active one [ 134.807698][ T4774] Bluetooth: hci0: command 0x1003 tx timeout [ 134.813389][ T9298] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 134.817073][ T4690] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.980207][ T28] audit: type=1400 audit(2000000026.969:1196): avc: denied { watch watch_reads } for pid=9309 comm="syz.5.1991" path="/156/file0" dev="tmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.005770][ T28] audit: type=1400 audit(2000000026.989:1197): avc: denied { execute } for pid=9309 comm="syz.5.1991" name="file0" dev="tmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.029093][ T28] audit: type=1400 audit(2000000026.989:1198): avc: denied { execute_no_trans } for pid=9309 comm="syz.5.1991" path="/156/file0" dev="tmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.145551][ T28] audit: type=1326 audit(2000000027.129:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.5.1993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba13b2bf79 code=0x0 [ 135.454325][ T28] audit: type=1400 audit(2000000027.439:1200): avc: denied { mount } for pid=9344 comm="syz.3.1999" name="/" dev="hugetlbfs" ino=25133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 136.302305][ T9389] loop5: detected capacity change from 0 to 512 [ 136.334487][ T9389] EXT4-fs: Ignoring removed i_version option [ 136.380491][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 136.403936][ T9389] EXT4-fs (loop5): 1 truncate cleaned up [ 136.411342][ T9394] xfrm1: entered promiscuous mode [ 136.416419][ T9394] xfrm1: entered allmulticast mode [ 136.423631][ T9389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.429671][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 136.482217][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.538603][ T9399] loop5: detected capacity change from 0 to 2048 [ 136.572071][ T9399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.609424][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.678197][ T9408] loop8: detected capacity change from 0 to 128 [ 136.700770][ T9408] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.722391][ T9408] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.753057][ T9415] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 136.763139][ T9415] SELinux: failed to load policy [ 136.769060][ T8485] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.827069][ T9419] loop8: detected capacity change from 0 to 512 [ 136.844432][ T9419] EXT4-fs: Ignoring removed orlov option [ 136.881523][ T9419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.897441][ T9419] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.935816][ T8485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.140785][ T4587] kernel read not supported for file /vcs (pid: 4587 comm: kworker/0:13) [ 137.413136][ T9440] loop8: detected capacity change from 0 to 512 [ 137.434951][ T9440] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2026: inode has both inline data and extents flags [ 137.506654][ T9440] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.506928][ T9440] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2026: couldn't read orphan inode 15 (err -117) [ 137.537023][ T9275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.576484][ T9440] loop8: lost filesystem error report for type 5 error -117 [ 137.577014][ T9440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.025491][ T8485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.206301][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 138.206374][ T28] audit: type=1326 audit(2000000030.189:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.3.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 138.247716][ T9498] random: crng reseeded on system resumption [ 138.306597][ T28] audit: type=1326 audit(2000000030.189:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.3.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 138.356265][ T9507] loop8: detected capacity change from 0 to 128 [ 138.376469][ T9503] syzkaller0: entered promiscuous mode [ 138.382064][ T28] audit: type=1326 audit(2000000030.189:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.3.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 138.385752][ T9507] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.424803][ T9503] syzkaller0: entered allmulticast mode [ 138.431053][ T9507] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.495890][ T28] audit: type=1326 audit(2000000030.189:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.3.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 138.527815][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 138.536977][ T9511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.544906][ T8485] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.576845][ T28] audit: type=1326 audit(2000000030.189:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.3.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 138.602633][ T28] audit: type=1326 audit(2000000030.189:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.3.