last executing test programs: 7.135311577s ago: executing program 0 (id=643): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000003800)={[{@fmask={'fmask', 0x3d, 0x2}}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@dmask={'dmask', 0x3d, 0xd16e}}, {@fmask={'fmask', 0x3d, 0xffff}}, {@time_offset={'time_offset', 0x3d, 0xffffffff}}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_remount}, {@sys_tz}], [{@pcr={'pcr', 0x3d, 0x3e}}]}, 0x1, 0x152d, &(0x7f0000001f80)="$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") r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'wg2\x00'}) sendto$packet(r6, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x1a, 0x0, 0x0, 0x0) 5.912860356s ago: executing program 0 (id=646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 5.912488646s ago: executing program 0 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x68}}, 0x0) 5.912153996s ago: executing program 0 (id=648): eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') 4.991488243s ago: executing program 0 (id=651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") chdir(&(0x7f0000000200)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@noxattr}, {@directio}, {@loose}]}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 2.294024593s ago: executing program 4 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) 2.257655664s ago: executing program 4 (id=694): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68"], 0x97, 0x2a9, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 2.001115245s ago: executing program 4 (id=697): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='sys_enter\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fadvise64(r3, 0xbd8, 0x1, 0x3) 1.953687615s ago: executing program 4 (id=700): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) 1.885305176s ago: executing program 0 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x58}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.884546406s ago: executing program 4 (id=703): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000340)=""/160}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.652930028s ago: executing program 2 (id=709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.632821048s ago: executing program 1 (id=710): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex, 0xe, 0x1, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@cgroup, r4, 0x5, 0x43, 0xffffffffffffffff, @void, @value=r2, @void, @void, r5}, 0x20) 1.341998s ago: executing program 3 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd09000000000600150002000000140016"], 0x38}}, 0x0) 799.250734ms ago: executing program 1 (id=713): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000040, 0x0, 0x0, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 798.781324ms ago: executing program 3 (id=714): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x9c, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0) 796.392374ms ago: executing program 1 (id=715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) 736.977505ms ago: executing program 2 (id=716): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 717.749815ms ago: executing program 3 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t', @ANYRES32], 0x48) 629.104225ms ago: executing program 3 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 628.734155ms ago: executing program 3 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 615.036685ms ago: executing program 1 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 531.705296ms ago: executing program 3 (id=721): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) 477.234187ms ago: executing program 1 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x5, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a000000000000611150000000000085004000a00000009500000000000000aad8d1ab88d77e985fa777dcb6cf91df2c27417a799d08"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) pread64(r3, &(0x7f0000000080)=""/110, 0x6e, 0x6) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x0) 476.840557ms ago: executing program 2 (id=723): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r0) 379.882347ms ago: executing program 2 (id=724): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000001000)={0x0}) 167.370569ms ago: executing program 2 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 115.280039ms ago: executing program 4 (id=726): r0 = socket$inet(0x2, 0x3, 0x8d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) setsockopt(r3, 0x6, 0x4, &(0x7f0000000300)="123bf4a6a8f4f2a36288687b44f4344c18639456ce0e57545c4edf97aceb8387e6426bc2421b638e5c5b04dc523c783a079d8d48b7287178ff43ad1a418ab1ca6f5e7ae82e9615d989fa1020e202078af4ea85ac4e1fcc607effce6c10d87bfce1622f618ed3ce46bc5f57f65c63a3fd0406818b44f3027ff50b116acedd8d339598a06d87c017feee20ab431dcf6fe300d8a259c2d8822b589c61585265cf45b516f22f", 0xa4) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000400)=0x1e) 664.11µs ago: executing program 2 (id=727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 1 (id=728): creat(0x0, 0x158) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/pid_for_children\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) io_uring_enter(0xffffffffffffffff, 0x3833, 0x813c, 0x10, &(0x7f0000000200), 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x60000000000, 0x1000000000000000) kernel console output (not intermixed with test programs): _slave_1: link becomes ready [ 25.883781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.903455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.913314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.924130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.933536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.960267][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 25.964374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.979884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.990420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.005340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.017365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.030888][ T294] device veth0_vlan entered promiscuous mode [ 26.042671][ T292] device veth0_vlan entered promiscuous mode [ 26.064796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.073384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.099721][ T320] loop3: detected capacity change from 0 to 256 [ 26.102785][ T292] device veth1_macvtap entered promiscuous mode [ 26.127055][ T294] device veth1_macvtap entered promiscuous mode [ 26.136333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.148392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.161182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.171549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.182811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.192557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.203463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.213766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.223599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.242292][ T295] device veth0_vlan entered promiscuous mode [ 26.253833][ T293] device veth0_vlan entered promiscuous mode [ 26.264557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.275113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.283019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.291579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.300153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.337393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.347545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.358363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.367956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.378062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.387394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.397324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.406475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.418861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.429446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.437959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.446301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.456661][ T293] device veth1_macvtap entered promiscuous mode [ 26.467709][ T333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 26.476665][ T333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 26.484233][ T333] IPv6: NLM_F_CREATE should be set when creating new route [ 26.498562][ T295] device veth1_macvtap entered promiscuous mode [ 26.522310][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.542734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.551249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.561036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.581736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.598614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.610436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.620066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.635305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.646777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.774824][ T352] device pim6reg1 entered promiscuous mode [ 26.968791][ T361] loop2: detected capacity change from 0 to 512 [ 26.978206][ T365] loop4: detected capacity change from 0 to 1024 [ 26.993957][ T361] ======================================================= [ 26.993957][ T361] WARNING: The mand mount option has been deprecated and [ 26.993957][ T361] and is ignored by this kernel. Remove the mand [ 26.993957][ T361] option from the mount to silence this warning. [ 26.993957][ T361] ======================================================= [ 27.003390][ T365] EXT4-fs: Ignoring removed bh option [ 27.043451][ T361] EXT4-fs: Ignoring removed i_version option [ 27.060642][ T361] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 27.074798][ T361] EXT4-fs (loop2): 1 truncate cleaned up [ 27.080672][ T361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.091576][ T365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.139286][ T294] EXT4-fs (loop4): unmounting filesystem. [ 27.186628][ T372] loop1: detected capacity change from 0 to 512 [ 27.206021][ T374] loop4: detected capacity change from 0 to 512 [ 27.213004][ T374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.227436][ T374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 27.238951][ T372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.240466][ T374] EXT4-fs (loop4): 1 truncate cleaned up [ 27.255070][ T374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.264266][ T372] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.287972][ T294] EXT4-fs (loop4): unmounting filesystem. [ 27.299691][ T372] capability: warning: `syz.1.21' uses deprecated v2 capabilities in a way that may be insecure [ 27.343157][ T292] EXT4-fs (loop1): unmounting filesystem. [ 27.392714][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 27.392733][ T28] audit: type=1400 audit(1742259486.019:201): avc: denied { create } for pid=387 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.447478][ T28] audit: type=1400 audit(1742259486.059:202): avc: denied { bind } for pid=387 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.467610][ T28] audit: type=1400 audit(1742259486.059:203): avc: denied { listen } for pid=387 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.489582][ T28] audit: type=1400 audit(1742259486.059:204): avc: denied { connect } for pid=387 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.511747][ T28] audit: type=1400 audit(1742259486.059:205): avc: denied { write } for pid=387 comm="syz.1.25" path="socket:[15791]" dev="sockfs" ino=15791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.538163][ T28] audit: type=1400 audit(1742259486.059:206): avc: denied { accept } for pid=387 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.562353][ T28] audit: type=1400 audit(1742259486.059:207): avc: denied { read } for pid=387 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.589125][ T28] audit: type=1400 audit(1742259486.219:208): avc: denied { create } for pid=392 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.625138][ T397] Illegal XDP return value 4294967294 on prog (id 17) dev N/A, expect packet loss! [ 27.636466][ T28] audit: type=1400 audit(1742259486.219:209): avc: denied { setopt } for pid=392 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.677840][ T401] loop1: detected capacity change from 0 to 1024 [ 27.686732][ T401] EXT4-fs: Ignoring removed bh option [ 27.701067][ T401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.727988][ T292] EXT4-fs (loop1): unmounting filesystem. [ 27.759624][ T28] audit: type=1400 audit(1742259486.389:210): avc: denied { create } for pid=410 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.776313][ T413] loop3: detected capacity change from 0 to 2048 [ 27.868181][ T295] EXT4-fs (loop2): unmounting filesystem. [ 27.877517][ T413] loop3: p1 < > p4 [ 27.894601][ T413] loop3: p4 size 8388608 extends beyond EOD, truncated [ 28.269228][ T318] udevd[318]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 28.326628][ T434] loop2: detected capacity change from 0 to 1024 [ 28.333412][ T434] EXT4-fs: Ignoring removed bh option [ 28.377912][ T434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.421671][ T446] loop0: detected capacity change from 0 to 512 [ 28.429656][ T295] EXT4-fs (loop2): unmounting filesystem. [ 28.441819][ T446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 28.460330][ T446] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.50: invalid indirect mapped block 83886080 (level 1) [ 28.489467][ T446] EXT4-fs (loop0): Remounting filesystem read-only [ 28.503744][ T446] EXT4-fs (loop0): 1 orphan inode deleted [ 28.517790][ T453] loop2: detected capacity change from 0 to 512 [ 28.524206][ T446] EXT4-fs (loop0): 1 truncate cleaned up [ 28.527018][ T453] EXT4-fs: Ignoring removed i_version option [ 28.536462][ T446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.554073][ T453] EXT4-fs (loop2): 1 truncate cleaned up [ 28.563120][ T453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.564022][ T293] EXT4-fs (loop0): unmounting filesystem. [ 28.777426][ T472] loop3: detected capacity change from 0 to 512 [ 28.824519][ T474] binder: 464:474 ioctl c0306201 0 returned -14 [ 28.836064][ T474] binder: BINDER_SET_CONTEXT_MGR already set [ 28.840160][ T472] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 28.842021][ T474] binder: 464:474 ioctl 4018620d 400000000040 returned -16 [ 28.850800][ T472] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 28.867873][ T472] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 28.879196][ T472] EXT4-fs (loop3): 1 truncate cleaned up [ 28.886840][ T472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.943227][ T291] EXT4-fs (loop3): unmounting filesystem. [ 29.089970][ T485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.64'. [ 29.279063][ T496] loop0: detected capacity change from 0 to 512 [ 29.288061][ T496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.363343][ T496] EXT4-fs (loop0): orphan cleanup on readonly fs [ 29.373459][ T496] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.67: bg 0: block 248: padding at end of block bitmap is not set [ 29.395755][ T496] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.67: Failed to acquire dquot type 1 [ 29.414594][ T496] EXT4-fs (loop0): 1 truncate cleaned up [ 29.421390][ T496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.633749][ T496] bridge0: port 3(syz_tun) entered blocking state [ 29.640503][ T496] bridge0: port 3(syz_tun) entered disabled state [ 29.656669][ T496] device syz_tun entered promiscuous mode [ 29.663531][ T496] bridge0: port 3(syz_tun) entered blocking state [ 29.670226][ T496] bridge0: port 3(syz_tun) entered forwarding state [ 30.079446][ T496] syz.0.67 (496) used greatest stack depth: 20104 bytes left [ 30.140978][ T506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 30.261038][ T295] EXT4-fs (loop2): unmounting filesystem. [ 30.375740][ T517] binder: 511:517 ioctl c0306201 0 returned -14 [ 30.521502][ T519] loop3: detected capacity change from 0 to 128 [ 30.669486][ T525] loop3: detected capacity change from 0 to 512 [ 30.679285][ T521] serio: Serial port ptm0 [ 30.688150][ T293] EXT4-fs (loop0): unmounting filesystem. [ 30.717820][ T531] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 30.724959][ T528] loop2: detected capacity change from 0 to 128 [ 30.803043][ T533] loop1: detected capacity change from 0 to 512 [ 30.820240][ T533] EXT4-fs (loop1): orphan cleanup on readonly fs [ 30.830738][ T533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.78: bg 0: block 248: padding at end of block bitmap is not set [ 30.854450][ T525] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.79: Failed to acquire dquot type 0 [ 30.908695][ T533] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.78: Failed to acquire dquot type 1 [ 30.929602][ T533] EXT4-fs (loop1): 1 truncate cleaned up [ 30.943749][ T533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.007685][ T537] syz.2.74: attempt to access beyond end of device [ 31.007685][ T537] loop2: rw=2049, sector=145, nr_sectors = 72 limit=128 [ 31.120771][ T525] EXT4-fs (loop3): Remounting filesystem read-only [ 31.208594][ T525] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.79: Failed to acquire dquot type 0 [ 31.373146][ T525] EXT4-fs (loop3): Remounting filesystem read-only [ 31.404744][ T542] loop4: detected capacity change from 0 to 2048 [ 31.558255][ T533] syz.1.78 (533) used greatest stack depth: 20032 bytes left [ 31.586580][ T525] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 31.635914][ T8] kworker/u4:0: attempt to access beyond end of device [ 31.635914][ T8] loop2: rw=1, sector=217, nr_sectors = 640 limit=128 [ 31.661926][ T542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.671692][ T525] EXT4-fs (loop3): Remounting filesystem read-only [ 31.678938][ T542] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.731110][ T525] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.79: Failed to acquire dquot type 0 [ 31.793472][ T525] EXT4-fs (loop3): Remounting filesystem read-only [ 31.817257][ T294] EXT4-fs (loop4): unmounting filesystem. [ 31.823796][ T525] EXT4-fs (loop3): 1 orphan inode deleted [ 31.844906][ T525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 31.875408][ T525] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.024122][ T292] EXT4-fs (loop1): unmounting filesystem. [ 32.432487][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 32.432504][ T28] audit: type=1400 audit(1742259491.059:316): avc: denied { ioctl } for pid=547 comm="syz.2.83" path="socket:[16772]" dev="sockfs" ino=16772 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.475592][ T555] loop1: detected capacity change from 0 to 512 [ 32.501709][ T555] EXT4-fs: Ignoring removed i_version option [ 32.535274][ T28] audit: type=1400 audit(1742259491.169:317): avc: denied { ioctl } for pid=547 comm="syz.2.83" path="socket:[16774]" dev="sockfs" ino=16774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.584548][ T555] EXT4-fs (loop1): 1 truncate cleaned up [ 32.591839][ T555] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.645359][ T291] EXT4-fs (loop3): unmounting filesystem. [ 32.841642][ T28] audit: type=1400 audit(1742259491.469:318): avc: denied { create } for pid=556 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.915010][ T28] audit: type=1400 audit(1742259491.489:319): avc: denied { write } for pid=556 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.943615][ T28] audit: type=1400 audit(1742259491.549:320): avc: denied { read } for pid=556 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.100447][ T587] netem: change failed [ 33.105886][ T292] EXT4-fs (loop1): unmounting filesystem. [ 33.201863][ T602] loop3: detected capacity change from 0 to 128 [ 33.216474][ T28] audit: type=1400 audit(1742259491.849:321): avc: denied { create } for pid=600 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.232973][ T602] syz.3.103: attempt to access beyond end of device [ 33.232973][ T602] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 33.264628][ T603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 33.281307][ T602] syz.3.103: attempt to access beyond end of device [ 33.281307][ T602] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 33.304623][ T602] syz.3.103: attempt to access beyond end of device [ 33.304623][ T602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.318911][ T602] syz.3.103: attempt to access beyond end of device [ 33.318911][ T602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.333199][ T602] syz.3.103: attempt to access beyond end of device [ 33.333199][ T602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.355152][ T602] syz.3.103: attempt to access beyond end of device [ 33.355152][ T602] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 33.358359][ T28] audit: type=1400 audit(1742259491.989:322): avc: denied { map } for pid=601 comm="syz.3.103" path="socket:[16132]" dev="sockfs" ino=16132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.398151][ T28] audit: type=1400 audit(1742259491.989:323): avc: denied { read } for pid=601 comm="syz.3.103" path="socket:[16132]" dev="sockfs" ino=16132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.453844][ T28] audit: type=1400 audit(1742259492.089:324): avc: denied { create } for pid=608 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.893318][ T28] audit: type=1400 audit(1742259492.519:325): avc: denied { mounton } for pid=623 comm="syz.2.110" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 33.894100][ T625] 9pnet_fd: p9_fd_create_tcp (625): problem connecting socket to 127.0.0.1 [ 33.923392][ T626] loop3: detected capacity change from 0 to 512 [ 33.980602][ T626] EXT4-fs: Ignoring removed i_version option [ 34.007086][ T626] EXT4-fs (loop3): 1 truncate cleaned up [ 34.014316][ T626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.073834][ T631] loop2: detected capacity change from 0 to 2048 [ 34.176070][ T631] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.178366][ T637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.205421][ T631] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.2.112: path /13/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 34.249797][ T295] EXT4-fs (loop2): unmounting filesystem. [ 34.361421][ T647] binder: BINDER_SET_CONTEXT_MGR already set [ 34.409112][ T647] binder: 642:647 ioctl 4018620d 400000000040 returned -16 [ 34.470946][ T655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 34.484381][ T655] loop1: detected capacity change from 0 to 128 [ 34.912932][ T658] syz.1.120: attempt to access beyond end of device [ 34.912932][ T658] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 35.130915][ T291] EXT4-fs (loop3): unmounting filesystem. [ 35.168211][ T664] binder: BINDER_SET_CONTEXT_MGR already set [ 35.190013][ T664] binder: 659:664 ioctl 4018620d 400000000040 returned -16 [ 35.526241][ T680] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 35.577890][ T683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.700088][ T688] loop1: detected capacity change from 0 to 512 [ 35.728116][ T689] loop3: detected capacity change from 0 to 512 [ 35.738732][ T688] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.808992][ T688] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 35.826837][ T688] EXT4-fs (loop1): 1 truncate cleaned up [ 35.833944][ T688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.843362][ T689] EXT4-fs (loop3): 1 orphan inode deleted [ 35.853147][ T534] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:6: Failed to release dquot type 1 [ 35.873941][ T689] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.898261][ T689] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.912530][ T688] EXT4-fs (loop1): unmounting filesystem. [ 36.338073][ T698] loop1: detected capacity change from 0 to 512 [ 36.361170][ T703] loop2: detected capacity change from 0 to 1024 [ 36.394887][ T703] EXT4-fs: Ignoring removed nobh option [ 36.399314][ T291] EXT4-fs (loop3): unmounting filesystem. [ 36.402269][ T703] EXT4-fs: Ignoring removed bh option [ 36.410203][ T698] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.134: Failed to acquire dquot type 0 [ 36.443977][ T698] EXT4-fs (loop1): Remounting filesystem read-only [ 36.458279][ T698] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.134: Failed to acquire dquot type 0 [ 36.475900][ T703] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.501255][ T698] EXT4-fs (loop1): Remounting filesystem read-only [ 36.521346][ T698] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 36.684559][ T698] EXT4-fs (loop1): Remounting filesystem read-only [ 36.758556][ T698] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.134: Failed to acquire dquot type 0 [ 36.811144][ T703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.920554][ T698] EXT4-fs (loop1): Remounting filesystem read-only [ 36.934232][ T698] EXT4-fs (loop1): 1 orphan inode deleted [ 36.941274][ T698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.972293][ T703] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 36.982810][ T698] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.023046][ T718] binder: 716:718 ioctl c0306201 0 returned -14 [ 37.335543][ T727] loop0: detected capacity change from 0 to 1024 [ 37.403822][ T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.424942][ T727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.465364][ T727] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #11: comm syz.0.141: directory missing '..' [ 38.643092][ T742] loop4: detected capacity change from 0 to 512 [ 38.652643][ T742] EXT4-fs: Ignoring removed oldalloc option [ 38.660741][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 38.660848][ T28] audit: type=1400 audit(1742259496.099:348): avc: denied { remove_name } for pid=726 comm="syz.0.141" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.701403][ T565] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 38.721172][ T742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.883606][ T742] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.893337][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 38.904023][ T742] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 38.916975][ T742] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 38.928114][ T742] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.144: Failed to acquire dquot type 1 [ 38.946047][ T742] EXT4-fs (loop4): 1 truncate cleaned up [ 38.953792][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.060144][ T19] usb 3-1: config 0 has no interfaces? [ 39.095037][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 39.137340][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.163857][ T28] audit: type=1400 audit(1742259496.099:349): avc: denied { rename } for pid=726 comm="syz.0.141" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.225823][ T19] usb 3-1: config 0 descriptor?? [ 39.249943][ T742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.289013][ T293] EXT4-fs (loop0): unmounting filesystem. [ 39.383493][ T28] audit: type=1400 audit(1742259496.099:350): avc: denied { rmdir } for pid=726 comm="syz.0.141" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.441245][ T19] usb 3-1: USB disconnect, device number 2 [ 39.497285][ T295] EXT4-fs (loop2): unmounting filesystem. [ 40.163637][ C1] sched: RT throttling activated [ 40.267698][ T292] EXT4-fs (loop1): unmounting filesystem. [ 40.306279][ T754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.319158][ T294] EXT4-fs (loop4): unmounting filesystem. [ 40.348314][ T758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 40.376759][ T761] netem: change failed [ 41.450052][ T28] audit: type=1400 audit(1742259500.079:351): avc: denied { read } for pid=779 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.490136][ T784] loop3: detected capacity change from 0 to 512 [ 41.501706][ T28] audit: type=1400 audit(1742259500.129:352): avc: denied { read } for pid=785 comm="syz.2.160" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.539150][ T28] audit: type=1400 audit(1742259500.159:353): avc: denied { open } for pid=785 comm="syz.2.160" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.562344][ T788] loop0: detected capacity change from 0 to 8192 [ 41.572010][ T28] audit: type=1400 audit(1742259500.159:354): avc: denied { ioctl } for pid=785 comm="syz.2.160" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.598795][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 41.617948][ T784] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 41.642099][ T784] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.159: Failed to acquire dquot type 0 [ 41.658448][ T784] EXT4-fs (loop3): Remounting filesystem read-only [ 41.659078][ T797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.666386][ T784] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.159: Failed to acquire dquot type 0 [ 41.829406][ T800] loop2: detected capacity change from 0 to 512 [ 41.841619][ T800] EXT4-fs: Ignoring removed oldalloc option [ 41.884215][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 41.916310][ T800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.995450][ T784] EXT4-fs (loop3): Remounting filesystem read-only [ 42.017937][ T6] usb 2-1: config 0 has no interfaces? [ 42.067518][ T800] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.089432][ T800] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.162: Failed to acquire dquot type 1 [ 42.118990][ T800] EXT4-fs (loop2): 1 truncate cleaned up [ 42.184356][ T6] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 42.216625][ T784] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 42.361582][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.474743][ T784] EXT4-fs (loop3): Remounting filesystem read-only [ 42.640497][ T6] usb 2-1: config 0 descriptor?? [ 42.659402][ T784] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.159: Failed to acquire dquot type 0 [ 42.917737][ T784] EXT4-fs (loop3): Remounting filesystem read-only [ 42.985625][ T784] EXT4-fs (loop3): 1 orphan inode deleted [ 43.115844][ T800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.133151][ T784] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.143806][ T784] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.199548][ T809] loop1: detected capacity change from 0 to 256 [ 43.223966][ T809] FAT-fs (loop1): Directory bread(block 64) failed [ 43.231248][ T809] FAT-fs (loop1): Directory bread(block 65) failed [ 43.238200][ T809] FAT-fs (loop1): Directory bread(block 66) failed [ 43.246202][ T809] FAT-fs (loop1): Directory bread(block 67) failed [ 43.254221][ T809] FAT-fs (loop1): Directory bread(block 68) failed [ 43.261088][ T809] FAT-fs (loop1): Directory bread(block 69) failed [ 43.267674][ T809] FAT-fs (loop1): Directory bread(block 70) failed [ 43.274468][ T809] FAT-fs (loop1): Directory bread(block 71) failed [ 43.282084][ T809] FAT-fs (loop1): Directory bread(block 72) failed [ 43.288925][ T809] FAT-fs (loop1): Directory bread(block 73) failed [ 43.453811][ T295] EXT4-fs (loop2): unmounting filesystem. [ 49.084398][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 49.084421][ T28] audit: type=1400 audit(1742259503.559:371): avc: denied { create } for pid=820 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.180453][ T28] audit: type=1400 audit(1742259503.889:372): avc: denied { connect } for pid=820 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.203327][ T28] audit: type=1400 audit(1742259504.029:373): avc: denied { getopt } for pid=820 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.401486][ T824] usb 2-1: USB disconnect, device number 2 [ 49.416720][ T833] loop4: detected capacity change from 0 to 128 [ 49.459171][ T291] EXT4-fs (loop3): unmounting filesystem. [ 49.491369][ T28] audit: type=1400 audit(1742259508.119:374): avc: denied { create } for pid=834 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 49.536769][ T833] syz.4.170: attempt to access beyond end of device [ 49.536769][ T833] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 49.595255][ T833] syz.4.170: attempt to access beyond end of device [ 49.595255][ T833] loop4: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 49.622029][ T833] syz.4.170: attempt to access beyond end of device [ 49.622029][ T833] loop4: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 49.734132][ T854] loop0: detected capacity change from 0 to 1024 [ 49.814583][ T854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.830299][ T854] EXT4-fs (loop0): unmounting filesystem. [ 50.713871][ T721] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.748573][ T873] loop2: detected capacity change from 0 to 512 [ 50.969675][ T28] audit: type=1400 audit(1742259509.599:375): avc: denied { append } for pid=876 comm="syz.0.187" name="001" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.008637][ T877] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 51.024040][ T721] usb 5-1: Using ep0 maxpacket: 8 [ 51.032585][ T873] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 51.045019][ T877] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.054597][ T873] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 51.067114][ T721] usb 5-1: config 0 has no interfaces? [ 51.072815][ T721] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 51.083955][ T873] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.185: Failed to acquire dquot type 0 [ 51.107238][ T721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.134585][ T873] EXT4-fs (loop2): Remounting filesystem read-only [ 51.155944][ T873] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 51.184224][ T721] usb 5-1: config 0 descriptor?? [ 51.197512][ T873] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 51.235066][ T873] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.185: Failed to acquire dquot type 0 [ 51.270738][ T873] EXT4-fs (loop2): Remounting filesystem read-only [ 51.289468][ T873] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 51.326236][ T873] EXT4-fs (loop2): Remounting filesystem read-only [ 51.350616][ T873] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 51.362338][ T873] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.185: Failed to acquire dquot type 0 [ 51.377865][ T873] EXT4-fs (loop2): Remounting filesystem read-only [ 51.387674][ T873] EXT4-fs (loop2): 1 orphan inode deleted [ 51.397722][ T873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.409097][ T873] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.704309][ T904] loop4: detected capacity change from 0 to 256 [ 51.855722][ T904] FAT-fs (loop4): Directory bread(block 64) failed [ 51.872527][ T904] FAT-fs (loop4): Directory bread(block 65) failed [ 51.883887][ T904] FAT-fs (loop4): Directory bread(block 66) failed [ 51.900967][ T904] FAT-fs (loop4): Directory bread(block 67) failed [ 51.936018][ T904] FAT-fs (loop4): Directory bread(block 68) failed [ 51.957334][ T904] FAT-fs (loop4): Directory bread(block 69) failed [ 52.021422][ T904] FAT-fs (loop4): Directory bread(block 70) failed [ 52.069345][ T904] FAT-fs (loop4): Directory bread(block 71) failed [ 52.077024][ T904] FAT-fs (loop4): Directory bread(block 72) failed [ 52.085877][ T904] FAT-fs (loop4): Directory bread(block 73) failed [ 52.151613][ T295] EXT4-fs (loop2): unmounting filesystem. [ 52.261692][ T916] loop2: detected capacity change from 0 to 1024 [ 52.300787][ T916] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.340669][ T916] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.363524][ T916] JBD2: no valid journal superblock found [ 52.379100][ T916] EXT4-fs (loop2): error loading journal [ 52.652635][ T931] bridge0: port 3(vlan2) entered blocking state [ 52.711929][ T931] bridge0: port 3(vlan2) entered disabled state [ 52.793815][ T931] device vlan2 entered promiscuous mode [ 52.799963][ T931] device macsec0 entered promiscuous mode [ 52.818158][ T931] bridge0: port 3(vlan2) entered blocking state [ 52.826408][ T931] bridge0: port 3(vlan2) entered forwarding state [ 53.158567][ T946] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 53.235861][ T948] loop2: detected capacity change from 0 to 256 [ 53.322948][ T948] syz.2.211: attempt to access beyond end of device [ 53.322948][ T948] loop2: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 53.356260][ T950] loop3: detected capacity change from 0 to 512 [ 53.388732][ T950] EXT4-fs: Ignoring removed i_version option [ 53.427289][ T950] EXT4-fs: Ignoring removed i_version option [ 53.453059][ T950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.479463][ T953] device bridge0 entered promiscuous mode [ 53.508767][ T950] EXT4-fs (loop3): 1 truncate cleaned up [ 53.517996][ T950] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.530183][ T953] bridge0: port 4(macsec1) entered blocking state [ 53.570876][ T953] bridge0: port 4(macsec1) entered disabled state [ 53.581232][ T291] EXT4-fs (loop3): unmounting filesystem. [ 53.590231][ T953] device bridge0 left promiscuous mode [ 53.620035][ T956] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 54.993821][ T973] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 56.231211][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 56.231228][ T28] audit: type=1326 audit(1742259514.859:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 56.337817][ T28] audit: type=1326 audit(1742259514.919:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc69318bad0 code=0x7ffc0000 [ 56.411717][ T28] audit: type=1326 audit(1742259514.919:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 56.517447][ T28] audit: type=1326 audit(1742259514.919:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 56.596402][ T1010] loop2: detected capacity change from 0 to 512 [ 56.621103][ T28] audit: type=1326 audit(1742259514.919:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 56.652331][ T1010] EXT4-fs: Ignoring removed nobh option [ 56.705332][ T28] audit: type=1326 audit(1742259514.919:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 56.716805][ T1010] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.234: corrupted inode contents [ 56.834371][ T28] audit: type=1326 audit(1742259515.199:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 56.884026][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 56.901555][ T748] usb 5-1: USB disconnect, device number 2 [ 56.934307][ T1010] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #16: comm syz.2.234: mark_inode_dirty error [ 56.977154][ T28] audit: type=1326 audit(1742259515.199:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 57.011916][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.024735][ T1010] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.234: corrupted inode contents [ 57.075663][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.089711][ T1010] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.234: mark_inode_dirty error [ 57.113725][ T28] audit: type=1326 audit(1742259515.199:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 57.113868][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.152246][ T1010] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.234: corrupted inode contents [ 57.168478][ T1021] loop3: detected capacity change from 0 to 512 [ 57.193430][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.204176][ T1010] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 57.210378][ T28] audit: type=1326 audit(1742259515.199:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1009 comm="syz.2.