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 138.638678][ T9511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.659294][ T28] audit: type=1326 audit(2000000030.189:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.3.2047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 138.704862][ T9517] netlink: 'syz.2.2056': attribute type 1 has an invalid length. [ 138.713226][ T28] audit: type=1400 audit(2000000030.239:1211): avc: denied { write } for pid=9497 comm="syz.8.2048" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.743208][ T9517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.767316][ T28] audit: type=1400 audit(2000000030.239:1212): avc: denied { open } for pid=9497 comm="syz.8.2048" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.796212][ T28] audit: type=1400 audit(2000000030.449:1213): avc: denied { create } for pid=9505 comm="syz.8.2052" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 138.841689][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2059'. [ 138.857092][ T9524] loop8: detected capacity change from 0 to 512 [ 138.890804][ T9524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.909336][ T9524] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.984285][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 139.000459][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 139.079054][ T8485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.143863][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 139.240928][ T9564] loop5: detected capacity change from 0 to 1024 [ 139.248145][ T9564] EXT4-fs: inline encryption not supported [ 139.255678][ T9564] EXT4-fs: Ignoring removed nobh option [ 139.268149][ T9564] EXT4-fs: Ignoring removed bh option [ 139.297318][ T9564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.339372][ T9570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2077'. [ 139.393385][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.435835][ T9574] loop5: detected capacity change from 0 to 1024 [ 139.469946][ T9574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.657703][ T9574] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.779548][ T9580] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2079: bg 0: block 112: padding at end of block bitmap is not set [ 139.823038][ T9580] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 139.854317][ T9580] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.854317][ T9580] [ 139.955420][ T50] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 139.980616][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 140.027598][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.027598][ T50] [ 140.101339][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.142200][ T9595] loop6: detected capacity change from 0 to 128 [ 140.174717][ T9595] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.208008][ T9595] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.219917][ T9597] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 140.228747][ T9597] System zones: 0-1, 3-12 [ 140.233842][ T9597] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.288114][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 140.310611][ T50] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.455300][ T9612] netlink: 'syz.8.2093': attribute type 29 has an invalid length. [ 140.464575][ T9612] netlink: 'syz.8.2093': attribute type 29 has an invalid length. [ 140.475905][ T9612] netlink: 500 bytes leftover after parsing attributes in process `syz.8.2093'. [ 140.544960][ T9616] EXT4-fs: Ignoring removed orlov option [ 140.571982][ T9616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.602179][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.818798][ T9629] EXT4-fs: inline encryption not supported [ 140.825393][ T9629] EXT4-fs: Ignoring removed nobh option [ 140.831292][ T9629] EXT4-fs: Ignoring removed bh option [ 140.860197][ T9629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.899516][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.932770][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 140.942234][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2101'. [ 140.995742][ T9635] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2103'. [ 141.127362][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.456240][ T9654] set_capacity_and_notify: 4 callbacks suppressed [ 141.456259][ T9654] loop2: detected capacity change from 0 to 1024 [ 141.499243][ T9654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.517490][ T9654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.528884][ T9654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 141.537029][ T9654] System zones: 0-1, 3-36 [ 141.595890][ T9654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.677524][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'. [ 141.686624][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2116'. [ 141.708022][ T9669] loop5: detected capacity change from 0 to 1024 [ 141.715029][ T9669] EXT4-fs: Ignoring removed orlov option [ 141.754497][ T9437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.774189][ T9669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.849632][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.859402][ T1716] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.931569][ T1716] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.268116][ T1716] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.367874][ T1716] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.820002][ T1716] bridge_slave_1: left allmulticast mode [ 142.825793][ T1716] bridge_slave_1: left promiscuous mode [ 142.859764][ T1716] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.880174][ T1716] bridge_slave_0: left allmulticast mode [ 142.925763][ T1716] bridge_slave_0: left promiscuous mode [ 142.941752][ T1716] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.124642][ T1716] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 143.141060][ T1716] bridge2 (unregistering): left promiscuous mode [ 143.169638][ T1716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.181991][ T1716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.198273][ T1716] bond0 (unregistering): Released all slaves [ 143.206594][ T1716] bond1 (unregistering): (slave lo): Releasing backup interface [ 143.232359][ T1716] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 143.244994][ T1716] bond1 (unregistering): Released all slaves [ 143.253858][ T1716] bond2 (unregistering): Released all slaves [ 143.263092][ T1716] bond3 (unregistering): Released all slaves [ 143.292482][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'. [ 143.301914][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2145'. [ 143.322929][ T9683] chnl_net:caif_netlink_parms(): no params data found [ 143.415632][ T1716] hsr_slave_0: left promiscuous mode [ 143.423640][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 143.423712][ T28] audit: type=1326 audit(2000000035.409:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 143.432191][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.476294][ T28] audit: type=1326 audit(2000000035.439:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 143.503099][ T28] audit: type=1326 audit(2000000035.439:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 143.527109][ T1716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.540080][ T28] audit: type=1326 audit(2000000035.439:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 143.568463][ T28] audit: type=1326 audit(2000000035.439:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 143.612211][ T28] audit: type=1326 audit(2000000035.439:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 143.661824][ T28] audit: type=1326 audit(2000000035.489:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfec7fbf79 code=0x7ffc0000 [ 143.709008][ T28] audit: type=1326 audit(2000000035.489:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfec7bc84e code=0x7ffc0000 [ 143.771346][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 143.795499][ T28] audit: type=1326 audit(2000000035.499:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfec7bc84e code=0x7ffc0000 [ 143.850751][ T28] audit: type=1326 audit(2000000035.499:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.3.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfec7bc84e code=0x7ffc0000 [ 143.930247][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.959081][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.996742][ T9683] bridge_slave_0: entered allmulticast mode [ 144.013274][ T9683] bridge_slave_0: entered promiscuous mode [ 144.037240][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.062664][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.097440][ T9683] bridge_slave_1: entered allmulticast mode [ 144.134001][ T9683] bridge_slave_1: entered promiscuous mode [ 144.172080][ T9683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.206157][ T9683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.249831][ T9683] team0: Port device team_slave_0 added [ 144.285019][ T9683] team0: Port device team_slave_1 added [ 144.294980][ T4581] kernel write not supported for file bpf-prog (pid: 4581 comm: kworker/0:9) [ 144.322687][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.337435][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.367096][ T9683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.387582][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.397516][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.424723][ T9683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.502400][ T9683] hsr_slave_0: entered promiscuous mode [ 144.516405][ T9683] hsr_slave_1: entered promiscuous mode [ 144.538420][ T9683] debugfs: 'hsr0' already exists in 'hsr' [ 144.558934][ T9683] Cannot create hsr debugfs directory [ 144.575840][ T9818] batadv1: entered promiscuous mode [ 144.770856][ T9683] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 144.797146][ T9683] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 144.871096][ T9683] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 144.897131][ T9683] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 145.007804][ T9683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.049593][ T9683] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.085816][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.092972][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.125877][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.133156][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.192074][ T9683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.237295][ T4592] IPVS: starting estimator thread 0... [ 145.238364][ T9683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.347366][ T9875] IPVS: using max 1776 ests per chain, 88800 per kthread [ 145.427565][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.741776][ T9683] veth0_vlan: entered promiscuous mode [ 145.783249][ T9683] veth1_vlan: entered promiscuous mode [ 145.842401][ T9683] veth0_macvtap: entered promiscuous mode [ 145.866515][ T9683] veth1_macvtap: entered promiscuous