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69318d169 code=0x7ffc0000 [ 57.248815][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.272825][ T1010] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.234: corrupted inode contents [ 57.294382][ T1021] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.237: Failed to acquire dquot type 0 [ 57.332904][ T1021] EXT4-fs (loop3): Remounting filesystem read-only [ 57.353053][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.360285][ T1021] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.237: Failed to acquire dquot type 0 [ 57.393823][ T1010] EXT4-fs error (device loop2): ext4_truncate:4313: inode #16: comm syz.2.234: mark_inode_dirty error [ 57.414609][ T1021] EXT4-fs (loop3): Remounting filesystem read-only [ 57.434085][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.447222][ T1010] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 57.458693][ T1021] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 57.479170][ T1010] EXT4-fs (loop2): Remounting filesystem read-only [ 57.488237][ T1021] EXT4-fs (loop3): Remounting filesystem read-only [ 57.496563][ T1010] EXT4-fs (loop2): 1 truncate cleaned up [ 57.498613][ T1021] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.237: Failed to acquire dquot type 0 [ 57.502703][ T1010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.524221][ T329] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 57.529262][ T1010] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.546061][ T1021] EXT4-fs (loop3): Remounting filesystem read-only [ 57.603074][ T329] EXT4-fs (loop2): Remounting filesystem read-only [ 57.613074][ T1021] EXT4-fs (loop3): 1 orphan inode deleted [ 57.619525][ T1021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.633852][ T1021] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.635435][ T1035] loop1: detected capacity change from 0 to 1024 [ 57.662996][ T1035] EXT4-fs: Ignoring removed bh option [ 57.679533][ T295] EXT4-fs (loop2): unmounting filesystem. [ 57.691130][ T1039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 57.716144][ T1035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.758970][ T292] EXT4-fs (loop1): unmounting filesystem. [ 57.881022][ T1047] loop2: detected capacity change from 0 to 256 [ 57.896570][ T1047] exfat: Bad value for 'time_offset' [ 58.289898][ T291] EXT4-fs (loop3): unmounting filesystem. [ 58.350816][ T1067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.361100][ T1067] device bridge_slave_0 left promiscuous mode [ 58.368898][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.394270][ T1067] device bridge_slave_1 left promiscuous mode [ 58.401230][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.417555][ T1071] loop3: detected capacity change from 0 to 1024 [ 58.434119][ T1071] EXT4-fs: Ignoring removed bh option [ 58.440908][ T1073] loop0: detected capacity change from 0 to 512 [ 58.464195][ T1073] journal_path: Lookup failure for './bus' [ 58.471185][ T1073] EXT4-fs: error: could not find journal device path [ 58.495624][ T1071] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.562455][ T291] EXT4-fs (loop3): unmounting filesystem. [ 58.631468][ T1084] loop0: detected capacity change from 0 to 128 [ 58.662373][ T1084] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.681156][ T1084] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.744392][ T1091] loop2: detected capacity change from 0 to 512 [ 58.763708][ T534] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.803335][ T1091] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.264: Failed to acquire dquot type 0 [ 58.830548][ T1091] EXT4-fs (loop2): Remounting filesystem read-only [ 58.832342][ T1098] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.838966][ T1091] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.264: Failed to acquire dquot type 0 [ 58.879300][ T1091] EXT4-fs (loop2): Remounting filesystem read-only [ 58.889138][ T1091] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 58.907197][ T1091] EXT4-fs (loop2): Remounting filesystem read-only [ 58.917162][ T1091] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.264: Failed to acquire dquot type 0 [ 58.931474][ T1091] EXT4-fs (loop2): Remounting filesystem read-only [ 58.938648][ T1091] EXT4-fs (loop2): 1 orphan inode deleted [ 58.947536][ T1091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.962572][ T1091] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.037500][ T1098] kvm [1097]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xce [ 59.051643][ T1098] kvm [1097]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x40ce [ 59.128893][ T1107] loop1: detected capacity change from 0 to 2048 [ 59.195647][ T1107] loop1: p3 p4 < > [ 59.277513][ T318] udevd[318]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 59.467030][ T1115] loop1: detected capacity change from 0 to 512 [ 59.509090][ T1117] loop4: detected capacity change from 0 to 1024 [ 59.514704][ T1115] EXT4-fs: Ignoring removed i_version option [ 59.531602][ T1117] EXT4-fs: Ignoring removed bh option [ 59.558300][ T1115] EXT4-fs (loop1): 1 truncate cleaned up [ 59.569949][ T1115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.599257][ T1117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.783008][ T294] EXT4-fs (loop4): unmounting filesystem. [ 59.882232][ T1130] netlink: 96 bytes leftover after parsing attributes in process `syz.3.277'. [ 60.156176][ T295] EXT4-fs (loop2): unmounting filesystem. [ 60.663924][ T1142] bridge0: port 1(gretap1) entered blocking state [ 60.689132][ T1142] bridge0: port 1(gretap1) entered disabled state [ 60.719458][ T1142] device gretap1 entered promiscuous mode [ 60.753971][ T1142] bridge0: port 1(gretap1) entered blocking state [ 60.761021][ T1142] bridge0: port 1(gretap1) entered forwarding state [ 60.812419][ T1156] kvm [1155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xce [ 60.814305][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 60.844061][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 60.888714][ T1156] kvm [1155]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x40ce [ 60.908456][ T292] EXT4-fs (loop1): unmounting filesystem. [ 60.923908][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 61.328673][ T1173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.350702][ T1175] loop4: detected capacity change from 0 to 512 [ 61.416327][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 61.416346][ T28] audit: type=1400 audit(1742259520.049:455): avc: denied { sqpoll } for pid=1176 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.432944][ T1175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.468852][ T28] audit: type=1400 audit(1742259520.099:456): avc: denied { create } for pid=1176 comm="syz.3.295" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.498902][ T1179] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 61.599635][ T1175] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.614277][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 61.616174][ T1186] loop3: detected capacity change from 0 to 1024 [ 61.631123][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 61.658511][ T28] audit: type=1400 audit(1742259520.289:457): avc: denied { validate_trans } for pid=1187 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.667054][ T1186] EXT4-fs: Ignoring removed bh option [ 61.738514][ T294] EXT4-fs (loop4): unmounting filesystem. [ 61.739057][ T1186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.761991][ T28] audit: type=1400 audit(1742259520.349:458): avc: denied { mounton } for pid=1174 comm="syz.4.294" path="/41/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.798731][ T28] audit: type=1400 audit(1742259520.349:459): avc: denied { mount } for pid=1174 comm="syz.4.294" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.842414][ T28] audit: type=1400 audit(1742259520.399:460): avc: denied { connect } for pid=1194 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.881327][ T28] audit: type=1400 audit(1742259520.509:461): avc: denied { bind } for pid=1197 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.929486][ T28] audit: type=1400 audit(1742259520.509:462): avc: denied { write } for pid=1197 comm="syz.0.304" path="socket:[17976]" dev="sockfs" ino=17976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.932634][ T291] EXT4-fs (loop3): unmounting filesystem. [ 61.982117][ T1202] loop4: detected capacity change from 0 to 2048 [ 62.023406][ T28] audit: type=1400 audit(1742259520.649:463): avc: denied { getopt } for pid=1194 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.081232][ T28] audit: type=1400 audit(1742259520.699:464): avc: denied { bind } for pid=1199 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.402155][ T1202] loop4: p1 < > p4 < > [ 62.656155][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 62.669817][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 62.723537][ T1205] binder: 1204:1205 ioctl 4018620d 0 returned -22 [ 62.807009][ T1220] loop1: detected capacity change from 0 to 512 [ 62.887452][ T1220] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.312: Failed to acquire dquot type 0 [ 62.910714][ T1230] binder: 1223:1230 ioctl c0306201 0 returned -14 [ 62.944922][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 63.047680][ T1220] EXT4-fs (loop1): Remounting filesystem read-only [ 63.135255][ T1220] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.312: Failed to acquire dquot type 0 [ 63.148757][ T1220] EXT4-fs (loop1): Remounting filesystem read-only [ 63.156409][ T1220] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 63.183943][ T1220] EXT4-fs (loop1): Remounting filesystem read-only [ 63.197118][ T1220] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.312: Failed to acquire dquot type 0 [ 63.214697][ T1220] EXT4-fs (loop1): Remounting filesystem read-only [ 63.233813][ T1220] EXT4-fs (loop1): 1 orphan inode deleted [ 63.260481][ T1220] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.265479][ T1237] loop2: detected capacity change from 0 to 256 [ 63.297025][ T1239] loop4: detected capacity change from 0 to 1024 [ 63.306266][ T1237] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.333003][ T1239] EXT4-fs: Ignoring removed bh option [ 63.365692][ T1220] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.395296][ T1239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.495410][ T294] EXT4-fs (loop4): unmounting filesystem. [ 63.582069][ T1253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.323'. [ 63.610247][ T1257] binder: 1250:1257 ioctl 4018620d 0 returned -22 [ 63.921340][ T1264] binder: 1262:1264 ioctl c0306201 0 returned -14 [ 64.077175][ T1266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 64.208171][ T1273] loop2: detected capacity change from 0 to 512 [ 64.326705][ T1280] loop4: detected capacity change from 0 to 1024 [ 64.366090][ T1280] EXT4-fs: Ignoring removed i_version option [ 64.402931][ T1280] EXT4-fs (loop4): Test dummy encryption mode enabled [ 64.455233][ T1274] Zero length message leads to an empty skb [ 64.515006][ T1280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.769416][ T294] EXT4-fs (loop4): unmounting filesystem. [ 65.182850][ T292] EXT4-fs (loop1): unmounting filesystem. [ 66.452071][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 66.452088][ T28] audit: type=1400 audit(1742259525.079:506): avc: denied { create } for pid=1334 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.512213][ T28] audit: type=1400 audit(1742259525.119:507): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 66.567431][ T28] audit: type=1400 audit(1742259525.119:508): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.619523][ T28] audit: type=1400 audit(1742259525.119:509): avc: denied { read write } for pid=1334 comm="syz.0.350" name="usbmon5" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.677315][ T28] audit: type=1400 audit(1742259525.119:510): avc: denied { open } for pid=1334 comm="syz.0.350" path="/dev/usbmon5" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.723970][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 66.836061][ T28] audit: type=1400 audit(1742259525.119:511): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.912317][ T1352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.357'. [ 67.138360][ T28] audit: type=1400 audit(1742259525.119:512): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.164453][ T28] audit: type=1400 audit(1742259525.119:513): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.193095][ T28] audit: type=1400 audit(1742259525.119:514): avc: denied { ioctl } for pid=1334 comm="syz.0.350" path="/dev/usbmon5" dev="devtmpfs" ino=170 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.239630][ T28] audit: type=1400 audit(1742259525.129:515): avc: denied { nlmsg_write } for pid=1340 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 67.285369][ T1359] netlink: 173 bytes leftover after parsing attributes in process `syz.4.360'. [ 67.502798][ T1378] SELinux: policydb version 0 does not match my version range 15-33 [ 67.512532][ T1378] SELinux: failed to load policy [ 67.646846][ T1386] loop1: detected capacity change from 0 to 512 [ 67.713117][ T1386] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.371: Failed to acquire dquot type 0 [ 67.733955][ T1386] EXT4-fs (loop1): Remounting filesystem read-only [ 67.747150][ T1386] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.371: Failed to acquire dquot type 0 [ 67.783013][ T1386] EXT4-fs (loop1): Remounting filesystem read-only [ 67.801789][ T1386] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 67.840423][ T1386] EXT4-fs (loop1): Remounting filesystem read-only [ 67.855350][ T1386] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.371: Failed to acquire dquot type 0 [ 67.884242][ T1386] EXT4-fs (loop1): Remounting filesystem read-only [ 67.903506][ T1386] EXT4-fs (loop1): 1 orphan inode deleted [ 67.919631][ T1386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.950128][ T1386] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.664572][ T292] EXT4-fs (loop1): unmounting filesystem. [ 70.898379][ T1442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 70.947990][ T1447] loop4: detected capacity change from 0 to 128 [ 71.003039][ T1447] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.063867][ T1447] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.224658][ T1466] loop4: detected capacity change from 0 to 512 [ 71.356702][ T1466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.454697][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 71.454913][ T28] audit: type=1400 audit(1742259530.089:583): avc: granted { setsecparam } for pid=1474 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 71.455155][ T1466] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.399: invalid indirect mapped block 83886080 (level 1) [ 71.508613][ T28] audit: type=1400 audit(1742259530.139:584): avc: denied { write } for pid=1467 comm="syz.1.400" name="icmp6" dev="proc" ino=4026532525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.514482][ T1466] EXT4-fs (loop4): Remounting filesystem read-only [ 71.639774][ T1466] EXT4-fs (loop4): 1 orphan inode deleted [ 71.699949][ T1479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 71.701392][ T1466] EXT4-fs (loop4): 1 truncate cleaned up [ 71.755227][ T1466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.069404][ T28] audit: type=1400 audit(1742259530.699:585): avc: denied { setopt } for pid=1465 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.163120][ T294] EXT4-fs (loop4): unmounting filesystem. [ 72.275107][ T1493] netlink: 36 bytes leftover after parsing attributes in process `syz.4.408'. [ 72.281674][ T1497] ------------[ cut here ]------------ [ 72.290379][ T1497] WARNING: CPU: 0 PID: 1497 at mm/page_alloc.c:5813 __alloc_pages+0x3e7/0x610 [ 72.300517][ T1497] Modules linked in: [ 72.305008][ T1497] CPU: 0 PID: 1497 Comm: syz.0.409 Not tainted 6.1.128-syzkaller-00015-gf3c4686f770c #0 [ 72.315205][ T1497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.325458][ T1497] RIP: 0010:__alloc_pages+0x3e7/0x610 [ 72.330903][ T1497] Code: 00 48 8d 5c 24 60 0f 85 9f 00 00 00 89 d1 81 e1 7f ff ff ff a9 00 00 04 00 0f 44 ca 89 ca e9 90 00 00 00 c6 05 cf 9b d7 05 01 <0f> 0b e9 eb fc ff ff 43 0f b6 44 35 00 84 c0 8b 54 24 0c 0f 85 b8 [ 72.352195][ T1497] RSP: 0018:ffffc9000dcef620 EFLAGS: 00010246 [ 72.358813][ T1497] RAX: 0000000000000000 RBX: ffffc9000dcef680 RCX: 0000000000000000 [ 72.366727][ T1497] RDX: 0000000000040dc0 RSI: 0000000000000000 RDI: ffffc9000dcef6a8 [ 72.375010][ T1497] RBP: ffffc9000dcef738 R08: dffffc0000000000 R09: ffffc9000dcef680 [ 72.383650][ T1497] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000000b [ 72.383936][ T28] audit: type=1400 audit(1742259530.989:586): avc: denied { create } for pid=1500 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.391929][ T1497] R13: 1ffff92001b9decc R14: 0000000000040dc0 R15: 1ffff92001b9dec8 [ 72.391957][ T1497] FS: 00007f93abad36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.391979][ T1497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.438796][ T28] audit: type=1400 audit(1742259530.989:587): avc: denied { setopt } for pid=1500 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.445835][ T1497] CR2: 0000400000001000 CR3: 000000013272f000 CR4: 00000000003506b0 [ 72.477004][ T1497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.485944][ T1497] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.495579][ T1497] Call Trace: [ 72.498819][ T1497] [ 72.499974][ T28] audit: type=1400 audit(1742259530.989:588): avc: denied { bind } for pid=1500 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.502021][ T1497] ? show_regs+0x58/0x60 [ 72.528323][ T1497] ? __warn+0x160/0x3d0 [ 72.533382][ T1497] ? __alloc_pages+0x3e7/0x610 [ 72.538495][ T1497] ? report_bug+0x4d5/0x7d0 [ 72.542956][ T1497] ? __alloc_pages+0x3e7/0x610 [ 72.548126][ T1497] ? handle_bug+0x41/0x70 [ 72.551726][ T28] audit: type=1400 audit(1742259531.189:589): avc: denied { listen } for pid=1500 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.552836][ T1497] ? exc_invalid_op+0x1b/0x50 [ 72.580436][ T1497] ? asm_exc_invalid_op+0x1b/0x20 [ 72.585949][ T1497] ? __alloc_pages+0x3e7/0x610 [ 72.591113][ T1497] ? __hashtab_insert+0x5c/0x150 [ 72.596417][ T1497] ? prep_new_page+0x110/0x110 [ 72.601610][ T28] audit: type=1400 audit(1742259531.189:590): avc: denied { connect } for pid=1500 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.602090][ T1497] ? class_read+0x7f2/0xd90 [ 72.628968][ T1497] __kmalloc_large_node+0x9e/0x1b0 [ 72.634984][ T1497] ? hashtab_init+0xb4/0x170 [ 72.639559][ T1497] __kmalloc+0xef/0x1e0 [ 72.642278][ T28] audit: type=1400 audit(1742259531.219:591): avc: denied { write } for pid=1500 comm="syz.4.412" path="socket:[19363]" dev="sockfs" ino=19363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.644093][ T1497] hashtab_init+0xb4/0x170 [ 72.674334][ T1497] symtab_init+0x41/0x60 [ 72.678848][ T1497] policydb_read+0xa45/0x28d0 [ 72.683815][ T1497] ? string_to_av_perm+0x1d0/0x1d0 [ 72.689388][ T1497] ? __kasan_kmalloc+0x9c/0xb0 [ 72.694077][ T1497] ? kmalloc_trace+0x44/0xa0 [ 72.698600][ T1497] security_load_policy+0x19d/0x1270 [ 72.704228][ T1497] ? up_read+0x5d/0x220 [ 72.708275][ T1497] ? irqentry_exit+0x30/0x40 [ 72.712724][ T1497] ? selinux_policy_commit+0xda0/0xda0 [ 72.718227][ T1497] ? refcount_dec_and_lock_irqsave+0xe1/0x160 [ 72.724472][ T1497] ? copy_user_enhanced_fast_string+0xa/0x40 [ 72.731648][ T1497] sel_write_load+0x2dd/0x5a0 [ 72.736849][ T1497] ? avc_policy_seqno+0x1b/0x70 [ 72.742128][ T1497] ? sel_make_dir+0x270/0x270 [ 72.746948][ T1497] ? fsnotify_perm+0x6a/0x5b0 [ 72.751592][ T1497] ? security_file_permission+0x86/0xb0 [ 72.757198][ T1497] ? sel_make_dir+0x270/0x270 [ 72.762705][ T1497] vfs_write+0x41d/0xed0 [ 72.767038][ T1497] ? irqentry_exit+0x30/0x40 [ 72.771352][ T28] audit: type=1400 audit(1742259531.409:592): avc: denied { create } for pid=1503 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.771716][ T1497] ? file_end_write+0x1c0/0x1c0 [ 72.796994][ T1497] ? mutex_lock+0xb1/0x1e0 [ 72.801218][ T1497] ? bit_wait_io_timeout+0x120/0x120 [ 72.806594][ T1497] ? __fdget_pos+0x2e2/0x390 [ 72.811274][ T1497] ? ksys_write+0x77/0x2c0 [ 72.816329][ T1497] ksys_write+0x199/0x2c0 [ 72.820805][ T1508] loop4: detected capacity change from 0 to 128 [ 72.820808][ T1497] ? __this_cpu_preempt_check+0x13/0x20 [ 72.834008][ T1497] ? xfd_validate_state+0x6f/0x170 [ 72.840911][ T1497] ? __ia32_sys_read+0x90/0x90 [ 72.846436][ T1497] ? fpregs_restore_userregs+0x130/0x290 [ 72.852880][ T1497] __x64_sys_write+0x7b/0x90 [ 72.854227][ T1509] xt_hashlimit: size too large, truncated to 1048576 [ 72.858323][ T1497] x64_sys_call+0x2f/0x9a0 [ 72.870110][ T1497] do_syscall_64+0x3b/0xb0 [ 72.874760][ T1497] ? clear_bhb_loop+0x55/0xb0 [ 72.879484][ T1497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.885964][ T1497] RIP: 0033:0x7f93aab8d169 [ 72.890176][ T1497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.904487][ T1508] syz.4.415: attempt to access beyond end of device [ 72.904487][ T1508] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 72.914204][ T1497] RSP: 002b:00007f93abad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.914343][ T1497] RAX: ffffffffffffffda RBX: 00007f93aada5fa0 RCX: 00007f93aab8d169 [ 72.914362][ T1497] RDX: 0000000000002000 RSI: 0000400000000000 RDI: 0000000000000003 [ 72.914376][ T1497] RBP: 00007f93aac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.914392][ T1497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.914407][ T1497] R13: 0000000000000000 R14: 00007f93aada5fa0 R15: 00007fff85afdc28 [ 72.914431][ T1497] [ 72.914439][ T1497] ---[ end trace 0000000000000000 ]--- [ 72.915038][ T1497] SELinux: failed to load policy [ 73.041873][ T1508] syz.4.415: attempt to access beyond end of device [ 73.041873][ T1508] loop4: rw=524288, sector=241, nr_sectors = 160 limit=128 [ 73.063806][ T1508] syz.4.415: attempt to access beyond end of device [ 73.063806][ T1508] loop4: rw=0, sector=273, nr_sectors = 8 limit=128 [ 73.350824][ T1530] loop2: detected capacity change from 0 to 512 [ 73.405256][ T1530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.424752][ T1530] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.460982][ T1514] loop1: detected capacity change from 0 to 32768 [ 73.522121][ T1514] loop1: p1 p3 < p5 p6 p7 > [ 73.531026][ T295] EXT4-fs (loop2): unmounting filesystem. [ 73.538812][ T1514] loop1: p6 start 337920 is beyond EOD, truncated [ 73.554406][ T1514] loop1: p7 size 15204352 extends beyond EOD, truncated [ 73.635618][ T102] loop1: p1 p3 < p5 p6 p7 > [ 73.660877][ T102] loop1: p6 start 337920 is beyond EOD, truncated [ 73.669127][ T102] loop1: p7 size 15204352 extends beyond EOD, truncated [ 73.923035][ T1554] loop4: detected capacity change from 0 to 1024 [ 73.973423][ T1556] loop1: detected capacity change from 0 to 2048 [ 73.994380][ T1554] EXT4-fs: Ignoring removed bh option [ 74.012118][ T442] udevd[442]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 74.052737][ T318] udevd[318]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 74.070842][ T426] udevd[426]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.096131][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 74.118611][ T1554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.214776][ T1556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.238974][ T1556] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.1.433: path /67/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 74.304006][ T1556] EXT4-fs (loop1): Remounting filesystem read-only [ 74.311979][ T294] EXT4-fs (loop4): unmounting filesystem. [ 74.325746][ T442] udevd[442]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 74.339849][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 74.354074][ T426] udevd[426]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.375863][ T318] udevd[318]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 74.389074][ T1572] loop2: detected capacity change from 0 to 512 [ 74.397693][ T292] EXT4-fs (loop1): unmounting filesystem. [ 74.499122][ T1572] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.439: Failed to acquire dquot type 0 [ 74.634482][ T1572] EXT4-fs (loop2): Remounting filesystem read-only [ 74.642809][ T1572] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.439: Failed to acquire dquot type 0 [ 74.683930][ T1572] EXT4-fs (loop2): Remounting filesystem read-only [ 74.713205][ T1572] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 74.732461][ T1572] EXT4-fs (loop2): Remounting filesystem read-only [ 74.744202][ T1572] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.439: Failed to acquire dquot type 0 [ 74.757725][ T1572] EXT4-fs (loop2): Remounting filesystem read-only [ 74.768117][ T1572] EXT4-fs (loop2): 1 orphan inode deleted [ 74.776455][ T1572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.791688][ T1587] loop4: detected capacity change from 0 to 256 [ 74.793961][ T1572] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.798786][ T1587] exfat: Bad value for 'time_offset' [ 74.963938][ C0] bridge0: received packet on gretap1 with own address as source address (addr:52:ef:5c:a4:f4:f3, vlan:0) [ 74.983766][ T318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.057399][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.079660][ T1598] device bridge_slave_0 left promiscuous mode [ 75.087768][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.101586][ T1598] device bridge_slave_1 left promiscuous mode [ 75.116410][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.230432][ T295] EXT4-fs (loop2): unmounting filesystem. [ 75.343719][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.533785][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 75.544704][ T24] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 75.579935][ T1618] binder: BINDER_SET_CONTEXT_MGR already set [ 75.585891][ T24] usb 2-1: config 0 has no interface number 0 [ 75.598908][ T1618] binder: 1616:1618 ioctl 4018620d 400000000040 returned -16 [ 75.620820][ T24] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30718, setting to 64 [ 75.711169][ T24] usb 2-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.817585][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 75.831145][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.840243][ T24] usb 2-1: Product: syz [ 75.850587][ T24] usb 2-1: Manufacturer: syz [ 75.856930][ T24] usb 2-1: SerialNumber: syz [ 75.960676][ T24] usb 2-1: config 0 descriptor?? [ 75.986485][ T1627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 76.001003][ T24] snd-usb-audio: probe of 2-1:0.16 failed with error -2 [ 76.016678][ T1627] device gretap1 left promiscuous mode [ 76.025229][ T1627] bridge0: port 1(gretap1) entered disabled state [ 76.072639][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.655908][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 76.655925][ T28] audit: type=1400 audit(1742259535.289:694): avc: denied { prog_run } for pid=1648 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.694531][ T28] audit: type=1400 audit(1742259535.329:695): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 76.727312][ T28] audit: type=1400 audit(1742259535.329:696): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.758436][ T28] audit: type=1400 audit(1742259535.329:697): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.804787][ T1652] loop2: detected capacity change from 0 to 256 [ 76.814726][ T1652] exfat: Bad value for 'time_offset' [ 76.838839][ T28] audit: type=1400 audit(1742259535.329:698): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.879163][ T28] audit: type=1400 audit(1742259535.449:699): avc: denied { mounton } for pid=1650 comm="syz.2.466" path="/84/file0" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.909422][ T318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.922659][ T28] audit: type=1400 audit(1742259535.559:700): avc: denied { create } for pid=1650 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.954724][ T1654] loop4: detected capacity change from 0 to 1024 [ 76.961121][ T28] audit: type=1400 audit(1742259535.559:701): avc: denied { setopt } for pid=1650 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.003400][ T1654] EXT4-fs: Ignoring removed nobh option [ 77.018253][ T1654] EXT4-fs: Ignoring removed bh option [ 77.036848][ T1654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.056291][ T28] audit: type=1400 audit(1742259535.559:702): avc: denied { ioctl } for pid=1650 comm="syz.2.466" path="socket:[20575]" dev="sockfs" ino=20575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.091127][ T28] audit: type=1400 audit(1742259535.559:703): avc: denied { write } for pid=1650 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.121391][ T1654] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.453745][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.495220][ T930] usb 2-1: USB disconnect, device number 3 [ 77.643894][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 77.655946][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.657418][ T1673] binder: 1669:1673 ioctl c0306201 0 returned -14 [ 77.689166][ T19] usb 5-1: config 0 has no interfaces? [ 77.697322][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 77.698005][ T1675] loop1: detected capacity change from 0 to 128 [ 77.709565][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.786451][ T19] usb 5-1: config 0 descriptor?? [ 77.832516][ T1675] syz.1.474: attempt to access beyond end of device [ 77.832516][ T1675] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 78.033274][ T1654] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 78.078938][ T930] usb 5-1: USB disconnect, device number 3 [ 78.400318][ T1699] bridge0: port 1(syz_tun) entered blocking state [ 78.408561][ T1699] bridge0: port 1(syz_tun) entered disabled state [ 78.422100][ T1699] device syz_tun entered promiscuous mode [ 78.857078][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 78.940985][ T294] EXT4-fs (loop4): unmounting filesystem. [ 79.743291][ T1727] loop4: detected capacity change from 0 to 128 [ 79.912378][ T1735] netlink: 96 bytes leftover after parsing attributes in process `syz.4.498'. [ 82.136980][ T1776] loop1: detected capacity change from 0 to 2048 [ 82.213125][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 82.213144][ T28] audit: type=1400 audit(1742259540.839:815): avc: denied { mounton } for pid=1775 comm="syz.1.512" path="/83/file0" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 82.330075][ T28] audit: type=1400 audit(1742259540.959:816): avc: denied { create } for pid=1779 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.378731][ T1776] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.512: bad orphan inode 8192 [ 82.404070][ T28] audit: type=1400 audit(1742259541.029:817): avc: denied { setopt } for pid=1779 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.440670][ T28] audit: type=1400 audit(1742259541.029:818): avc: denied { module_request } for pid=1779 comm="syz.0.514" kmod=69707461626C655FC3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 82.481043][ T1776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.510577][ T28] audit: type=1400 audit(1742259541.029:819): avc: denied { execmem } for pid=1787 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.548649][ T28] audit: type=1400 audit(1742259541.139:820): avc: denied { mount } for pid=1775 comm="syz.1.512" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.582898][ T28] audit: type=1400 audit(1742259541.179:821): avc: denied { write } for pid=1775 comm="syz.1.512" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.609102][ T28] audit: type=1400 audit(1742259541.179:822): avc: denied { add_name } for pid=1775 comm="syz.1.512" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.653485][ T28] audit: type=1400 audit(1742259541.179:823): avc: denied { create } for pid=1775 comm="syz.1.512" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.698812][ T28] audit: type=1400 audit(1742259541.179:824): avc: denied { write } for pid=1775 comm="syz.1.512" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 82.944188][ T292] EXT4-fs (loop1): unmounting filesystem. [ 83.588542][ T1812] loop1: detected capacity change from 0 to 512 [ 83.605647][ T1812] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.619548][ T1812] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 83.720942][ T1820] loop2: detected capacity change from 0 to 256 [ 83.830465][ T1820] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 84.275352][ T1812] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 84.679149][ T1812] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 85.084153][ T1812] System zones: 0-2, 18-18, 34-35 [ 85.112809][ T1812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.122673][ T1833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 85.230228][ T292] EXT4-fs (loop1): unmounting filesystem. [ 85.258899][ T1841] loop4: detected capacity change from 0 to 512 [ 85.320076][ T1852] syz.3.538[1852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.320170][ T1852] syz.3.538[1852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.356824][ T1841] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.534: Failed to acquire dquot type 0 [ 85.421795][ T1841] EXT4-fs (loop4): Remounting filesystem read-only [ 85.433277][ T1841] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.534: Failed to acquire dquot type 0 [ 85.447236][ T1841] EXT4-fs (loop4): Remounting filesystem read-only [ 85.449619][ T1858] loop1: detected capacity change from 0 to 4096 [ 85.457342][ T1841] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 85.616383][ T1841] EXT4-fs (loop4): Remounting filesystem read-only [ 85.685582][ T1858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.706323][ T1841] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.534: Failed to acquire dquot type 0 [ 85.929267][ T1841] EXT4-fs (loop4): Remounting filesystem read-only [ 86.036247][ T1841] EXT4-fs (loop4): 1 orphan inode deleted [ 86.087638][ T1841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.137795][ T1841] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.311741][ T1892] process 'syz.3.544' launched '/dev/fd/-1' with NULL argv: empty string added [ 86.328826][ T1890] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.377886][ T1858] EXT4-fs (loop1): unmounting filesystem. [ 86.506043][ T1908] loop2: detected capacity change from 0 to 512 [ 86.559563][ T294] EXT4-fs (loop4): unmounting filesystem. [ 86.611971][ T1908] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.552: Failed to acquire dquot type 0 [ 86.655188][ T1917] loop4: detected capacity change from 0 to 4096 [ 86.663789][ T1908] EXT4-fs (loop2): Remounting filesystem read-only [ 86.670018][ T1917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.677504][ T1908] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.552: Failed to acquire dquot type 0 [ 86.707257][ T1920] loop1: detected capacity change from 0 to 256 [ 86.717838][ T1920] exfat: Bad value for 'time_offset' [ 86.738630][ T1908] EXT4-fs (loop2): Remounting filesystem read-only [ 86.761947][ T1908] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 86.798667][ T318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.823766][ T306] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.846294][ T1908] EXT4-fs (loop2): Remounting filesystem read-only [ 86.860794][ T1917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.880339][ T1908] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.552: Failed to acquire dquot type 0 [ 86.968360][ T1908] EXT4-fs (loop2): Remounting filesystem read-only [ 86.990006][ T1928] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 87.000242][ T1908] EXT4-fs (loop2): 1 orphan inode deleted [ 87.007115][ T1908] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.019050][ T1908] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.021653][ T1928] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.554: corrupted inode contents [ 87.043678][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 87.050590][ T1928] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #15: comm syz.4.554: mark_inode_dirty error [ 87.061212][ T306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.070074][ T1928] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.554: corrupted inode contents [ 87.104066][ T1928] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.554: mark_inode_dirty error [ 87.137150][ T1928] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.554: corrupted inode contents [ 87.143725][ T306] usb 4-1: config 0 has no interfaces? [ 87.162542][ T1928] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.554: mark_inode_dirty error [ 87.176040][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 87.183983][ T1928] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #15: comm syz.4.554: corrupted inode contents [ 87.220924][ T1928] EXT4-fs error (device loop4): ext4_truncate:4313: inode #15: comm syz.4.554: mark_inode_dirty error [ 87.225855][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.236331][ T1928] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.554: couldn't truncate inode 15 (err -117) [ 87.323164][ T306] usb 4-1: config 0 descriptor?? [ 87.507535][ T1932] block device autoloading is deprecated and will be removed. [ 87.517727][ T1932] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 87.580968][ T19] usb 4-1: USB disconnect, device number 2 [ 87.686810][ T294] EXT4-fs (loop4): unmounting filesystem. [ 87.825642][ T295] EXT4-fs (loop2): unmounting filesystem. [ 87.898910][ T1948] loop0: detected capacity change from 0 to 512 [ 87.920194][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 87.920211][ T28] audit: type=1400 audit(1742259546.549:951): avc: denied { bind } for pid=1949 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.975611][ T28] audit: type=1400 audit(1742259546.549:952): avc: denied { name_bind } for pid=1949 comm="syz.2.567" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 87.975656][ T28] audit: type=1400 audit(1742259546.549:953): avc: denied { node_bind } for pid=1949 comm="syz.2.567" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 87.975684][ T28] audit: type=1400 audit(1742259546.549:954): avc: denied { connect } for pid=1952 comm="syz.1.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.979231][ T1948] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 87.979278][ T1948] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 87.979296][ T1948] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.565: Failed to acquire dquot type 0 [ 87.979489][ T1948] EXT4-fs (loop0): Remounting filesystem read-only [ 87.979525][ T1948] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 87.979551][ T1948] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 87.979569][ T1948] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.565: Failed to acquire dquot type 0 [ 87.980289][ T1948] EXT4-fs (loop0): Remounting filesystem read-only [ 87.980534][ T1948] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 87.981048][ T1948] EXT4-fs (loop0): Remounting filesystem read-only [ 87.981168][ T1948] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 87.981196][ T1948] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 87.981213][ T1948] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.565: Failed to acquire dquot type 0 [ 87.981376][ T1948] EXT4-fs (loop0): Remounting filesystem read-only [ 87.981424][ T1948] EXT4-fs (loop0): 1 orphan inode deleted [ 87.981446][ T1948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.981553][ T1948] ext4 filesystem being mounted at /135/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.381158][ T1974] loop4: detected capacity change from 0 to 512 [ 88.393250][ T1978] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.472289][ T1977] block device autoloading is deprecated and will be removed. [ 88.500164][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.511664][ T1974] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.576: Failed to acquire dquot type 0 [ 88.543955][ T1974] EXT4-fs (loop4): Remounting filesystem read-only [ 88.543984][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.558791][ T1974] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.576: Failed to acquire dquot type 0 [ 88.591811][ T1974] EXT4-fs (loop4): Remounting filesystem read-only [ 88.601302][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.602044][ T1974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 88.630348][ T1974] EXT4-fs (loop4): Remounting filesystem read-only [ 88.630456][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.637679][ T1974] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.576: Failed to acquire dquot type 0 [ 88.658346][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.680512][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.744918][ T1974] EXT4-fs (loop4): Remounting filesystem read-only [ 88.757625][ T1974] EXT4-fs (loop4): 1 orphan inode deleted [ 88.765551][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.773853][ T1974] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.779859][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.799744][ T1974] ext4 filesystem being mounted at /98/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.802909][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.828141][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.845151][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.858241][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.869081][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.891904][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.901711][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.913501][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.922074][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.932759][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.941587][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.955610][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.966274][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.976063][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 88.993920][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.012885][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.034466][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.043190][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.076148][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.092927][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.102110][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.110929][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.120378][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.131375][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.140842][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.149767][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.158064][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.167972][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.177704][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.189694][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.198056][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.207254][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.218350][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.341309][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.356200][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.365162][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.424514][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.439140][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.451965][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.459729][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.468334][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.477710][ T19] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 89.487518][ T293] EXT4-fs (loop0): unmounting filesystem. [ 89.494610][ T294] EXT4-fs (loop4): unmounting filesystem. [ 89.501620][ T19] hid-generic 0000:0000:0002.