mode [ 145.894984][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.915455][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.945434][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.973820][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.005682][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.024638][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.132714][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'. [ 146.150061][ T9942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.160584][ T9942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.268048][ T9942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.278496][ T9942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.890763][ T9961] loop5: detected capacity change from 0 to 8192 [ 147.018749][ T9942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.029289][ T9942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.108302][ T9942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.118824][ T9942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.156818][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.172822][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.220194][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.255040][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.288041][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.327407][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.336961][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.359856][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.439655][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'. [ 147.474927][ T9994] erspan0: entered promiscuous mode [ 147.489696][ T9994] macvtap1: entered promiscuous mode [ 147.502315][ T9994] macvtap1: entered allmulticast mode [ 147.516055][ T9994] erspan0: entered allmulticast mode [ 147.534347][ T9997] erspan0: left allmulticast mode [ 147.540672][ T9997] erspan0: left promiscuous mode [ 148.215259][T10024] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2223'. [ 148.279095][T10026] loop9: detected capacity change from 0 to 512 [ 148.319128][T10026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.367482][T10026] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.409662][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2224'. [ 148.445263][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2224'. [ 148.549913][ T9683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.590347][T10038] loop5: detected capacity change from 0 to 256 [ 148.601038][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2227'. [ 148.614845][T10038] loop5: detected capacity change from 0 to 256 [ 148.669070][T10039] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 148.721959][T10020] loop8: detected capacity change from 0 to 32768 [ 148.803896][ T3297] loop8: p1 p3 < p5 p6 > [ 148.805807][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 148.805854][ T28] audit: type=1400 audit(2000000040.789:1281): avc: denied { create } for pid=10050 comm="syz.5.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 148.817371][ T3297] loop8: partition table partially beyond EOD, [ 148.836302][T10055] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2235'. [ 148.858206][ T28] audit: type=1400 audit(2000000040.849:1282): avc: denied { ioctl } for pid=10050 comm="syz.5.2233" path="socket:[27430]" dev="sockfs" ino=27430 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 148.867720][ T3297] truncated [ 148.895547][T10055] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2235'. [ 148.920892][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2236'. [ 148.955175][T10020] loop8: p1 p3 < > [ 148.985481][T10058] gtp0: entered promiscuous mode [ 149.027645][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 149.039399][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 149.043831][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 149.053608][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 149.124394][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 149.128248][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 149.213844][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2244'. [ 149.227084][ T28] audit: type=1400 audit(2000000041.209:1283): avc: denied { ioctl } for pid=10074 comm="syz.8.2239" path="socket:[26519]" dev="sockfs" ino=26519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.321853][T10073] geneve3: entered promiscuous mode [ 149.542962][ T28] audit: type=1326 audit(2000000041.529:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.8.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acfd2bf79 code=0x7ffc0000 [ 149.617003][ T28] audit: type=1326 audit(2000000041.529:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.8.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acfd2bf79 code=0x7ffc0000 [ 149.737308][ T28] audit: type=1326 audit(2000000041.529:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.8.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9acfd2bf79 code=0x7ffc0000 [ 149.762749][ T28] audit: type=1326 audit(2000000041.529:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.8.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acfd2bf79 code=0x7ffc0000 [ 149.786547][ T28] audit: type=1326 audit(2000000041.529:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.8.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acfd2bf79 code=0x7ffc0000 [ 149.810337][ T28] audit: type=1326 audit(2000000041.549:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.8.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9acfd2bf79 code=0x7ffc0000 [ 149.834518][ T28] audit: type=1326 audit(2000000041.549:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.8.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acfd2bf79 code=0x7ffc0000 [ 149.873140][T10106] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 149.881860][ T4579] IPVS: starting estimator thread 0... [ 149.928246][T10110] netlink: 'syz.9.2256': attribute type 1 has an invalid length. [ 149.942813][T10110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.977344][T10107] IPVS: using max 1824 ests per chain, 91200 per kthread [ 150.135952][T10120] SELinux: failed to load policy [ 151.074248][T10164] netlink: 'syz.8.2277': attribute type 3 has an invalid length. [ 151.082805][T10164] netlink: 'syz.8.2277': attribute type 3 has an invalid length. [ 152.220387][T10199] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 152.276075][T10201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=10201 comm=syz.6.2291 [ 152.705839][T10097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.853422][T10224] can0: slcan on ttyS3. [ 152.872355][T10226] loop5: detected capacity change from 0 to 128 [ 152.917458][T10223] can0 (unregistered): slcan off ttyS3. [ 153.574651][T10288] loop6: detected capacity change from 0 to 1024 [ 153.596555][T10288] EXT4-fs: Ignoring removed orlov option [ 153.634585][T10288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.766379][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.883994][T10300] loop5: detected capacity change from 0 to 2048 [ 153.934849][T10300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.986810][T10307] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 154.013258][T10307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.054005][T10307] bond3: (slave geneve2): making interface the new active one [ 154.084790][T10307] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 154.148589][T10317] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 154.227603][T10317] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 154.253701][T10317] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.253701][T10317] [ 154.384944][T10317] EXT4-fs (loop5): Total free blocks count 0 [ 154.440752][T10317] EXT4-fs (loop5): Free/Dirty block details [ 154.446713][T10317] EXT4-fs (loop5): free_blocks=2415919504 [ 154.491313][T10337] loop8: detected capacity change from 0 to 128 [ 154.497393][T10317] EXT4-fs (loop5): dirty_blocks=2192 [ 154.528262][T10317] EXT4-fs (loop5): Block reservation details [ 154.567128][T10317] EXT4-fs (loop5): i_reserved_data_blocks=173 [ 154.863940][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 154.863960][ T28] audit: type=1326 audit(2000000046.849:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 154.903765][T10300] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 154.938700][ T28] audit: type=1326 audit(2000000046.849:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.119059][ T28] audit: type=1326 audit(2000000046.849:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.174299][ T28] audit: type=1326 audit(2000000046.849:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.210964][T10347] loop9: detected capacity change from 0 to 512 [ 155.218736][ T28] audit: type=1326 audit(2000000046.849:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.257805][ T28] audit: type=1326 audit(2000000046.849:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.324260][T10347] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 155.387759][ T28] audit: type=1326 audit(2000000046.849:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.396324][T10347] EXT4-fs (loop9): 1 truncate cleaned up [ 155.412290][ T28] audit: type=1326 audit(2000000046.849:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.453458][T10347] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.475826][ T28] audit: type=1326 audit(2000000046.849:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.504493][ T28] audit: type=1326 audit(2000000046.849:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.6.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea2d5bf79 code=0x7ffc0000 [ 155.577596][ T9683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.588077][T10358] loop5: detected capacity change from 0 to 1024 [ 155.631052][T10358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.686904][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2356'. [ 155.708396][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.823633][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2356'. [ 155.932141][T10382] netlink: 'syz.9.2361': attribute type 1 has an invalid length. [ 155.941204][T10382] netlink: 'syz.9.2361': attribute type 4 has an invalid length. [ 155.954199][T10382] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2361'. [ 156.030952][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2363'. [ 156.063398][T10391] loop9: detected capacity change from 0 to 512 [ 156.107946][T10391] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 156.139439][T10391] EXT4-fs (loop9): 1 truncate cleaned up [ 156.145837][T10391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.221817][T10407] loop5: detected capacity change from 0 to 