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.555338][ T2006] usb usb5: usbfs: process 2006 (syz.4.587) did not claim interface 0 before use [ 89.585589][ T2008] 9pnet_fd: Insufficient options for proto=fd [ 89.693395][ T2014] loop2: detected capacity change from 0 to 512 [ 89.705448][ T2010] loop0: detected capacity change from 0 to 8192 [ 89.765981][ T2014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.812600][ T2014] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.944577][ T295] EXT4-fs (loop2): unmounting filesystem. [ 90.020238][ T2027] loop2: detected capacity change from 0 to 512 [ 90.090736][ T2027] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.594: Failed to acquire dquot type 0 [ 90.122975][ T2027] EXT4-fs (loop2): Remounting filesystem read-only [ 90.147586][ T2027] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.594: Failed to acquire dquot type 0 [ 90.186924][ T2032] netlink: 1 bytes leftover after parsing attributes in process `syz.0.595'. [ 90.244724][ T2027] EXT4-fs (loop2): Remounting filesystem read-only [ 90.283769][ T2027] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 90.314353][ T2027] EXT4-fs (loop2): Remounting filesystem read-only [ 90.322236][ T2027] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.594: Failed to acquire dquot type 0 [ 90.343926][ T2027] EXT4-fs (loop2): Remounting filesystem read-only [ 90.403789][ T2027] EXT4-fs (loop2): 1 orphan inode deleted [ 90.410354][ T2027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.451418][ T2027] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.700609][ T2040] loop4: detected capacity change from 0 to 512 [ 90.762222][ T2040] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.597: Failed to acquire dquot type 0 [ 90.788892][ T2040] EXT4-fs (loop4): Remounting filesystem read-only [ 90.818009][ T2040] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.597: Failed to acquire dquot type 0 [ 90.880400][ T295] EXT4-fs (loop2): unmounting filesystem. [ 90.932953][ T2040] EXT4-fs (loop4): Remounting filesystem read-only [ 90.948818][ T2040] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 90.973958][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 90.986596][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.006933][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.021119][ T2040] EXT4-fs (loop4): Remounting filesystem read-only [ 91.034874][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.049006][ T2040] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.597: Failed to acquire dquot type 0 [ 91.071979][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.095379][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.104699][ T2040] EXT4-fs (loop4): Remounting filesystem read-only [ 91.113045][ T2040] EXT4-fs (loop4): 1 orphan inode deleted [ 91.134053][ T2040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.136135][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.157654][ T2040] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.183696][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.204120][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.214636][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.223355][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.232621][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.246587][ T2057] loop1: detected capacity change from 0 to 512 [ 91.253503][ T2057] EXT4-fs: Ignoring removed i_version option [ 91.265910][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.277830][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.286358][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.295194][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.302621][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.314233][ T2057] EXT4-fs (loop1): 1 truncate cleaned up [ 91.322314][ T2057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.337396][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.347627][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.356884][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.366264][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.376721][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.387838][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.396012][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.406023][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.415486][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.423959][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.436044][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.443559][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.453449][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.462209][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.473706][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.482216][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.491324][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.500445][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.510570][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.519095][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.531039][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.561438][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.577893][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.597187][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.632903][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.661819][ T2063] loop3: detected capacity change from 0 to 1024 [ 91.671558][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 91.684186][ T2063] EXT4-fs: Ignoring removed bh option [ 91.788134][ T2063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.023276][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 92.036521][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 92.047815][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 92.057401][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 92.077889][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 92.092453][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 92.127794][ T19] hid-generic 0000:0000:0002.0002: unknown main item tag 0x0 [ 92.140500][ T19] hid-generic 0000:0000:0002.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 92.141197][ T294] EXT4-fs (loop4): unmounting filesystem. [ 92.167429][ T291] EXT4-fs (loop3): unmounting filesystem. [ 92.180277][ T2072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 92.242301][ T2074] loop3: detected capacity change from 0 to 512 [ 92.294006][ T1786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 92.312239][ T2074] journal_path: Lookup failure for './bus' [ 92.331093][ T2079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.610'. [ 92.352863][ T2074] EXT4-fs: error: could not find journal device path [ 92.515436][ T2094] loop0: detected capacity change from 0 to 1024 [ 92.604330][ T2100] loop4: detected capacity change from 0 to 512 [ 92.700137][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 92.722798][ T2094] EXT4-fs: Ignoring removed bh option [ 92.742110][ T2100] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.755589][ T2100] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.616: bg 0: block 248: padding at end of block bitmap is not set [ 92.775881][ T2100] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.616: Failed to acquire dquot type 1 [ 92.793838][ T2100] EXT4-fs (loop4): 1 truncate cleaned up [ 92.832472][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 92.880545][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 92.918846][ T2094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.954648][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.075788][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.229720][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.334497][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.423248][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.492978][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.552310][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.603172][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.646715][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.683863][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.718570][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.757835][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.797327][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.835716][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.874494][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.913495][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.940988][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.951828][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.960763][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.971058][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.982055][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 93.991932][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.001733][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.017802][ T2110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 94.027881][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.043114][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.058181][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.069852][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.079975][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.089002][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.098306][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.107883][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.117408][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.127958][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.137526][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.147296][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.156183][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.164785][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.172880][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.182289][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.191703][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.200589][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.212906][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.221566][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.233557][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.244889][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.258893][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.274603][ T748] hid-generic 0000:0000:0002.0003: unknown main item tag 0x0 [ 94.285224][ T2100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.298495][ T293] EXT4-fs (loop0): unmounting filesystem. [ 94.305413][ T292] EXT4-fs (loop1): unmounting filesystem. [ 94.315712][ T748] hid-generic 0000:0000:0002.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.380729][ T2119] loop3: detected capacity change from 0 to 512 [ 94.438539][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 94.438557][ T28] audit: type=1326 audit(1742259553.069:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.474747][ T28] audit: type=1326 audit(1742259553.099:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.512644][ T294] EXT4-fs (loop4): unmounting filesystem. [ 94.536029][ T28] audit: type=1326 audit(1742259553.109:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.538701][ T2119] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.626: corrupted inode contents [ 94.584956][ T28] audit: type=1326 audit(1742259553.109:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.622499][ T2132] loop1: detected capacity change from 0 to 1024 [ 94.630478][ T2132] EXT4-fs: Ignoring removed i_version option [ 94.637739][ T2132] ext4: Bad value for 'commit' [ 94.643042][ T28] audit: type=1326 audit(1742259553.109:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.674634][ T28] audit: type=1326 audit(1742259553.109:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.711961][ T28] audit: type=1326 audit(1742259553.109:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.739398][ T2119] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #16: comm syz.3.626: mark_inode_dirty error [ 94.746500][ T28] audit: type=1326 audit(1742259553.109:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.782370][ T28] audit: type=1326 audit(1742259553.109:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.820616][ T28] audit: type=1326 audit(1742259553.109:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93aab8d169 code=0x7ffc0000 [ 94.855144][ T2119] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.626: corrupted inode contents [ 94.870947][ T2119] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.626: mark_inode_dirty error [ 94.883832][ T2119] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.626: corrupted inode contents [ 94.947822][ T2119] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 95.049239][ T2119] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #16: comm syz.3.626: corrupted inode contents [ 95.129573][ T2142] loop0: detected capacity change from 0 to 1024 [ 95.236166][ T2119] EXT4-fs error (device loop3): ext4_truncate:4313: inode #16: comm syz.3.626: mark_inode_dirty error [ 95.321933][ T2142] EXT4-fs: Ignoring removed bh option [ 95.336934][ T2119] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 95.362816][ T2148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 95.374335][ T2119] EXT4-fs (loop3): 1 truncate cleaned up [ 95.382563][ T2119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.395958][ T2142] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.404340][ T2119] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.426735][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 95.484314][ T293] EXT4-fs (loop0): unmounting filesystem. [ 95.547698][ T291] EXT4-fs (loop3): unmounting filesystem. [ 95.562692][ T2160] loop1: detected capacity change from 0 to 2048 [ 95.587169][ T2164] loop4: detected capacity change from 0 to 128 [ 95.606982][ T2164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.631437][ T2164] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.680853][ T2173] loop0: detected capacity change from 0 to 256 [ 95.689623][ T2173] exfat: Bad value for 'time_offset' [ 95.729128][ T2174] loop3: detected capacity change from 0 to 512 [ 95.760574][ T2174] EXT4-fs: Ignoring removed oldalloc option [ 95.835676][ T2174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.862709][ T2160] Alternate GPT is invalid, using primary GPT. [ 95.911370][ T2174] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.923512][ T2174] EXT4-fs error (device loop3): ext4_acquire_dquot:6782: comm syz.3.642: Failed to acquire dquot type 1 [ 95.943580][ T2174] EXT4-fs (loop3): 1 truncate cleaned up [ 95.952086][ T2174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.019970][ T2160] loop1: p1 p2 p3 [ 96.321506][ T294] EXT4-fs (loop4): unmounting filesystem. [ 96.360773][ T102] Alternate GPT is invalid, using primary GPT. [ 96.409046][ T102] loop1: p1 p2 p3 [ 96.599761][ T318] udevd[318]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 96.748677][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 96.761396][ T426] udevd[426]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 96.779166][ T318] udevd[318]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 96.794569][ T426] udevd[426]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 97.019758][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 97.402965][ T291] EXT4-fs (loop3): unmounting filesystem. [ 97.411906][ T2192] loop1: detected capacity change from 0 to 1024 [ 97.459912][ T2192] EXT4-fs: Ignoring removed i_version option [ 97.515426][ T2192] ext4: Bad value for 'commit' [ 97.760973][ T2198] loop0: detected capacity change from 0 to 1024 [ 97.840174][ T2198] EXT4-fs: Ignoring removed nobh option [ 97.962778][ T2198] EXT4-fs: Ignoring removed bh option [ 98.073948][ T2198] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.310678][ T2198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.439502][ T2213] loop1: detected capacity change from 0 to 512 [ 98.517729][ T2213] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.655: Failed to acquire dquot type 0 [ 98.546707][ T2213] EXT4-fs (loop1): Remounting filesystem read-only [ 98.557135][ T2213] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.655: Failed to acquire dquot type 0 [ 98.577155][ T2213] EXT4-fs (loop1): Remounting filesystem read-only [ 98.597190][ T2213] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 0 free clusters [ 98.637194][ T2228] loop2: detected capacity change from 0 to 512 [ 98.645643][ T2228] EXT4-fs: Ignoring removed nobh option [ 98.653363][ T2228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.656843][ T2213] EXT4-fs (loop1): Remounting filesystem read-only [ 98.704085][ T2213] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.655: Failed to acquire dquot type 0 [ 98.724072][ T2213] EXT4-fs (loop1): Remounting filesystem read-only [ 98.733433][ T2228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.747459][ T2213] EXT4-fs (loop1): 1 orphan inode deleted [ 98.755902][ T2228] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.773956][ T2213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.785348][ T2213] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.815876][ T2228] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.661: bg 0: block 224: padding at end of block bitmap is not set [ 98.894264][ T2228] EXT4-fs (loop2): Remounting filesystem read-only [ 98.936027][ T295] EXT4-fs (loop2): unmounting filesystem. [ 99.056081][ T2242] loop4: detected capacity change from 0 to 1024 [ 99.110162][ T2242] EXT4-fs: Ignoring removed orlov option [ 99.149503][ T2242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.194393][ T2242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.297243][ T294] EXT4-fs (loop4): unmounting filesystem. [ 99.403351][ T2255] loop2: detected capacity change from 0 to 2048 [ 99.453290][ T292] EXT4-fs (loop1): unmounting filesystem. [ 99.518901][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 99.518923][ T28] audit: type=1400 audit(1742259558.149:1029): avc: denied { unmount } for pid=2260 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 99.564815][ T2255] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.583515][ T2268] xt_hashlimit: max too large, truncated to 1048576 [ 99.601681][ T2255] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm +}[@: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 99.655653][ T28] audit: type=1326 audit(1742259558.289:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb38d169 code=0x7ffc0000 [ 99.744143][ T28] audit: type=1326 audit(1742259558.329:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb38d169 code=0x7ffc0000 [ 99.774316][ T28] audit: type=1326 audit(1742259558.329:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8cb38d169 code=0x7ffc0000 [ 99.870252][ T28] audit: type=1326 audit(1742259558.329:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb38d169 code=0x7ffc0000 [ 99.898884][ T295] EXT4-fs (loop2): unmounting filesystem. [ 99.976809][ T28] audit: type=1326 audit(1742259558.329:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb38d169 code=0x7ffc0000 [ 100.012773][ T2284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 100.050997][ T28] audit: type=1400 audit(1742259558.639:1035): avc: denied { accept } for pid=2283 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.321253][ T2295] loop2: detected capacity change from 0 to 1024 [ 100.397982][ T2295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.432086][ T2295] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.689: Allocating blocks 385-513 which overlap fs metadata [ 100.448810][ T2305] loop1: detected capacity change from 0 to 512 [ 100.458675][ T2305] EXT4-fs: Ignoring removed i_version option [ 100.478224][ T2293] EXT4-fs (loop2): pa ffff888132ae33f0: logic 16, phys. 129, len 24 [ 100.488417][ T2293] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 100.495876][ T2311] loop4: detected capacity change from 0 to 256 [ 100.515250][ T2305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.543747][ T2305] ext4 filesystem being mounted at /129/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.559843][ T295] EXT4-fs (loop2): unmounting filesystem. [ 100.566305][ T2305] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 100.579671][ T28] audit: type=1400 audit(1742259559.209:1036): avc: denied { name_bind } for pid=2312 comm="syz.3.695" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 100.604383][ T28] audit: type=1400 audit(1742259559.209:1037): avc: denied { node_bind } for pid=2312 comm="syz.3.695" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 100.604832][ T2305] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #4: comm syz.1.692: corrupted inode contents [ 100.633858][ T28] audit: type=1400 audit(1742259559.239:1038): avc: denied { relabelto } for pid=2304 comm="syz.1.692" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:null_device_t:s0" [ 100.702884][ T2305] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #4: comm syz.1.692: mark_inode_dirty error [ 100.742634][ T2305] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #4: comm syz.1.692: corrupted inode contents [ 100.768591][ T2323] random: crng reseeded on system resumption [ 100.784170][ T2305] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.692: mark_inode_dirty error [ 100.854637][ T2305] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.692: Failed to acquire dquot type 1 [ 100.858538][ T2314] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #4: comm syz.1.692: corrupted inode contents [ 100.899237][ T2314] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #4: comm syz.1.692: mark_inode_dirty error [ 100.913978][ T2314] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #4: comm syz.1.692: corrupted inode contents [ 100.928975][ T2314] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #4: comm syz.1.692: mark_inode_dirty error [ 100.960438][ T2321] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #12: comm syz.1.692: Directory hole found for htree leaf block 0 [ 101.102391][ T292] EXT4-fs (loop1): unmounting filesystem. [ 103.321409][ T2398] loop3: detected capacity change from 0 to 2048 [ 103.355562][ T2398] EXT4-fs: Ignoring removed bh option [ 103.382434][ T2398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 103.394330][ T2202] ------------[ cut here ]------------ [ 103.400103][ T2202] kernel BUG at fs/buffer.c:2714! [ 103.411684][ T2202] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 103.419097][ T2202] CPU: 0 PID: 2202 Comm: kmmpd-loop0 Tainted: G W 6.1.128-syzkaller-00015-gf3c4686f770c #0 [ 103.431870][ T2202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.444292][ T2202] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 103.449948][ T2202] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 8a 1d 9f ff 0f 0b e8 83 1d 9f ff <0f> 0b e8 7c 1d 9f ff 0f 0b e8 75 1d 9f ff 0f 0b e8 6e 1d 9f ff 0f [ 103.476417][ T2202] RSP: 0018:ffffc90012127c20 EFLAGS: 00010293 [ 103.482481][ T2202] RAX: ffffffff81d6790d RBX: 0000000000000000 RCX: ffff888116911440 [ 103.490411][ T2202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.499557][ T2202] RBP: ffffc90012127c70 R08: ffffffff81d674e0 R09: ffffed1021f94a2b [ 103.508410][ T2202] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 103.517087][ T2202] R13: 1ffff11021f94a2a R14: ffff88810fca5150 R15: 0000000000003801 [ 103.526634][ T2202] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 103.541426][ T2202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.550223][ T2202] CR2: ffffffffffffffe8 CR3: 0000000113e03000 CR4: 00000000003506b0 [ 103.560370][ T2202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.569757][ T2202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.580197][ T2202] Call Trace: [ 103.584050][ T2202] [ 103.586912][ T2202] ? __die_body+0x62/0xb0 [ 103.592262][ T2202] ? die+0x88/0xb0 [ 103.596292][ T2202] ? do_trap+0x103/0x330 [ 103.601301][ T2202] ? submit_bh_wbc+0x4cd/0x4f0 [ 103.609680][ T2202] ? handle_invalid_op+0x95/0xc0 [ 103.615820][ T2202] ? submit_bh_wbc+0x4cd/0x4f0 [ 103.620973][ T2202] ? exc_invalid_op+0x32/0x50 [ 103.629529][ T2202] ? asm_exc_invalid_op+0x1b/0x20 [ 103.635097][ T2202] ? submit_bh_wbc+0xa0/0x4f0 [ 103.642097][ T2202] ? submit_bh_wbc+0x4cd/0x4f0 [ 103.649057][ T2202] ? submit_bh_wbc+0x4cd/0x4f0 [ 103.654039][ T2202] ? __kasan_check_read+0x11/0x20 [ 103.658903][ T2202] submit_bh+0x1d/0x30 [ 103.662880][ T2202] write_mmp_block_thawed+0x3a0/0x570 [ 103.668881][ T2202] ? read_mmp_block+0x7d0/0x7d0 [ 103.677215][ T2202] ? update_process_times+0x1b0/0x1b0 [ 103.683845][ T2202] write_mmp_block+0x12b/0x2a0 [ 103.690452][ T2202] kmmpd+0x40c/0xa10 [ 103.694821][ T2202] ? write_mmp_block_thawed+0x570/0x570 [ 103.700706][ T2202] ? __kthread_parkme+0x12d/0x180 [ 103.706112][ T2202] kthread+0x26d/0x300 [ 103.710476][ T2202] ? write_mmp_block_thawed+0x570/0x570 [ 103.716825][ T2202] ? kthread_blkcg+0xd0/0xd0 [ 103.721904][ T2202] ret_from_fork+0x1f/0x30 [ 103.730135][ T2202] [ 103.733787][ T2202] Modules linked in: [ 103.817640][ T2202] ---[ end trace 0000000000000000 ]--- [ 103.824438][ T2202] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 103.837331][ T2202] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 bc e6 ff e9 b0 fe ff ff e8 8a 1d 9f ff 0f 0b e8 83 1d 9f ff <0f> 0b e8 7c 1d 9f ff 0f 0b e8 75 1d 9f ff 0f 0b e8 6e 1d 9f ff 0f [ 103.893648][ T2202] RSP: 0018:ffffc90012127c20 EFLAGS: 00010293 [ 103.900568][ T2202] RAX: ffffffff81d6790d RBX: 0000000000000000 RCX: ffff888116911440 [ 103.923674][ T2202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.932649][ T2202] RBP: ffffc90012127c70 R08: ffffffff81d674e0 R09: ffffed1021f94a2b [ 103.953885][ T2202] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 103.972639][ T2202] R13: 1ffff11021f94a2a R14: ffff88810fca5150 R15: 0000000000003801 [ 103.991110][ T2202] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 104.014156][ T2202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.029325][ T2202] CR2: 000040000033c000 CR3: 000000011fe91000 CR4: 00000000003506a0 [ 104.053633][ T2202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.062242][ T2202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.076365][ T2401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.094061][ T2202] Kernel panic - not syncing: Fatal exception [ 104.100765][ T2202] Kernel Offset: disabled [ 104.107142][ T2202] Rebooting in 86400 seconds..