1024 [ 156.277905][T10407] EXT4-fs: Ignoring removed orlov option [ 156.335224][T10407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.353612][ T9683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.443014][ T7013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.471335][T10421] loop6: detected capacity change from 0 to 512 [ 156.509259][T10431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2373'. [ 156.581467][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'. [ 156.693693][T10421] EXT4-fs (loop6): 1 orphan inode deleted [ 156.724370][T10421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.902161][T10469] netlink: 'syz.5.2384': attribute type 1 has an invalid length. [ 156.918739][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.925833][T10473] loop8: detected capacity change from 0 to 1024 [ 156.935440][T10469] netlink: 'syz.5.2384': attribute type 4 has an invalid length. [ 156.955205][T10469] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2384'. [ 156.967288][T10473] EXT4-fs: Ignoring removed orlov option [ 156.988291][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2387'. [ 157.014916][T10473] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.100102][T10490] syz_tun: entered allmulticast mode [ 157.122363][ T8485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.138165][T10488] syz_tun: left allmulticast mode [ 157.258594][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x1f [ 157.262305][T10507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.274116][T10507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.447579][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.457853][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.461343][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2397'. [ 157.476876][T10519] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2397'. [ 157.708403][T10529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.781772][T10529] ================================================================== [ 157.789886][T10529] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 157.797711][T10529] [ 157.800033][T10529] write to 0xffffea000476a558 of 8 bytes by task 10532 on cpu 0: [ 157.807749][T10529] __filemap_remove_folio+0x201/0x300 [ 157.813127][T10529] filemap_remove_folio+0x6d/0x1d0 [ 157.818242][T10529] read_pages+0x1c3/0x480 [ 157.822578][T10529] page_cache_ra_unbounded+0x34f/0x440 [ 157.828045][T10529] page_cache_ra_order+0x145/0x220 [ 157.833169][T10529] do_sync_mmap_readahead+0x33d/0x350 [ 157.838558][T10529] filemap_fault+0x362/0xbb0 [ 157.843185][T10529] __do_fault+0xbc/0x200 [ 157.847435][T10529] handle_mm_fault+0x11d7/0x3030 [ 157.852377][T10529] __get_user_pages+0x1023/0x1ea0 [ 157.857403][T10529] __mm_populate+0x242/0x390 [ 157.861999][T10529] vm_mmap_pgoff+0x23b/0x2d0 [ 157.866606][T10529] ksys_mmap_pgoff+0x267/0x310 [ 157.871369][T10529] x64_sys_call+0x14df/0x3020 [ 157.876052][T10529] do_syscall_64+0x12c/0x370 [ 157.880654][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.886580][T10529] [ 157.888926][T10529] read to 0xffffea000476a558 of 8 bytes by task 10529 on cpu 1: [ 157.896568][T10529] folio_mapping+0xa1/0xe0 [ 157.900996][T10529] lru_add+0x8d/0x480 [ 157.904993][T10529] folio_batch_move_lru+0x1c5/0x270 [ 157.910219][T10529] folio_add_lru+0x149/0x1e0 [ 157.914814][T10529] filemap_add_folio+0x267/0x350 [ 157.919755][T10529] page_cache_ra_unbounded+0x204/0x440 [ 157.925249][T10529] page_cache_ra_order+0x145/0x220 [ 157.930374][T10529] page_cache_sync_ra+0x52d/0x6a0 [ 157.935406][T10529] filemap_get_pages+0x30a/0x1260 [ 157.940439][T10529] filemap_splice_read+0x3c6/0x780 [ 157.945571][T10529] ext4_file_splice_read+0x8f/0xb0 [ 157.950702][T10529] splice_direct_to_actor+0x26e/0x670 [ 157.956105][T10529] do_splice_direct+0x119/0x1a0 [ 157.960975][T10529] do_sendfile+0x382/0x650 [ 157.965412][T10529] __x64_sys_sendfile64+0x105/0x150 [ 157.970622][T10529] x64_sys_call+0x2dc4/0x3020 [ 157.975304][T10529] do_syscall_64+0x12c/0x370 [ 157.979903][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.985847][T10529] [ 157.988182][T10529] value changed: 0xffff88811a497b60 -> 0x0000000000000000 [ 157.995294][T10529] [ 157.997627][T10529] Reported by Kernel Concurrency Sanitizer on: [ 158.003807][T10529] CPU: 1 UID: 0 PID: 10529 Comm: syz.9.2403 Tainted: G W syzkaller #0 PREEMPT(full) [ 158.014755][T10529] Tainted: [W]=WARN [ 158.018559][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 158.028787][T10529] ================================================================== [ 158.054481][T10533] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 158.093996][T10533] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 256 with error 28 [ 158.121880][T10533] EXT4-fs (loop9): This should not happen!! Data will be lost [ 158.121880][T10533] [ 158.141566][T10533] EXT4-fs (loop9): Total free blocks count 0 [ 158.154368][T10533] EXT4-fs (loop9): Free/Dirty block details [ 158.167260][T10533] EXT4-fs (loop9): free_blocks=2415919504 [ 158.173125][T10533] EXT4-fs (loop9): dirty_blocks=2960 [ 158.187288][T10533] EXT4-fs (loop9): Block reservation details [ 158.193357][T10533] EXT4-fs (loop9): i_reserved_data_blocks=209 [ 158.544907][T10529] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 160.173602][T10497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.247839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog