last executing test programs: 3.976841438s ago: executing program 2 (id=3978): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.122270972s ago: executing program 4 (id=3995): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x50a60080, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0x0) 3.019443002s ago: executing program 2 (id=3996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r2, &(0x7f0000000080)=""/147, 0x93) 2.981509456s ago: executing program 2 (id=3998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$inet(0x2, 0x80016, 0x4) 2.875167877s ago: executing program 2 (id=4000): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fsopen(&(0x7f0000000500)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f00000003c0)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x106, 0xa}}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write(r6, &(0x7f0000000100)='^', 0x1) write(r6, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.874534406s ago: executing program 0 (id=4001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xb}], 0x1c) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48080) socket(0x28, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000180)={0x0, 'ip6gretap0\x00', {0x3}, 0x800}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xce7}, 0x10208, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000200000020000000000000000000000105000000200000000000806426a16cd2e7dca9e0830b616de72c2699ecf03e7a5cf4e5291dbf30390f5e400ebf4b72c20adf7acda8ca8f8fce38c2548c236ef901e3cde321f3ed41e5ad2ac558ca2b8f81e6586b0e60c7bb3b075dbe7cddb1850cb832a9bbdc60d0f8c1cdbb7f5a5d97780326b3"], 0x0, 0x42}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) writev(r7, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) 2.828775731s ago: executing program 4 (id=4003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0xffffffff}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02f56dff8d360873a30ea4fe27b4"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1000ca90787701"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000006c0)="23f44c39ab0447085e70a5f37680c5ea6018eb5d837acb2a95350960df0ac24dcfcb9af3935d173e49970e859747377200e3390e0da8e299be4281607465c1dd4782c3786cbba5d85a80a3afc3649b75629d95cfc527c78b20aa00a6af1481191962b9b0", &(0x7f0000000740)="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"}}, &(0x7f0000000300)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) memfd_create(0x0, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) read(r7, &(0x7f0000002a00)=""/4100, 0x1004) fcntl$lock(r7, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x47f3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 2.687123225s ago: executing program 4 (id=4005): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xbf03da7354435452}, 0x8800) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x0) 2.618583942s ago: executing program 0 (id=4007): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.118711361s ago: executing program 4 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 2.03055076s ago: executing program 1 (id=4011): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 1.933846079s ago: executing program 1 (id=4012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r3}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_io_uring_complete(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, 0x0, 0x20000801) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@usrquota}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0xc) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r6, 0x807f, 0x1000000, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r7, 0x0, 0x8000002}, 0x18) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") 1.378168034s ago: executing program 0 (id=4013): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x20a8, 0x4005, 0x8000000b, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB="01bac3af663862a76d031bf658edff6aa7dc979cb513582794a6e8248c68941c611723756791e4c60a01a3ac", @ANYBLOB="4122ccd099ca350c1f7f299dc3bff7387461b488cc17", @ANYBLOB="4c565175561e065654d9cdc4d8669542c9dcfeb269c85b0ac63e183a9f8d3be0033a090c4556092da543104cea686f9d3c8853b873d9b86850c1d1bb9f53ce74ad7a4a842d13f281c9ec5976c0bd95e88e460ab8ea3ba9ef3e0829d1c19e05cd5b", @ANYRESDEC=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b['], 0x0, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x80001, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4080) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003052dbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000140012800800010067726500080002800400120008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1.377717605s ago: executing program 3 (id=4014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000280)=0x14) read(r2, &(0x7f0000002a00)=""/4100, 0x1004) 1.21802511s ago: executing program 3 (id=4015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0xffffffff}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a08004500002800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02f56dff8d360873a30ea4fe27b4"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1000ca90787701"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000006c0)="23f44c39ab0447085e70a5f37680c5ea6018eb5d837acb2a95350960df0ac24dcfcb9af3935d173e49970e859747377200e3390e0da8e299be4281607465c1dd4782c3786cbba5d85a80a3afc3649b75629d95cfc527c78b20aa00a6af1481191962b9b0", &(0x7f0000000740)="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"}}, &(0x7f0000000300)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) memfd_create(0x0, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) read(r7, &(0x7f0000002a00)=""/4100, 0x1004) fcntl$lock(r7, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x47f3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 1.146244667s ago: executing program 1 (id=4016): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 1.125697399s ago: executing program 3 (id=4017): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@version_u}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) syz_clone(0x50a60080, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0x0) 1.061633085s ago: executing program 1 (id=4018): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") fallocate(0xffffffffffffffff, 0x0, 0x8e14, 0x8ffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xbf03da7354435452}, 0x8800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x3}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.008994341s ago: executing program 2 (id=4019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r2, &(0x7f0000000080)=""/147, 0x93) 956.541366ms ago: executing program 2 (id=4020): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x50a60080, 0x0, 0xfffffffffffffc84, 0x0, 0x0, 0x0) 910.635971ms ago: executing program 1 (id=4021): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 789.136102ms ago: executing program 4 (id=4022): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 777.242584ms ago: executing program 3 (id=4023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000013c5382247253591d46489175e96864a9fed2c56e3ecf97532327b964c896d36fa4e2f82aa2ebc8578930c7ba3650df6b9c718d66323033a5e5b896df23f460395fdbfdb3b3151ce7c321861"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 750.508796ms ago: executing program 4 (id=4024): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 720.199069ms ago: executing program 3 (id=4025): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, 0x0, 0x68d107e97b1d0536) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89\x89\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zpo\xd0\xc7\'CT') r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, &(0x7f0000000240), 0x40000000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000380), &(0x7f00000005c0)=r7}, 0x20) r8 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) 435.526537ms ago: executing program 0 (id=4026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x9a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC=r1, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000640)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000004"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffbfffa}}}}]}, 0x44}}, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r4, &(0x7f0000000080)=""/147, 0x93) 155.858835ms ago: executing program 0 (id=4027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0xffffffff}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a08004500002800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02f56dff8d360873a30ea4fe27b4"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1000ca90787701"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000006c0)="23f44c39ab0447085e70a5f37680c5ea6018eb5d837acb2a95350960df0ac24dcfcb9af3935d173e49970e859747377200e3390e0da8e299be4281607465c1dd4782c3786cbba5d85a80a3afc3649b75629d95cfc527c78b20aa00a6af1481191962b9b0", &(0x7f0000000740)="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"}}, &(0x7f0000000300)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) memfd_create(0x0, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) read(r7, &(0x7f0000002a00)=""/4100, 0x1004) fcntl$lock(r7, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x47f3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 78.659133ms ago: executing program 0 (id=4028): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x0) 5.03563ms ago: executing program 1 (id=4029): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fsopen(&(0x7f0000000500)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f00000003c0)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x106, 0xa}}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) write(r6, &(0x7f0000000100)='^', 0x1) write(r6, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=4030): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="e4010000160001", @ANYRES32=0x0], 0x1e4}, 0x1, 0x0, 0x0, 0x4000084}, 0x200040c4) kernel console output (not intermixed with test programs): system 00000000-0000-0000-0000-000000000000. [ 409.935810][T15059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.991552][T15222] 9pnet_fd: Insufficient options for proto=fd [ 410.046232][T15226] loop0: detected capacity change from 0 to 1024 [ 410.054891][T15226] EXT4-fs: Ignoring removed oldalloc option [ 410.060999][T15226] EXT4-fs: Ignoring removed bh option [ 410.126431][T15226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.181837][T15059] veth0_vlan: entered promiscuous mode [ 410.191469][T15059] veth1_vlan: entered promiscuous mode [ 410.213203][T15059] veth0_macvtap: entered promiscuous mode [ 410.223521][T15059] veth1_macvtap: entered promiscuous mode [ 410.238123][T15059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.252032][T15059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.265537][ T4910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.276030][ T4910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.294479][ T4910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.315570][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.330774][T15239] loop3: detected capacity change from 0 to 2048 [ 410.346717][ T4910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.442812][T15239] EXT4-fs (loop3): failed to initialize system zone (-117) [ 410.452909][ T36] usb usb6-port6: unable to enumerate USB device [ 410.454237][T15239] EXT4-fs (loop3): mount failed [ 410.518108][T15246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3245'. [ 410.542860][T15246] macvtap2: entered allmulticast mode [ 410.550548][T15246] batman_adv: batadv0: Adding interface: macvtap2 [ 410.557361][T15246] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.614758][T15246] batman_adv: batadv0: Interface activated: macvtap2 [ 411.014830][T15263] loop3: detected capacity change from 0 to 512 [ 411.220361][T15263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.573775][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.771487][T15282] loop0: detected capacity change from 0 to 1024 [ 411.778925][T15282] EXT4-fs: Ignoring removed oldalloc option [ 411.785385][T15282] EXT4-fs: Ignoring removed bh option [ 411.813093][T15282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.829206][T15282] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3257: Allocating blocks 449-513 which overlap fs metadata [ 411.860912][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.882280][T15287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3259'. [ 411.909224][T15287] bridge0: entered promiscuous mode [ 411.915140][T15287] macvtap1: entered allmulticast mode [ 411.921331][T15287] bridge0: entered allmulticast mode [ 411.928794][T15287] batman_adv: batadv0: Adding interface: macvtap1 [ 411.935593][T15287] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.965565][T15287] batman_adv: batadv0: Interface activated: macvtap1 [ 412.013233][T15290] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3258'. [ 412.046910][T15292] loop3: detected capacity change from 0 to 2048 [ 412.101894][T15292] EXT4-fs (loop3): failed to initialize system zone (-117) [ 412.114541][T15292] EXT4-fs (loop3): mount failed [ 412.194955][T15300] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 412.201675][T15300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.209502][T15300] vhci_hcd vhci_hcd.0: Device attached [ 412.214201][T15304] loop0: detected capacity change from 0 to 1024 [ 412.235255][T15301] vhci_hcd: connection closed [ 412.235482][ T4188] vhci_hcd: stop threads [ 412.242561][T15304] EXT4-fs: Ignoring removed oldalloc option [ 412.244480][ T4188] vhci_hcd: release socket [ 412.244493][ T4188] vhci_hcd: disconnect device [ 412.250570][T15304] EXT4-fs: Ignoring removed bh option [ 412.346839][T15304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.418861][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.440730][T15309] loop4: detected capacity change from 0 to 2048 [ 412.469113][T15309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.481966][T15309] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.496827][T15315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.568070][T15312] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3265: bg 0: block 345: padding at end of block bitmap is not set [ 412.585243][T15312] EXT4-fs (loop4): Remounting filesystem read-only [ 412.597692][T15322] loop2: detected capacity change from 0 to 128 [ 412.612805][T15322] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 412.654174][T15322] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.682950][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.712677][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.765390][T15328] loop4: detected capacity change from 0 to 1024 [ 412.772647][T15328] EXT4-fs: Ignoring removed oldalloc option [ 412.779090][T15328] EXT4-fs: Ignoring removed bh option [ 412.816410][T15330] loop3: detected capacity change from 0 to 2048 [ 412.892521][T15328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.906089][T15330] EXT4-fs (loop3): failed to initialize system zone (-117) [ 412.916245][T15333] loop2: detected capacity change from 0 to 2048 [ 413.013242][ T10] usb usb6-port6: attempt power cycle [ 413.041233][T15330] EXT4-fs (loop3): mount failed [ 413.071673][T15328] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3269: Allocating blocks 449-513 which overlap fs metadata [ 413.117181][T15339] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 413.123917][T15339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 413.131594][T15339] vhci_hcd vhci_hcd.0: Device attached [ 413.190924][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.211124][T15333] EXT4-fs (loop2): failed to initialize system zone (-117) [ 413.218990][T15333] EXT4-fs (loop2): mount failed [ 413.250896][T15340] vhci_hcd: connection closed [ 413.253259][ T12] vhci_hcd: stop threads [ 413.262552][ T12] vhci_hcd: release socket [ 413.267245][ T12] vhci_hcd: disconnect device [ 413.286161][T15345] loop4: detected capacity change from 0 to 2048 [ 413.314409][ T1038] vhci_hcd: vhci_device speed not set [ 413.321127][T15345] EXT4-fs (loop4): failed to initialize system zone (-117) [ 413.333962][T15345] EXT4-fs (loop4): mount failed [ 413.490490][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 413.490507][ T29] audit: type=1400 audit(1760901136.791:15537): avc: denied { create } for pid=15348 comm="syz.2.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.920087][T15364] 9pnet_fd: Insufficient options for proto=fd [ 413.994739][ T29] audit: type=1400 audit(1760901137.221:15538): avc: denied { mounton } for pid=15360 comm="syz.3.3278" path="/17/file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 414.588130][ T29] audit: type=1400 audit(1760901137.891:15539): avc: denied { mounton } for pid=15369 comm="syz.4.3280" path="/120/file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 414.639559][ T29] audit: type=1400 audit(1760901137.941:15540): avc: denied { create } for pid=15369 comm="syz.4.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 414.709006][ T29] audit: type=1400 audit(1760901138.011:15541): avc: denied { create } for pid=15372 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 414.735387][T15373] loop3: detected capacity change from 0 to 1024 [ 414.742467][T15373] EXT4-fs: Ignoring removed oldalloc option [ 414.748658][T15373] EXT4-fs: Ignoring removed bh option [ 414.796060][T15373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.812765][ T29] audit: type=1400 audit(1760901138.111:15542): avc: denied { mount } for pid=15379 comm="syz.0.3283" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 414.826920][T15373] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3281: Allocating blocks 449-513 which overlap fs metadata [ 414.835273][ T29] audit: type=1400 audit(1760901138.111:15543): avc: denied { create } for pid=15379 comm="syz.0.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 414.862121][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3283'. [ 414.883766][T15380] !yz!: rxe_newlink: already configured on team_slave_0 [ 414.891423][ T29] audit: type=1400 audit(1760901138.131:15544): avc: denied { mount } for pid=15372 comm="syz.3.3281" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 414.914698][ T29] audit: type=1400 audit(1760901138.131:15545): avc: denied { add_name } for pid=15372 comm="syz.3.3281" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.936177][ T29] audit: type=1400 audit(1760901138.131:15546): avc: denied { create } for pid=15372 comm="syz.3.3281" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 414.964738][ T10] usb usb6-port6: unable to enumerate USB device [ 414.971983][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.159227][T15393] netlink: 'wޣ': attribute type 13 has an invalid length. [ 415.251258][T15393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.269067][T15387] loop1: detected capacity change from 0 to 2048 [ 415.280224][T15387] /dev/loop1: Can't open blockdev [ 415.395541][T15393] loop3: detected capacity change from 0 to 512 [ 415.418154][T15393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.434729][T15393] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.479194][T15407] netlink: 'wޣ': attribute type 13 has an invalid length. [ 415.498507][T15409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3292'. [ 415.524921][T15407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.551959][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'. [ 415.574745][T15407] loop1: detected capacity change from 0 to 512 [ 415.596924][T15407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.612418][T15407] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.659079][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.699075][T15414] loop0: detected capacity change from 0 to 2048 [ 415.717347][T15414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.735971][T15414] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.752647][T15424] loop1: detected capacity change from 0 to 512 [ 415.763834][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.776079][T15424] EXT4-fs (loop1): too many log groups per flexible block group [ 415.785284][T15424] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 415.794565][T15424] EXT4-fs (loop1): mount failed [ 415.835889][T15432] netlink: 'wޣ': attribute type 13 has an invalid length. [ 415.848877][T15434] loop0: detected capacity change from 0 to 1024 [ 415.852625][T15436] loop1: detected capacity change from 0 to 512 [ 415.856341][T15434] EXT4-fs: Ignoring removed oldalloc option [ 415.868607][T15434] EXT4-fs: Ignoring removed bh option [ 415.875618][T15436] EXT4-fs (loop1): too many log groups per flexible block group [ 415.883550][T15436] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 415.890688][T15436] EXT4-fs (loop1): mount failed [ 415.898735][T15434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.918509][T15434] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3301: Allocating blocks 449-513 which overlap fs metadata [ 415.938924][T15432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.957384][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.972638][T15444] loop1: detected capacity change from 0 to 512 [ 415.979993][T15444] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 415.991070][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.002161][T15444] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3304: invalid indirect mapped block 4294967295 (level 0) [ 416.017101][T15444] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3304: invalid indirect mapped block 4294967295 (level 1) [ 416.032106][T15444] EXT4-fs (loop1): 1 orphan inode deleted [ 416.038076][T15444] EXT4-fs (loop1): 1 truncate cleaned up [ 416.045019][T15439] loop4: detected capacity change from 0 to 512 [ 416.047073][T15444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.083666][T15449] loop0: detected capacity change from 0 to 2048 [ 416.084974][T15444] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.3304: iget: bad extra_isize 46 (inode size 256) [ 416.092948][T15439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.116902][T15439] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.117635][T15444] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.3304: iget: bad extra_isize 46 (inode size 256) [ 416.152226][T15449] EXT4-fs (loop0): failed to initialize system zone (-117) [ 416.160280][T15449] EXT4-fs (loop0): mount failed [ 416.185416][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.209308][T15455] IPVS: stopping master sync thread 15458 ... [ 416.245453][T15462] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3309'. [ 416.343389][T15469] loop3: detected capacity change from 0 to 512 [ 416.359260][T15469] EXT4-fs (loop3): too many log groups per flexible block group [ 416.378895][T15469] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 416.388659][T15469] EXT4-fs (loop3): mount failed [ 416.439279][T15477] loop2: detected capacity change from 0 to 2048 [ 416.451629][T15479] loop1: detected capacity change from 0 to 512 [ 416.500368][T15477] EXT4-fs (loop2): failed to initialize system zone (-117) [ 416.510718][T15479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.521263][T15477] EXT4-fs (loop2): mount failed [ 416.586618][T15490] loop0: detected capacity change from 0 to 2048 [ 416.606523][T15490] EXT4-fs (loop0): failed to initialize system zone (-117) [ 416.614164][T15490] EXT4-fs (loop0): mount failed [ 416.618838][T15492] loop2: detected capacity change from 0 to 2048 [ 416.646475][T15492] EXT4-fs (loop2): failed to initialize system zone (-117) [ 416.664172][T15492] EXT4-fs (loop2): mount failed [ 416.700761][T15500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3321'. [ 416.710608][T15498] IPVS: stopping master sync thread 15501 ... [ 416.710892][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.743976][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'. [ 416.781458][T15507] loop3: detected capacity change from 0 to 2048 [ 416.794802][T15506] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3322'. [ 416.818684][T15507] EXT4-fs (loop3): failed to initialize system zone (-117) [ 416.857311][T15507] EXT4-fs (loop3): mount failed [ 416.893072][T15517] loop4: detected capacity change from 0 to 2048 [ 416.919672][T15517] EXT4-fs (loop4): failed to initialize system zone (-117) [ 416.943046][T15517] EXT4-fs (loop4): mount failed [ 417.055208][T15528] loop4: detected capacity change from 0 to 2048 [ 417.103560][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.116571][T15528] EXT4-fs (loop4): failed to initialize system zone (-117) [ 417.124093][T15528] EXT4-fs (loop4): mount failed [ 417.153533][T15535] netlink: 'wޣ': attribute type 13 has an invalid length. [ 417.156021][T15534] loop3: detected capacity change from 0 to 512 [ 417.179585][T15535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.242735][T15535] loop1: detected capacity change from 0 to 512 [ 417.293549][T15534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.308051][T15535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.323876][T15534] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.336231][T15534] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.354522][T15535] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.386767][T15534] loop3: detected capacity change from 0 to 512 [ 417.393764][T15534] EXT4-fs: Ignoring removed nobh option [ 417.444944][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.454818][T15534] EXT4-fs (loop3): invalid first ino: 0 [ 417.483671][T15548] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3336'. [ 417.502820][T15552] FAULT_INJECTION: forcing a failure. [ 417.502820][T15552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.516355][T15552] CPU: 1 UID: 0 PID: 15552 Comm: syz.3.3338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 417.516381][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.516393][T15552] Call Trace: [ 417.516450][T15552] [ 417.516457][T15552] __dump_stack+0x1d/0x30 [ 417.516503][T15552] dump_stack_lvl+0xe8/0x140 [ 417.516601][T15552] dump_stack+0x15/0x1b [ 417.516662][T15552] should_fail_ex+0x265/0x280 [ 417.516707][T15552] should_fail+0xb/0x20 [ 417.516736][T15552] should_fail_usercopy+0x1a/0x20 [ 417.516797][T15552] _copy_from_user+0x1c/0xb0 [ 417.516821][T15552] ucma_create_id+0x7d/0x250 [ 417.516862][T15552] ucma_write+0x1b3/0x250 [ 417.516884][T15552] vfs_writev+0x406/0x8b0 [ 417.516911][T15552] ? __pfx_ucma_write+0x10/0x10 [ 417.517043][T15552] do_writev+0xe7/0x210 [ 417.517072][T15552] __x64_sys_writev+0x45/0x50 [ 417.517096][T15552] x64_sys_call+0x1e9a/0x3000 [ 417.517116][T15552] do_syscall_64+0xd2/0x200 [ 417.517207][T15552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 417.517232][T15552] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 417.517264][T15552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.517285][T15552] RIP: 0033:0x7fcfafb9efc9 [ 417.517299][T15552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.517379][T15552] RSP: 002b:00007fcfae5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 417.517396][T15552] RAX: ffffffffffffffda RBX: 00007fcfafdf5fa0 RCX: 00007fcfafb9efc9 [ 417.517407][T15552] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 417.517418][T15552] RBP: 00007fcfae5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 417.517429][T15552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.517440][T15552] R13: 00007fcfafdf6038 R14: 00007fcfafdf5fa0 R15: 00007ffea43f8908 [ 417.517458][T15552] [ 417.732866][T15551] loop4: detected capacity change from 0 to 512 [ 417.771270][T15556] loop3: detected capacity change from 0 to 2048 [ 417.780872][T15551] EXT4-fs (loop4): too many log groups per flexible block group [ 417.795391][T15556] EXT4-fs (loop3): failed to initialize system zone (-117) [ 417.803349][T15556] EXT4-fs (loop3): mount failed [ 417.819069][T15551] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 417.843487][T15560] loop0: detected capacity change from 0 to 2048 [ 417.854438][T15551] EXT4-fs (loop4): mount failed [ 417.862851][T15560] EXT4-fs (loop0): failed to initialize system zone (-117) [ 417.874509][T15560] EXT4-fs (loop0): mount failed [ 417.911496][T15567] loop1: detected capacity change from 0 to 1024 [ 417.934853][T15568] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3344'. [ 417.934970][T15567] EXT4-fs: Ignoring removed oldalloc option [ 417.951750][T15567] EXT4-fs: Ignoring removed bh option [ 417.972787][T15567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.991083][T15579] netlink: 'wޣ': attribute type 13 has an invalid length. [ 418.012040][T15579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.072221][T15567] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3342: Allocating blocks 449-513 which overlap fs metadata [ 418.138714][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.155722][T15584] loop4: detected capacity change from 0 to 512 [ 418.184907][T15584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.204326][T15588] loop2: detected capacity change from 0 to 2048 [ 418.212483][T15584] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.212888][T15593] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3349'. [ 418.232683][T15585] loop3: detected capacity change from 0 to 2048 [ 418.252432][T15588] EXT4-fs (loop2): failed to initialize system zone (-117) [ 418.268270][T15588] EXT4-fs (loop2): mount failed [ 418.283057][T15585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.305205][T15585] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.367736][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.466734][T15614] loop3: detected capacity change from 0 to 2048 [ 418.488371][T15614] EXT4-fs (loop3): failed to initialize system zone (-117) [ 418.500701][T15614] EXT4-fs (loop3): mount failed [ 418.514862][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 418.514883][ T29] audit: type=1400 audit(1760901141.821:15893): avc: denied { mount } for pid=15629 comm="syz.0.3361" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.526147][T15630] !yz!: rxe_newlink: already configured on team_slave_0 [ 418.604404][ T29] audit: type=1400 audit(1760901141.821:15894): avc: denied { create } for pid=15629 comm="syz.0.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 418.624536][ T29] audit: type=1400 audit(1760901141.821:15895): avc: denied { create } for pid=15629 comm="syz.0.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 418.646302][ T29] audit: type=1400 audit(1760901141.831:15896): avc: denied { write } for pid=15629 comm="syz.0.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 418.667455][ T29] audit: type=1400 audit(1760901141.861:15897): avc: denied { create } for pid=15621 comm="syz.2.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 418.688229][ T29] audit: type=1400 audit(1760901141.861:15898): avc: denied { sys_admin } for pid=15621 comm="syz.2.3359" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 418.710151][ T29] audit: type=1400 audit(1760901141.881:15899): avc: denied { read } for pid=15633 comm="syz.3.3362" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 418.734407][ T29] audit: type=1400 audit(1760901141.881:15900): avc: denied { open } for pid=15633 comm="syz.3.3362" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 418.759514][ T29] audit: type=1400 audit(1760901141.881:15901): avc: denied { ioctl } for pid=15633 comm="syz.3.3362" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 418.789715][ T29] audit: type=1400 audit(1760901141.911:15902): avc: denied { unmount } for pid=14568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.825015][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.991004][T15653] loop2: detected capacity change from 0 to 1024 [ 419.032656][T15646] loop4: detected capacity change from 0 to 2048 [ 419.074978][T15653] EXT4-fs: Ignoring removed oldalloc option [ 419.075662][T15646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.081230][T15653] EXT4-fs: Ignoring removed bh option [ 419.094735][T15646] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.183385][T15653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.315443][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.382907][T15672] loop4: detected capacity change from 0 to 512 [ 419.425380][T15677] netlink: 'wޣ': attribute type 13 has an invalid length. [ 419.466975][T15672] EXT4-fs (loop4): too many log groups per flexible block group [ 419.495594][T15677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.546582][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.556447][T15672] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 419.563291][T15672] EXT4-fs (loop4): mount failed [ 419.631038][T15681] loop0: detected capacity change from 0 to 512 [ 419.663963][T15681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.691867][T15693] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 419.710509][T15681] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.759298][T15698] loop3: detected capacity change from 0 to 128 [ 419.768897][T15698] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.792349][T15698] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 419.850353][ T4187] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 419.902430][T15706] loop3: detected capacity change from 0 to 2048 [ 419.910379][T15706] /dev/loop3: Can't open blockdev [ 419.911564][T15702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.952191][T15709] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 419.952324][T15705] IPVS: stopping master sync thread 15709 ... [ 419.977382][T15708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.015183][T15715] 9pnet_fd: Insufficient options for proto=fd [ 420.032577][T15715] __nla_validate_parse: 41 callbacks suppressed [ 420.032596][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.048681][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.058175][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.091813][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.092206][T15717] loop1: detected capacity change from 0 to 2048 [ 420.101057][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.124747][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.147464][T15717] EXT4-fs (loop1): failed to initialize system zone (-117) [ 420.156545][T15717] EXT4-fs (loop1): mount failed [ 420.160944][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3391'. [ 420.190383][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.199604][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.214910][T15727] loop1: detected capacity change from 0 to 1024 [ 420.221983][T15727] EXT4-fs: Ignoring removed oldalloc option [ 420.226735][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 420.228163][T15727] EXT4-fs: Ignoring removed bh option [ 420.248348][T15724] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 420.269232][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.294256][T15727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.322568][T15727] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3392: Allocating blocks 449-513 which overlap fs metadata [ 420.450659][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.650522][T15739] loop0: detected capacity change from 0 to 512 [ 420.812468][T15739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.011828][T15747] loop3: detected capacity change from 0 to 2048 [ 421.036765][T15747] EXT4-fs (loop3): failed to initialize system zone (-117) [ 421.044265][T15747] EXT4-fs (loop3): mount failed [ 421.135049][T15750] IPVS: Unknown mcast interface: hsr0 [ 421.222806][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.252630][T15762] loop3: detected capacity change from 0 to 2048 [ 421.291608][T15762] EXT4-fs (loop3): failed to initialize system zone (-117) [ 421.310762][T15771] loop1: detected capacity change from 0 to 1024 [ 421.336226][T15762] EXT4-fs (loop3): mount failed [ 421.356414][T15771] EXT4-fs: Ignoring removed oldalloc option [ 421.364205][T15771] EXT4-fs: Ignoring removed bh option [ 421.432416][T15771] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3406: Allocating blocks 449-513 which overlap fs metadata [ 421.760495][T15791] loop0: detected capacity change from 0 to 2048 [ 421.768646][T15801] loop2: detected capacity change from 0 to 2048 [ 421.951882][T15806] loop3: detected capacity change from 0 to 512 [ 422.145841][T15810] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 422.156666][T15809] IPVS: stopping master sync thread 15810 ... [ 422.268848][T15812] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 422.276044][T15812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.286243][T15812] vhci_hcd vhci_hcd.0: Device attached [ 422.382984][T15813] vhci_hcd: connection closed [ 422.383302][ T12] vhci_hcd: stop threads [ 422.392651][ T12] vhci_hcd: release socket [ 422.397209][ T12] vhci_hcd: disconnect device [ 422.455843][T15816] loop4: detected capacity change from 0 to 2048 [ 422.597229][T15791] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.610067][T15801] EXT4-fs (loop2): failed to initialize system zone (-117) [ 422.675782][T15816] EXT4-fs (loop4): failed to initialize system zone (-117) [ 422.693777][T15801] EXT4-fs (loop2): mount failed [ 422.711511][T15816] EXT4-fs (loop4): mount failed [ 422.875041][T15795] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3410: bg 0: block 345: padding at end of block bitmap is not set [ 422.903197][T15826] loop3: detected capacity change from 0 to 2048 [ 422.907355][T15795] EXT4-fs (loop0): Remounting filesystem read-only [ 422.953592][T15826] EXT4-fs (loop3): failed to initialize system zone (-117) [ 423.031329][T15826] EXT4-fs (loop3): mount failed [ 423.042788][T15834] loop4: detected capacity change from 0 to 2048 [ 423.072411][T15834] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.190582][T15846] IPVS: stopping master sync thread 15848 ... [ 423.196905][T15848] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 423.296809][T15842] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3423: bg 0: block 345: padding at end of block bitmap is not set [ 423.367416][T15854] loop3: detected capacity change from 0 to 128 [ 423.389608][T15842] EXT4-fs (loop4): Remounting filesystem read-only [ 423.406185][T15854] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 423.406185][T15854] A"Й5 )ÿ8taLVQuVVTfBi[ [ 423.406185][T15854] >:;: EV -CLho)[00000000000000000000' [ 423.538637][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 423.538658][ T29] audit: type=1400 audit(1760901146.841:16212): avc: denied { execmem } for pid=15857 comm="syz.1.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 423.865123][T15862] loop1: detected capacity change from 0 to 512 [ 424.630177][ T29] audit: type=1400 audit(1760901147.931:16213): avc: denied { create } for pid=15872 comm="syz.0.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 424.702252][ T29] audit: type=1400 audit(1760901147.961:16214): avc: denied { connect } for pid=15872 comm="syz.0.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 424.730604][ T29] audit: type=1400 audit(1760901148.031:16215): avc: denied { map_create } for pid=15878 comm="syz.2.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 424.757984][ T29] audit: type=1400 audit(1760901148.051:16216): avc: denied { read write } for pid=15878 comm="syz.2.3437" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.768099][T15879] loop2: detected capacity change from 0 to 2048 [ 424.784270][ T29] audit: type=1400 audit(1760901148.051:16217): avc: denied { open } for pid=15878 comm="syz.2.3437" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.802026][T15887] loop4: detected capacity change from 0 to 1024 [ 424.824941][ T29] audit: type=1400 audit(1760901148.061:16218): avc: denied { ioctl } for pid=12995 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.852302][ T29] audit: type=1400 audit(1760901148.071:16219): avc: denied { prog_load } for pid=15881 comm="syz.0.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 424.871752][ T29] audit: type=1400 audit(1760901148.071:16220): avc: denied { bpf } for pid=15881 comm="syz.0.3439" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 424.893366][ T29] audit: type=1400 audit(1760901148.071:16221): avc: denied { perfmon } for pid=15881 comm="syz.0.3439" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 424.916103][T15887] EXT4-fs: Ignoring removed oldalloc option [ 424.922494][T15887] EXT4-fs: Ignoring removed bh option [ 424.959683][T15883] loop0: detected capacity change from 0 to 2048 [ 424.961984][T15887] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3441: Allocating blocks 449-513 which overlap fs metadata [ 425.014761][T15879] EXT4-fs (loop2): failed to initialize system zone (-117) [ 425.032164][T15879] EXT4-fs (loop2): mount failed [ 425.042286][T15896] loop1: detected capacity change from 0 to 1024 [ 425.050349][T15896] EXT4-fs: Ignoring removed oldalloc option [ 425.056556][T15896] EXT4-fs: Ignoring removed bh option [ 425.067214][T15883] EXT4-fs (loop0): failed to initialize system zone (-117) [ 425.075024][T15883] EXT4-fs (loop0): mount failed [ 425.190175][T15907] loop1: detected capacity change from 0 to 1024 [ 425.451641][T15907] EXT4-fs: Ignoring removed oldalloc option [ 425.458124][T15907] EXT4-fs: Ignoring removed bh option [ 425.591017][T15921] IPVS: stopping master sync thread 15923 ... [ 425.592965][T15923] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 425.604587][T15907] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3445: Allocating blocks 449-513 which overlap fs metadata [ 425.707843][T15934] loop4: detected capacity change from 0 to 128 [ 425.714875][T15934] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 425.727591][T15934] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 425.745989][T15936] loop1: detected capacity change from 0 to 1024 [ 425.753095][T15936] EXT4-fs: Ignoring removed oldalloc option [ 425.759462][T15936] EXT4-fs: Ignoring removed bh option [ 425.778013][T15936] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3455: Allocating blocks 449-513 which overlap fs metadata [ 425.869094][T15942] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 425.875849][T15942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.883503][T15942] vhci_hcd vhci_hcd.0: Device attached [ 425.896077][T15944] loop3: detected capacity change from 0 to 1024 [ 425.902921][T15944] EXT4-fs: Ignoring removed oldalloc option [ 425.908976][T15944] EXT4-fs: Ignoring removed bh option [ 425.921596][T15945] vhci_hcd: connection closed [ 425.921806][ T4189] vhci_hcd: stop threads [ 425.931023][ T4189] vhci_hcd: release socket [ 425.935930][ T4189] vhci_hcd: disconnect device [ 425.969756][T15950] __nla_validate_parse: 14 callbacks suppressed [ 425.969778][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 425.985265][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 425.994400][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 426.018874][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 426.028370][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 426.038586][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 426.067552][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 426.076630][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 426.086382][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 426.277339][T15960] loop3: detected capacity change from 0 to 2048 [ 426.296695][T15960] EXT4-fs (loop3): failed to initialize system zone (-117) [ 426.304056][T15960] EXT4-fs (loop3): mount failed [ 426.351711][T15965] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 426.352061][T15964] IPVS: stopping master sync thread 15965 ... [ 426.590560][T15974] loop3: detected capacity change from 0 to 2048 [ 426.960275][T15981] loop0: detected capacity change from 0 to 1024 [ 426.981446][T15981] EXT4-fs: Ignoring removed oldalloc option [ 426.987811][T15981] EXT4-fs: Ignoring removed bh option [ 427.015664][T15974] EXT4-fs (loop3): failed to initialize system zone (-117) [ 427.023800][T15974] EXT4-fs (loop3): mount failed [ 427.037965][T15981] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3468: Allocating blocks 449-513 which overlap fs metadata [ 427.525450][T15998] loop3: detected capacity change from 0 to 2048 [ 427.536943][T15998] EXT4-fs (loop3): failed to initialize system zone (-117) [ 427.544944][T15998] EXT4-fs (loop3): mount failed [ 427.707958][T16004] loop1: detected capacity change from 0 to 512 [ 428.507673][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 428.581971][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 428.581993][ T29] audit: type=1400 audit(1760901151.811:16423): avc: denied { unmount } for pid=12995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 428.617525][ T29] audit: type=1400 audit(1760901151.871:16424): avc: denied { read } for pid=16021 comm="syz.1.3480" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 428.650223][ T29] audit: type=1400 audit(1760901151.871:16425): avc: denied { open } for pid=16021 comm="syz.1.3480" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 428.678624][ T29] audit: type=1400 audit(1760901151.881:16426): avc: denied { watch watch_reads } for pid=16021 comm="syz.1.3480" path="/proc/117" dev="proc" ino=50919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 428.710268][ T29] audit: type=1400 audit(1760901151.891:16427): avc: denied { create } for pid=16023 comm="syz.4.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.781839][ T29] audit: type=1400 audit(1760901152.081:16428): avc: denied { map_create } for pid=16028 comm="syz.1.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 428.836861][T16029] loop1: detected capacity change from 0 to 2048 [ 428.856520][ T29] audit: type=1400 audit(1760901152.141:16429): avc: denied { read write } for pid=16028 comm="syz.1.3483" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 428.886840][ T29] audit: type=1400 audit(1760901152.141:16430): avc: denied { open } for pid=16028 comm="syz.1.3483" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 428.917078][ T29] audit: type=1400 audit(1760901152.141:16431): avc: denied { ioctl } for pid=16028 comm="syz.1.3483" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.015002][T16029] EXT4-fs (loop1): failed to initialize system zone (-117) [ 429.023157][T16029] EXT4-fs (loop1): mount failed [ 429.030030][T16032] IPVS: stopping master sync thread 16034 ... [ 429.047453][T16034] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 429.081448][ T29] audit: type=1400 audit(1760901152.251:16432): avc: denied { mounton } for pid=16028 comm="syz.1.3483" path="/47/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 429.121203][T16024] loop4: detected capacity change from 0 to 2048 [ 429.136767][T16038] 9pnet_fd: Insufficient options for proto=fd [ 429.146011][T16040] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3486'. [ 429.405437][T16024] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.418432][T16046] loop0: detected capacity change from 0 to 1024 [ 429.446728][T16046] EXT4-fs: Ignoring removed oldalloc option [ 429.452899][T16046] EXT4-fs: Ignoring removed bh option [ 429.567618][T16056] netlink: 'wޣ': attribute type 13 has an invalid length. [ 429.586458][T16025] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3481: bg 0: block 345: padding at end of block bitmap is not set [ 429.612678][T16046] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3488: Allocating blocks 449-513 which overlap fs metadata [ 429.640866][T16056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.690993][T16025] EXT4-fs (loop4): Remounting filesystem read-only [ 429.820141][T16062] loop2: detected capacity change from 0 to 512 [ 429.889048][T16062] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.900301][T16075] loop3: detected capacity change from 0 to 128 [ 429.912624][T16075] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 429.938556][T16075] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 430.239875][T16084] 9pnet_fd: Insufficient options for proto=fd [ 430.592493][T16086] loop1: detected capacity change from 0 to 2048 [ 430.689822][T16092] netlink: 'wޣ': attribute type 13 has an invalid length. [ 430.728135][T16092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.752653][T16096] netlink: 'wޣ': attribute type 13 has an invalid length. [ 430.769287][T16086] EXT4-fs (loop1): failed to initialize system zone (-117) [ 430.784733][T16086] EXT4-fs (loop1): mount failed [ 430.816250][T16098] loop4: detected capacity change from 0 to 512 [ 430.842419][T16098] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.855139][T16096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.909469][T16103] 9pnet_fd: Insufficient options for proto=fd [ 430.949301][T16096] loop2: detected capacity change from 0 to 512 [ 430.978252][T16096] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.984567][T16103] __nla_validate_parse: 13 callbacks suppressed [ 430.984591][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 431.004853][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 431.044542][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 431.136219][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 431.146850][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 431.222020][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 431.782304][T16128] loop0: detected capacity change from 0 to 512 [ 431.889700][T16127] loop1: detected capacity change from 0 to 2048 [ 431.929779][T16127] EXT4-fs (loop1): failed to initialize system zone (-117) [ 431.958426][T16127] EXT4-fs (loop1): mount failed [ 432.563168][T16139] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3511'. [ 432.719944][T16149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3516'. [ 432.731953][T16149] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 432.808130][T16154] loop0: detected capacity change from 0 to 2048 [ 432.812441][T16156] loop1: detected capacity change from 0 to 512 [ 432.839180][T16157] loop4: detected capacity change from 0 to 2048 [ 432.867442][T16157] EXT4-fs (loop4): failed to initialize system zone (-117) [ 432.879437][T16154] EXT4-fs (loop0): failed to initialize system zone (-117) [ 432.889535][T16157] EXT4-fs (loop4): mount failed [ 432.895496][T16156] EXT4-fs (loop1): too many log groups per flexible block group [ 432.903894][T16156] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 432.910867][T16154] EXT4-fs (loop0): mount failed [ 432.916859][T16156] EXT4-fs (loop1): mount failed [ 432.973523][T16171] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3524'. [ 433.037829][T16183] loop0: detected capacity change from 0 to 512 [ 433.055593][T16183] EXT4-fs (loop0): too many log groups per flexible block group [ 433.063385][T16183] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 433.070319][T16183] EXT4-fs (loop0): mount failed [ 433.227076][T16193] loop1: detected capacity change from 0 to 128 [ 433.234204][T16193] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 433.426944][T16193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 433.980175][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 433.980190][ T29] audit: type=1400 audit(1760901157.281:16615): avc: denied { create } for pid=16196 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 434.007952][T16197] loop0: detected capacity change from 0 to 1024 [ 434.014850][T16197] EXT4-fs: Ignoring removed oldalloc option [ 434.020982][T16197] EXT4-fs: Ignoring removed bh option [ 434.056639][ T29] audit: type=1400 audit(1760901157.361:16616): avc: denied { mount } for pid=16196 comm="syz.0.3533" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 434.079889][ T29] audit: type=1400 audit(1760901157.381:16617): avc: denied { add_name } for pid=16196 comm="syz.0.3533" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.101705][ T29] audit: type=1400 audit(1760901157.381:16618): avc: denied { create } for pid=16196 comm="syz.0.3533" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 434.109004][T16197] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3533: Allocating blocks 449-513 which overlap fs metadata [ 434.123224][ T29] audit: type=1400 audit(1760901157.411:16619): avc: denied { read write } for pid=16196 comm="syz.0.3533" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 434.160322][ T29] audit: type=1400 audit(1760901157.411:16620): avc: denied { open } for pid=16196 comm="syz.0.3533" path="/93/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 434.200725][ T29] audit: type=1400 audit(1760901157.501:16621): avc: denied { unmount } for pid=14568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 434.563660][ T29] audit: type=1400 audit(1760901157.861:16622): avc: denied { create } for pid=16208 comm="syz.0.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.651436][T16211] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3537'. [ 434.661303][ T29] audit: type=1400 audit(1760901157.891:16623): avc: denied { getopt } for pid=16208 comm="syz.0.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.713097][ T29] audit: type=1400 audit(1760901158.011:16624): avc: denied { unmount } for pid=14568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 434.867571][ T10] usb usb6-port6: attempt power cycle [ 434.908250][T16222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.937055][T16225] loop2: detected capacity change from 0 to 128 [ 434.943791][T16225] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 434.943791][T16225] A"Й5 )ÿ8taLVQuVVTfBi[ [ 434.943791][T16225] >:;: EV -CLho)[00000000000000000000' [ 434.977453][T16226] loop0: detected capacity change from 0 to 128 [ 434.984327][T16226] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 434.996805][T16226] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.037249][ T4187] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 436.002469][T16235] __nla_validate_parse: 1 callbacks suppressed [ 436.002496][T16235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3545'. [ 436.045938][T16235] macvtap3: entered allmulticast mode [ 436.058751][T16235] batman_adv: batadv0: Adding interface: macvtap3 [ 436.065522][T16235] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.070181][T16239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3546'. [ 436.102676][T16237] loop2: detected capacity change from 0 to 2048 [ 436.110391][T16235] batman_adv: batadv0: Interface activated: macvtap3 [ 436.138803][T16239] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 436.146616][T16237] EXT4-fs (loop2): failed to initialize system zone (-117) [ 436.155059][T16237] EXT4-fs (loop2): mount failed [ 436.157449][T16244] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3548'. [ 436.297545][T16255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.803033][T16271] loop2: detected capacity change from 0 to 128 [ 436.815363][T16271] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.828711][T16271] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 436.969896][T16273] 9pnet_fd: Insufficient options for proto=fd [ 437.424586][ T10] usb usb6-port6: unable to enumerate USB device [ 437.459435][T16280] netlink: 'wޣ': attribute type 13 has an invalid length. [ 437.479430][T16279] loop3: detected capacity change from 0 to 2048 [ 437.486061][T16280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.510123][T16279] EXT4-fs (loop3): failed to initialize system zone (-117) [ 437.518090][T16279] EXT4-fs (loop3): mount failed [ 437.568851][T16285] loop4: detected capacity change from 0 to 512 [ 437.591793][T16285] EXT4-fs mount: 38 callbacks suppressed [ 437.591813][T16285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.613405][T16285] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.170097][T16321] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 438.197277][T16323] loop1: detected capacity change from 0 to 128 [ 438.204624][T16323] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 438.204624][T16323] A"Й5 )ÿ8taLVQuVVTfBi[ [ 438.204624][T16323] >:;: EV -CLho)[00000000000000000000' [ 438.297691][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.343730][T16326] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3578'. [ 438.458577][T16331] sctp: [Deprecated]: syz.4.3580 (pid 16331) Use of int in maxseg socket option. [ 438.458577][T16331] Use struct sctp_assoc_value instead [ 438.583471][T16333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.892822][T16344] loop3: detected capacity change from 0 to 2048 [ 438.907335][T16344] EXT4-fs (loop3): failed to initialize system zone (-117) [ 438.915034][T16344] EXT4-fs (loop3): mount failed [ 438.961499][T16348] loop3: detected capacity change from 0 to 2048 [ 438.986208][T16348] EXT4-fs (loop3): failed to initialize system zone (-117) [ 438.993692][T16348] EXT4-fs (loop3): mount failed [ 439.018644][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 439.018662][ T29] audit: type=1400 audit(1760901162.321:16821): avc: denied { create } for pid=16353 comm="syz.3.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.047446][ T29] audit: type=1400 audit(1760901162.351:16822): avc: denied { read write } for pid=16349 comm="syz.4.3588" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 439.072732][ T29] audit: type=1400 audit(1760901162.351:16823): avc: denied { open } for pid=16349 comm="syz.4.3588" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 439.122229][ T29] audit: type=1400 audit(1760901162.421:16824): avc: denied { setopt } for pid=16353 comm="syz.3.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.148784][ T29] audit: type=1400 audit(1760901162.441:16825): avc: denied { create } for pid=16353 comm="syz.3.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.169875][ T29] audit: type=1400 audit(1760901162.441:16826): avc: denied { write } for pid=16353 comm="syz.3.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.190738][ T29] audit: type=1400 audit(1760901162.441:16827): avc: denied { ioctl } for pid=16353 comm="syz.3.3589" path="socket:[52603]" dev="sockfs" ino=52603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 439.190931][T16354] loop3: detected capacity change from 0 to 2048 [ 439.221813][ T29] audit: type=1400 audit(1760901162.521:16828): avc: denied { create } for pid=16356 comm="syz.1.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.243563][ T29] audit: type=1400 audit(1760901162.521:16829): avc: denied { prog_run } for pid=16356 comm="syz.1.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 439.265332][ T29] audit: type=1400 audit(1760901162.571:16830): avc: denied { create } for pid=16356 comm="syz.1.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 439.265682][T16357] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3590'. [ 439.295833][T16359] loop4: detected capacity change from 0 to 128 [ 439.302621][T16359] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 439.315784][T16354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.329405][T16359] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 439.330027][T16354] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.358295][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 439.407757][T16365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.444684][T16368] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3589: bg 0: block 345: padding at end of block bitmap is not set [ 439.474139][T16368] EXT4-fs (loop3): Remounting filesystem read-only [ 439.504963][T16373] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3595'. [ 439.582101][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.609803][T16380] loop3: detected capacity change from 0 to 1024 [ 439.646168][T16381] loop4: detected capacity change from 0 to 2048 [ 439.655064][T16380] ext2: Unknown parameter 'obj_user' [ 439.670303][T16381] EXT4-fs (loop4): failed to initialize system zone (-117) [ 439.682103][T16381] EXT4-fs (loop4): mount failed [ 439.732015][T16385] loop4: detected capacity change from 0 to 2048 [ 439.742667][T16386] FAULT_INJECTION: forcing a failure. [ 439.742667][T16386] name failslab, interval 1, probability 0, space 0, times 0 [ 439.755823][T16386] CPU: 0 UID: 0 PID: 16386 Comm: syz.3.3597 Not tainted syzkaller #0 PREEMPT(voluntary) [ 439.755958][T16386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.755972][T16386] Call Trace: [ 439.755979][T16386] [ 439.755987][T16386] __dump_stack+0x1d/0x30 [ 439.756007][T16386] dump_stack_lvl+0xe8/0x140 [ 439.756180][T16386] dump_stack+0x15/0x1b [ 439.756196][T16386] should_fail_ex+0x265/0x280 [ 439.756303][T16386] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 439.756323][T16386] should_failslab+0x8c/0xb0 [ 439.756365][T16386] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 439.756445][T16386] ? shmem_alloc_inode+0x34/0x50 [ 439.756478][T16386] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 439.756496][T16386] shmem_alloc_inode+0x34/0x50 [ 439.756514][T16386] alloc_inode+0x40/0x170 [ 439.756535][T16386] new_inode+0x1d/0xe0 [ 439.756558][T16386] shmem_get_inode+0x244/0x750 [ 439.756582][T16386] __shmem_file_setup+0x113/0x210 [ 439.756613][T16386] shmem_file_setup+0x3b/0x50 [ 439.756707][T16386] __se_sys_memfd_create+0x2c3/0x590 [ 439.756816][T16386] __x64_sys_memfd_create+0x31/0x40 [ 439.756837][T16386] x64_sys_call+0x2ac2/0x3000 [ 439.756916][T16386] do_syscall_64+0xd2/0x200 [ 439.756941][T16386] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 439.757010][T16386] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 439.757042][T16386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.757070][T16386] RIP: 0033:0x7fcfafb9efc9 [ 439.757147][T16386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.757167][T16386] RSP: 002b:00007fcfae5dde18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 439.757197][T16386] RAX: ffffffffffffffda RBX: 0000000000000644 RCX: 00007fcfafb9efc9 [ 439.757225][T16386] RDX: 00007fcfae5ddef0 RSI: 0000000000000000 RDI: 00007fcfafc22960 [ 439.757241][T16386] RBP: 00002000000012c0 R08: 00007fcfae5ddbb7 R09: 00007fcfae5dde40 [ 439.757254][T16386] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 439.757267][T16386] R13: 00007fcfae5ddef0 R14: 00007fcfae5ddeb0 R15: 0000200000000000 [ 439.757295][T16386] [ 439.758139][T16385] EXT4-fs (loop4): failed to initialize system zone (-117) [ 439.974849][ T10] usb usb6-port6: attempt power cycle [ 439.979670][T16385] EXT4-fs (loop4): mount failed [ 440.030872][T16390] loop4: detected capacity change from 0 to 2048 [ 440.045788][T16390] EXT4-fs (loop4): failed to initialize system zone (-117) [ 440.053309][T16390] EXT4-fs (loop4): mount failed [ 440.079835][T16394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3601'. [ 440.208774][T16400] loop4: detected capacity change from 0 to 2048 [ 440.237529][T16400] EXT4-fs (loop4): failed to initialize system zone (-117) [ 440.245311][T16400] EXT4-fs (loop4): mount failed [ 440.282443][T16408] loop4: detected capacity change from 0 to 1024 [ 440.290123][T16408] EXT4-fs: Ignoring removed oldalloc option [ 440.296220][T16408] EXT4-fs: Ignoring removed bh option [ 440.312133][T16408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.335713][T16408] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3607: Allocating blocks 449-513 which overlap fs metadata [ 440.340035][T16416] loop2: detected capacity change from 0 to 1024 [ 440.357069][T16416] EXT4-fs: Ignoring removed oldalloc option [ 440.363241][T16416] EXT4-fs: Ignoring removed bh option [ 440.387461][T16416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.402165][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.433038][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.436190][T16423] loop4: detected capacity change from 0 to 2048 [ 440.459164][T16423] EXT4-fs (loop4): failed to initialize system zone (-117) [ 440.461497][T16425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3613'. [ 440.467118][T16423] EXT4-fs (loop4): mount failed [ 440.520624][T16433] netlink: 'wޣ': attribute type 13 has an invalid length. [ 440.540206][T16433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.616379][T16439] loop1: detected capacity change from 0 to 512 [ 440.638445][T16439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.651671][T16439] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.677680][T16441] 9pnet_fd: Insufficient options for proto=fd [ 440.686916][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3619'. [ 440.696228][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3619'. [ 440.762630][T16451] loop3: detected capacity change from 0 to 2048 [ 440.781188][T16451] EXT4-fs (loop3): failed to initialize system zone (-117) [ 440.790154][T16451] EXT4-fs (loop3): mount failed [ 441.025737][T16467] __nla_validate_parse: 7 callbacks suppressed [ 441.025755][T16467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3627'. [ 441.046340][T16469] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 441.078887][T16471] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3629'. [ 441.195991][T16475] loop3: detected capacity change from 0 to 2048 [ 441.216131][T16475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.218079][T16480] netlink: 'syz.4.3633': attribute type 21 has an invalid length. [ 441.237577][T16475] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.304083][T16480] : renamed from bond_slave_0 (while UP) [ 441.320263][T16483] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3631: bg 0: block 345: padding at end of block bitmap is not set [ 441.386031][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.401738][T16483] EXT4-fs (loop3): Remounting filesystem read-only [ 441.426999][T16486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.483980][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.565375][T16497] netlink: 'wޣ': attribute type 13 has an invalid length. [ 441.581795][T16500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3641'. [ 441.604516][T16497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.667352][T16506] 9pnet_fd: Insufficient options for proto=fd [ 441.674149][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 441.683506][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 441.694003][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 441.724856][T16508] loop3: detected capacity change from 0 to 512 [ 441.734582][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 441.743584][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 441.756661][T16507] loop4: detected capacity change from 0 to 2048 [ 441.775543][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 441.785204][T16508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.804871][T16508] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.835058][ T10] usb usb6-port6: unable to enumerate USB device [ 441.878410][T16507] EXT4-fs (loop4): failed to initialize system zone (-117) [ 441.888003][T16507] EXT4-fs (loop4): mount failed [ 441.954524][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 442.019296][T16522] loop0: detected capacity change from 0 to 2048 [ 442.057914][T16522] EXT4-fs (loop0): failed to initialize system zone (-117) [ 442.065582][T16522] EXT4-fs (loop0): mount failed [ 442.191170][T16532] loop0: detected capacity change from 0 to 2048 [ 442.209684][T16532] EXT4-fs (loop0): failed to initialize system zone (-117) [ 442.230517][T16532] EXT4-fs (loop0): mount failed [ 442.247168][T16524] loop4: detected capacity change from 0 to 2048 [ 442.256743][T16537] loop1: detected capacity change from 0 to 128 [ 442.268149][T16537] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.284056][T16537] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.299204][T16524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.337126][T16524] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.403322][ T4189] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.434211][T16541] loop0: detected capacity change from 0 to 2048 [ 442.449558][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.454504][T16530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3647: bg 0: block 345: padding at end of block bitmap is not set [ 442.473700][T16530] EXT4-fs (loop4): Remounting filesystem read-only [ 442.506352][T16541] EXT4-fs (loop0): failed to initialize system zone (-117) [ 442.513841][T16541] EXT4-fs (loop0): mount failed [ 442.593001][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.797277][T16562] loop0: detected capacity change from 0 to 2048 [ 442.819956][T16570] loop4: detected capacity change from 0 to 128 [ 442.827817][T16562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.842414][T16570] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 442.842414][T16570] A"Й5 )ÿ8taLVQuVVTfBi[ [ 442.842414][T16570] >:;: EV -CLho)[00000000000000000000' [ 442.870606][T16562] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.937024][T16575] loop2: detected capacity change from 0 to 2048 [ 442.988704][T16576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3658: bg 0: block 345: padding at end of block bitmap is not set [ 443.003883][T16576] EXT4-fs (loop0): Remounting filesystem read-only [ 443.022452][T16575] EXT4-fs (loop2): failed to initialize system zone (-117) [ 443.032186][T16575] EXT4-fs (loop2): mount failed [ 443.237947][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.359328][T16587] loop2: detected capacity change from 0 to 2048 [ 443.420953][T16587] EXT4-fs (loop2): failed to initialize system zone (-117) [ 443.442699][T16587] EXT4-fs (loop2): mount failed [ 443.452176][T16592] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 443.463179][T16589] IPVS: stopping master sync thread 16592 ... [ 443.845692][T16602] IPVS: stopping master sync thread 16606 ... [ 443.882618][T16604] loop2: detected capacity change from 0 to 2048 [ 443.910353][T16613] loop3: detected capacity change from 0 to 512 [ 443.994789][T16604] EXT4-fs (loop2): failed to initialize system zone (-117) [ 444.012359][T16604] EXT4-fs (loop2): mount failed [ 444.041738][T16613] EXT4-fs (loop3): too many log groups per flexible block group [ 444.050273][T16613] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 444.062423][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 444.062443][ T29] audit: type=1400 audit(1760901167.361:17205): avc: denied { create } for pid=16622 comm="syz.0.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.088206][T16613] EXT4-fs (loop3): mount failed [ 444.091407][ T29] audit: type=1400 audit(1760901167.361:17206): avc: denied { write } for pid=16622 comm="syz.0.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 444.124001][ T29] audit: type=1400 audit(1760901167.421:17207): avc: denied { block_suspend } for pid=16624 comm="syz.0.3682" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 444.182102][T16629] 9pnet_fd: Insufficient options for proto=fd [ 444.258491][T16633] loop3: detected capacity change from 0 to 2048 [ 444.303330][T16639] loop0: detected capacity change from 0 to 1024 [ 444.331032][T16639] EXT4-fs: Ignoring removed oldalloc option [ 444.337360][T16639] EXT4-fs: Ignoring removed bh option [ 444.346844][T16640] loop2: detected capacity change from 0 to 128 [ 444.357575][T16640] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.441761][ T29] audit: type=1400 audit(1760901167.481:17208): avc: denied { mount } for pid=16624 comm="syz.0.3682" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 444.465709][ T29] audit: type=1400 audit(1760901167.481:17209): avc: denied { prog_run } for pid=16607 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 444.475491][T16640] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.486274][ T29] audit: type=1400 audit(1760901167.481:17210): avc: denied { mounton } for pid=16607 comm="syz.4.3675" path="/198/file0" dev="tmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 444.486317][ T29] audit: type=1400 audit(1760901167.481:17211): avc: denied { read write } for pid=16626 comm="syz.2.3683" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 444.520717][T16633] EXT4-fs (loop3): failed to initialize system zone (-117) [ 444.545280][ T29] audit: type=1400 audit(1760901167.481:17212): avc: denied { open } for pid=16626 comm="syz.2.3683" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 444.573179][T16633] EXT4-fs (loop3): mount failed [ 444.578577][ T29] audit: type=1400 audit(1760901167.551:17213): avc: denied { map_create } for pid=16632 comm="syz.3.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 444.603435][ T29] audit: type=1400 audit(1760901167.561:17214): avc: denied { read write } for pid=16632 comm="syz.3.3684" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.680066][T16639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.695907][ T4187] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.709564][T16635] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3685: Allocating blocks 449-513 which overlap fs metadata [ 444.760372][T16653] loop2: detected capacity change from 0 to 1024 [ 444.803834][T16653] EXT4-fs: Ignoring removed oldalloc option [ 444.810129][T16653] EXT4-fs: Ignoring removed bh option [ 444.832102][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.863986][T16653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.907101][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.969397][T16668] loop1: detected capacity change from 0 to 512 [ 445.003355][T16668] EXT4-fs (loop1): too many log groups per flexible block group [ 445.023984][T16668] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 445.031337][T16668] EXT4-fs (loop1): mount failed [ 445.185092][T16689] loop3: detected capacity change from 0 to 1024 [ 445.192452][T16689] EXT4-fs: Ignoring removed oldalloc option [ 445.198801][T16689] EXT4-fs: Ignoring removed bh option [ 445.208590][T16681] loop2: detected capacity change from 0 to 2048 [ 445.218036][T16691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.233218][T16693] bridge0: entered promiscuous mode [ 445.238747][T16693] macvtap1: entered allmulticast mode [ 445.244804][T16693] bridge0: entered allmulticast mode [ 445.256746][T16689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.264386][T16693] batman_adv: batadv0: Adding interface: macvtap1 [ 445.276285][T16693] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.305721][T16681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.319240][T16681] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.330579][T16693] batman_adv: batadv0: Interface activated: macvtap1 [ 445.432650][T16681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3700: bg 0: block 345: padding at end of block bitmap is not set [ 445.448137][T16681] EXT4-fs (loop2): Remounting filesystem read-only [ 445.505739][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.612046][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.900250][T16725] 9pnet_fd: Insufficient options for proto=fd [ 446.028304][T16727] loop2: detected capacity change from 0 to 512 [ 446.117706][T16727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.383338][T16737] loop3: detected capacity change from 0 to 2048 [ 446.429671][T16737] EXT4-fs (loop3): failed to initialize system zone (-117) [ 446.438141][T16737] EXT4-fs (loop3): mount failed [ 446.487279][T16742] loop0: detected capacity change from 0 to 1024 [ 446.502384][T16742] EXT4-fs: Ignoring removed oldalloc option [ 446.507529][T16744] loop3: detected capacity change from 0 to 1024 [ 446.508636][T16742] EXT4-fs: Ignoring removed bh option [ 446.515775][T16744] EXT4-fs: Ignoring removed oldalloc option [ 446.527365][T16744] EXT4-fs: Ignoring removed bh option [ 446.544138][T16744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.578240][T16742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.609535][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.621019][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.667050][T16742] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3719: Allocating blocks 449-513 which overlap fs metadata [ 446.723324][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.886321][T16762] loop0: detected capacity change from 0 to 2048 [ 446.906582][T16762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.920613][T16762] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.047204][T16770] __nla_validate_parse: 6 callbacks suppressed [ 447.047252][T16770] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3729'. [ 447.102451][T16768] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3727: bg 0: block 345: padding at end of block bitmap is not set [ 447.171346][T16768] EXT4-fs (loop0): Remounting filesystem read-only [ 447.282160][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.579056][T16787] loop4: detected capacity change from 0 to 512 [ 447.681987][T16787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.900709][T16799] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3740'. [ 447.961577][T16807] loop3: detected capacity change from 0 to 512 [ 447.985776][T16807] EXT4-fs (loop3): too many log groups per flexible block group [ 447.994775][T16807] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 448.002292][T16807] EXT4-fs (loop3): mount failed [ 448.036609][T16819] loop0: detected capacity change from 0 to 1024 [ 448.043510][T16819] EXT4-fs: Ignoring removed oldalloc option [ 448.049584][T16819] EXT4-fs: Ignoring removed bh option [ 448.066324][T16819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.150531][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.171511][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.222346][T16836] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3755'. [ 448.287841][T16842] loop2: detected capacity change from 0 to 1024 [ 448.299902][T16842] EXT4-fs: Ignoring removed oldalloc option [ 448.306766][T16842] EXT4-fs: Ignoring removed bh option [ 448.317640][T16842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.334987][T16842] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3758: Allocating blocks 449-513 which overlap fs metadata [ 448.375446][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.416633][T16851] loop2: detected capacity change from 0 to 1024 [ 448.423553][T16851] EXT4-fs: Ignoring removed oldalloc option [ 448.429580][T16851] EXT4-fs: Ignoring removed bh option [ 448.458478][T16851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.480432][T16851] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3759: Allocating blocks 449-513 which overlap fs metadata [ 448.516534][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.548549][T16860] loop4: detected capacity change from 0 to 128 [ 448.560025][T16860] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 448.574525][T16860] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 448.611723][ T4187] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 448.634549][T16862] loop2: detected capacity change from 0 to 2048 [ 448.662686][T16865] loop4: detected capacity change from 0 to 1024 [ 448.670152][T16865] EXT4-fs: Ignoring removed oldalloc option [ 448.676189][T16865] EXT4-fs: Ignoring removed bh option [ 448.686789][T16862] EXT4-fs (loop2): failed to initialize system zone (-117) [ 448.695788][T16862] EXT4-fs (loop2): mount failed [ 448.705311][T16865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.829483][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.899218][T16880] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3768'. [ 448.968457][T16885] loop0: detected capacity change from 0 to 1024 [ 448.978753][T16885] EXT4-fs: Ignoring removed oldalloc option [ 448.984991][T16885] EXT4-fs: Ignoring removed bh option [ 449.047815][T16887] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3773'. [ 449.057289][T16887] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3773'. [ 449.074417][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 449.074495][ T29] audit: type=1400 audit(1760901172.371:17506): avc: denied { write } for pid=16883 comm="syz.1.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.102327][ T29] audit: type=1400 audit(1760901172.371:17507): avc: denied { ioctl } for pid=16883 comm="syz.1.3772" path="socket:[54427]" dev="sockfs" ino=54427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 449.131839][T16884] loop1: detected capacity change from 0 to 2048 [ 449.161642][ T29] audit: type=1400 audit(1760901172.461:17508): avc: denied { open } for pid=16891 comm="syz.2.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 449.181400][ T29] audit: type=1400 audit(1760901172.461:17509): avc: denied { kernel } for pid=16891 comm="syz.2.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 449.201914][ T29] audit: type=1400 audit(1760901172.461:17510): avc: denied { tracepoint } for pid=16891 comm="syz.2.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 449.237941][T16885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.254110][T16882] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3771: Allocating blocks 449-513 which overlap fs metadata [ 449.283422][ T29] audit: type=1400 audit(1760901172.561:17511): avc: denied { add_name } for pid=16881 comm="syz.0.3771" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.304940][ T29] audit: type=1400 audit(1760901172.561:17512): avc: denied { create } for pid=16881 comm="syz.0.3771" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 449.326013][ T29] audit: type=1400 audit(1760901172.561:17513): avc: denied { read write } for pid=16881 comm="syz.0.3771" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 449.349689][ T29] audit: type=1400 audit(1760901172.561:17514): avc: denied { open } for pid=16881 comm="syz.0.3771" path="/141/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 449.373500][ T29] audit: type=1400 audit(1760901172.581:17515): avc: denied { setopt } for pid=16893 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.435922][T16884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.459950][T16884] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.506479][T16903] loop4: detected capacity change from 0 to 1024 [ 449.513451][T16903] EXT4-fs: Ignoring removed oldalloc option [ 449.519434][T16903] EXT4-fs: Ignoring removed bh option [ 449.532261][T16899] loop2: detected capacity change from 0 to 2048 [ 449.551516][T16903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.585714][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.595028][T16908] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3772: bg 0: block 345: padding at end of block bitmap is not set [ 449.620361][T16899] EXT4-fs (loop2): failed to initialize system zone (-117) [ 449.628113][T16899] EXT4-fs (loop2): mount failed [ 449.634066][T16905] loop3: detected capacity change from 0 to 2048 [ 449.650694][T16908] EXT4-fs (loop1): Remounting filesystem read-only [ 449.658453][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.672968][T16905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.691385][T16905] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.719109][T16918] 9pnet_fd: Insufficient options for proto=fd [ 449.750790][T15059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.805599][T16923] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3780: bg 0: block 345: padding at end of block bitmap is not set [ 449.824594][T16923] EXT4-fs (loop3): Remounting filesystem read-only [ 449.906991][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.959903][T16933] loop2: detected capacity change from 0 to 1024 [ 449.967090][T16933] EXT4-fs: Ignoring removed oldalloc option [ 449.973342][T16933] EXT4-fs: Ignoring removed bh option [ 449.996695][T16933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.017196][T16933] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3788: Allocating blocks 449-513 which overlap fs metadata [ 450.060136][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.401085][T16950] loop2: detected capacity change from 0 to 512 [ 450.418088][T16950] EXT4-fs (loop2): too many log groups per flexible block group [ 450.426225][T16950] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 450.433642][T16950] EXT4-fs (loop2): mount failed [ 450.645552][T16960] loop2: detected capacity change from 0 to 1024 [ 450.653225][T16960] EXT4-fs: Ignoring removed oldalloc option [ 450.659467][T16962] loop0: detected capacity change from 0 to 1024 [ 450.659548][T16960] EXT4-fs: Ignoring removed bh option [ 450.673764][T16962] EXT4-fs: Ignoring removed oldalloc option [ 450.680058][T16962] EXT4-fs: Ignoring removed bh option [ 450.698006][T16960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.723259][T16962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.750011][T16970] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3800'. [ 450.801091][T16962] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3798: Allocating blocks 449-513 which overlap fs metadata [ 450.839708][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.862800][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.920119][T16984] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3806'. [ 450.977036][T16980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.009178][T16988] loop4: detected capacity change from 0 to 128 [ 451.016162][T16988] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 451.016162][T16988] A"Й5 )ÿ8taLVQuVVTfBi[ [ 451.016162][T16988] >:;: EV -CLho)[00000000000000000000' [ 451.080770][T16995] netlink: 'syz.0.3810': attribute type 21 has an invalid length. [ 451.200094][T16978] loop3: detected capacity change from 0 to 2048 [ 451.237062][T16978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.254822][T16978] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.398766][T17011] loop2: detected capacity change from 0 to 1024 [ 451.408663][T17011] EXT4-fs: Ignoring removed oldalloc option [ 451.415707][T17011] EXT4-fs: Ignoring removed bh option [ 451.418030][T16991] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3805: bg 0: block 345: padding at end of block bitmap is not set [ 451.436186][T16991] EXT4-fs (loop3): Remounting filesystem read-only [ 451.487834][T17011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.509553][T17011] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3816: Allocating blocks 449-513 which overlap fs metadata [ 451.541588][T13952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.607947][T14870] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.671821][T17022] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3818'. [ 451.724197][T17026] loop2: detected capacity change from 0 to 2048 [ 451.752941][T17026] EXT4-fs (loop2): failed to initialize system zone (-117) [ 451.773302][T17026] EXT4-fs (loop2): mount failed [ 451.907226][T17036] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3825'. [ 452.229741][T17058] 9pnet_fd: Insufficient options for proto=fd [ 452.237013][T17055] loop3: detected capacity change from 0 to 2048 [ 452.572002][T17055] EXT4-fs (loop3): failed to initialize system zone (-117) [ 452.580548][T17055] EXT4-fs (loop3): mount failed [ 452.653205][T17065] loop0: detected capacity change from 0 to 1024 [ 452.663138][T17065] EXT4-fs: Ignoring removed oldalloc option [ 452.669617][T17065] EXT4-fs: Ignoring removed bh option [ 452.708105][T17065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.751588][T17065] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3836: Allocating blocks 449-513 which overlap fs metadata [ 452.793444][T14568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.856970][T17074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.889966][T17078] loop0: detected capacity change from 0 to 2048 [ 452.928028][T17078] EXT4-fs (loop0): failed to initialize system zone (-117) [ 452.937995][T17078] EXT4-fs (loop0): mount failed [ 452.939900][T17084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3843'. [ 452.964444][T17084] macvtap2: entered allmulticast mode [ 452.972072][T17084] batman_adv: batadv0: Adding interface: macvtap2 [ 452.978801][T17084] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.011628][T17084] batman_adv: batadv0: Interface activated: macvtap2 [ 453.080849][T17099] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3849'. [ 453.152208][T17097] loop3: detected capacity change from 0 to 2048 [ 453.167165][T17097] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.372561][T17097] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3848: bg 0: block 345: padding at end of block bitmap is not set [ 453.390633][T17113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 453.399399][T17097] EXT4-fs (loop3): Remounting filesystem read-only [ 453.434499][T17116] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3854'. [ 453.550388][T17120] loop3: detected capacity change from 0 to 512 [ 453.569660][T17123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3857'. [ 453.587731][T17123] macvtap4: entered allmulticast mode [ 453.597224][T17123] batman_adv: batadv0: Adding interface: macvtap4 [ 453.603994][T17123] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.630819][T17123] batman_adv: batadv0: Interface activated: macvtap4 [ 453.642134][T17120] EXT4-fs (loop3): too many log groups per flexible block group [ 453.650306][T17120] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 453.657329][T17120] EXT4-fs (loop3): mount failed [ 453.714946][T15195] usb usb6-port6: attempt power cycle [ 453.859208][T17139] loop0: detected capacity change from 0 to 1024 [ 453.869654][T17139] EXT4-fs: Ignoring removed oldalloc option [ 453.876108][T17139] EXT4-fs: Ignoring removed bh option [ 453.888746][T17139] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3863: Allocating blocks 449-513 which overlap fs metadata [ 454.086064][T17146] loop2: detected capacity change from 0 to 2048 [ 454.092798][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 454.092861][ T29] audit: type=1400 audit(1760901177.391:17776): avc: denied { read write } for pid=17143 comm="syz.2.3865" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.124311][ T29] audit: type=1400 audit(1760901177.391:17777): avc: denied { open } for pid=17143 comm="syz.2.3865" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.148898][ T29] audit: type=1400 audit(1760901177.391:17778): avc: denied { ioctl } for pid=17143 comm="syz.2.3865" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.157170][T17146] EXT4-fs (loop2): failed to initialize system zone (-117) [ 454.176614][ T29] audit: type=1400 audit(1760901177.431:17779): avc: denied { mounton } for pid=17143 comm="syz.2.3865" path="/200/file0" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 454.203188][T17148] loop0: detected capacity change from 0 to 2048 [ 454.206427][ T29] audit: type=1400 audit(1760901177.431:17780): avc: denied { prog_load } for pid=17147 comm="syz.0.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.232623][ T29] audit: type=1400 audit(1760901177.431:17781): avc: denied { bpf } for pid=17147 comm="syz.0.3864" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.254058][ T29] audit: type=1400 audit(1760901177.431:17782): avc: denied { perfmon } for pid=17147 comm="syz.0.3864" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.262375][T17146] EXT4-fs (loop2): mount failed [ 454.276595][ T29] audit: type=1400 audit(1760901177.451:17783): avc: denied { read } for pid=17147 comm="syz.0.3864" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 454.305399][ T29] audit: type=1400 audit(1760901177.451:17784): avc: denied { open } for pid=17147 comm="syz.0.3864" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 454.338194][ T29] audit: type=1400 audit(1760901177.641:17785): avc: denied { map_read map_write } for pid=17152 comm="syz.4.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.350719][T17148] EXT4-fs (loop0): failed to initialize system zone (-117) [ 454.381391][T17148] EXT4-fs (loop0): mount failed [ 454.562743][T17156] loop4: detected capacity change from 0 to 2048 [ 454.597116][T17156] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.679860][T17171] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3869: bg 0: block 345: padding at end of block bitmap is not set [ 454.697271][T17171] EXT4-fs (loop4): Remounting filesystem read-only [ 454.731282][T17176] netlink: 'wޣ': attribute type 13 has an invalid length. [ 454.751680][T17176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.832215][T17182] loop3: detected capacity change from 0 to 512 [ 454.855087][T17181] loop4: detected capacity change from 0 to 2048 [ 454.865092][T17182] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.880850][T17181] EXT4-fs (loop4): failed to initialize system zone (-117) [ 454.888805][T17181] EXT4-fs (loop4): mount failed [ 454.951804][T17188] loop4: detected capacity change from 0 to 2048 [ 454.967083][T17188] EXT4-fs (loop4): failed to initialize system zone (-117) [ 454.974571][T17188] EXT4-fs (loop4): mount failed [ 455.102559][T17192] loop4: detected capacity change from 0 to 2048 [ 455.116456][T17192] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.196079][T17195] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3880: bg 0: block 345: padding at end of block bitmap is not set [ 455.211354][T17195] EXT4-fs (loop4): Remounting filesystem read-only [ 455.547728][T17201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.650984][T17209] loop4: detected capacity change from 0 to 2048 [ 455.666344][T17209] EXT4-fs (loop4): failed to initialize system zone (-117) [ 455.674065][T17209] EXT4-fs (loop4): mount failed [ 455.674175][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3888'. [ 455.688631][T15195] usb usb6-port6: unable to enumerate USB device [ 455.710562][T17213] !yz!: rxe_newlink: already configured on team_slave_0 [ 455.746613][T17216] loop1: detected capacity change from 0 to 1024 [ 455.753755][T17216] EXT4-fs: Ignoring removed oldalloc option [ 455.760302][T17216] EXT4-fs: Ignoring removed bh option [ 455.781649][T17217] loop4: detected capacity change from 0 to 2048 [ 455.800211][T17217] EXT4-fs (loop4): failed to initialize system zone (-117) [ 455.804261][T17216] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3889: Allocating blocks 449-513 which overlap fs metadata [ 455.807855][T17217] EXT4-fs (loop4): mount failed [ 455.875563][T17231] loop4: detected capacity change from 0 to 2048 [ 455.896168][T17231] EXT4-fs (loop4): failed to initialize system zone (-117) [ 455.903808][T17231] EXT4-fs (loop4): mount failed [ 455.989578][T17238] loop4: detected capacity change from 0 to 2048 [ 456.035048][T17238] EXT4-fs (loop4): failed to initialize system zone (-117) [ 456.043006][T17238] EXT4-fs (loop4): mount failed [ 456.088049][T17248] 9pnet_fd: Insufficient options for proto=fd [ 456.095842][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 456.104869][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 456.113866][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 456.187673][T17255] 9pnet_fd: Insufficient options for proto=fd [ 456.317463][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 456.326681][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 456.603787][T17262] netlink: 'syz.4.3902': attribute type 21 has an invalid length. [ 456.639686][T17264] loop0: detected capacity change from 0 to 1024 [ 456.647642][T17264] EXT4-fs: Ignoring removed oldalloc option [ 456.653802][T17264] EXT4-fs: Ignoring removed bh option [ 456.673973][T17264] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3903: Allocating blocks 449-513 which overlap fs metadata [ 456.688566][T17266] loop4: detected capacity change from 0 to 2048 [ 456.721155][T17266] EXT4-fs (loop4): failed to initialize system zone (-117) [ 456.728638][T17266] EXT4-fs (loop4): mount failed [ 456.763321][T17274] loop0: detected capacity change from 0 to 2048 [ 456.780863][T17274] EXT4-fs (loop0): failed to initialize system zone (-117) [ 456.788637][T17274] EXT4-fs (loop0): mount failed [ 456.987775][T17293] 9pnet_fd: Insufficient options for proto=fd [ 457.195885][T17300] loop1: detected capacity change from 0 to 512 [ 457.203042][T17300] /dev/loop1: Can't open blockdev [ 457.463035][T17302] macvtap5: entered allmulticast mode [ 457.502835][T17302] batman_adv: batadv0: Adding interface: macvtap5 [ 457.509672][T17302] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.568036][T17302] batman_adv: batadv0: Interface activated: macvtap5 [ 457.720779][T17308] loop3: detected capacity change from 0 to 1024 [ 457.828671][T17308] EXT4-fs: Ignoring removed oldalloc option [ 457.835049][T17308] EXT4-fs: Ignoring removed bh option [ 457.886792][T17306] loop0: detected capacity change from 0 to 2048 [ 457.919614][T17313] loop1: detected capacity change from 0 to 1024 [ 457.927072][T17313] EXT4-fs: Ignoring removed oldalloc option [ 457.933821][T17313] EXT4-fs: Ignoring removed bh option [ 457.947456][T17306] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.978322][T17313] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3917: Allocating blocks 449-513 which overlap fs metadata [ 458.010900][T17308] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3915: Allocating blocks 449-513 which overlap fs metadata [ 458.030837][T17311] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3914: bg 0: block 345: padding at end of block bitmap is not set [ 458.047172][T17311] EXT4-fs (loop0): Remounting filesystem read-only [ 458.072915][T17322] netlink: 'wޣ': attribute type 13 has an invalid length. [ 458.092671][T17322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.172010][T17323] loop1: detected capacity change from 0 to 512 [ 458.197477][T17323] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.230231][T15195] usb usb6-port6: attempt power cycle [ 458.274082][T17331] loop0: detected capacity change from 0 to 2048 [ 458.286511][T17331] EXT4-fs (loop0): failed to initialize system zone (-117) [ 458.293900][T17331] EXT4-fs (loop0): mount failed [ 458.582429][T17346] loop0: detected capacity change from 0 to 128 [ 458.589604][T17346] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 458.602190][T17346] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 458.634966][ T4187] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 458.645903][T17347] 9pnet_fd: Insufficient options for proto=fd [ 459.006544][T17354] loop0: detected capacity change from 0 to 512 [ 459.134441][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 459.134460][ T29] audit: type=1400 audit(1760901182.351:18204): avc: denied { mount } for pid=17348 comm="syz.0.3926" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 459.164693][ T29] audit: type=1400 audit(1760901182.401:18205): avc: denied { unmount } for pid=15059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 459.333275][T17363] loop4: detected capacity change from 0 to 1024 [ 459.339821][ T29] audit: type=1326 audit(1760901182.491:18206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17334 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b67cefc9 code=0x7ffc0000 [ 459.364409][ T29] audit: type=1326 audit(1760901182.491:18207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17334 comm="syz.4.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b67cefc9 code=0x7ffc0000 [ 459.389745][ T29] audit: type=1400 audit(1760901182.601:18208): avc: denied { unmount } for pid=12995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 459.410346][ T29] audit: type=1400 audit(1760901182.621:18209): avc: denied { create } for pid=17359 comm="syz.1.3927" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 459.431938][ T29] audit: type=1400 audit(1760901182.621:18210): avc: denied { write } for pid=17359 comm="syz.1.3927" name="file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 459.455699][ T29] audit: type=1400 audit(1760901182.621:18211): avc: denied { open } for pid=17359 comm="syz.1.3927" path="/119/file0" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 459.482579][T17363] EXT4-fs: Ignoring removed oldalloc option [ 459.489242][T17363] EXT4-fs: Ignoring removed bh option [ 459.553331][ T29] audit: type=1400 audit(1760901182.851:18212): avc: denied { create } for pid=17359 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.574219][ T29] audit: type=1400 audit(1760901182.851:18213): avc: denied { setopt } for pid=17359 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.753783][T17363] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3929: Allocating blocks 449-513 which overlap fs metadata [ 460.005923][T17377] loop0: detected capacity change from 0 to 512 [ 460.246489][T17371] loop1: detected capacity change from 0 to 2048 [ 460.285700][T17371] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.329509][T17387] __nla_validate_parse: 14 callbacks suppressed [ 460.329528][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 460.345368][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 460.355966][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 460.375483][T17371] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3931: bg 0: block 345: padding at end of block bitmap is not set [ 460.397228][T17371] EXT4-fs (loop1): Remounting filesystem read-only [ 460.422875][T17389] loop4: detected capacity change from 0 to 2048 [ 460.464568][T17393] netlink: 'wޣ': attribute type 13 has an invalid length. [ 460.474713][T15195] usb usb6-port6: unable to enumerate USB device [ 460.506363][T17393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.523190][T17389] EXT4-fs (loop4): failed to initialize system zone (-117) [ 460.532327][T17389] EXT4-fs (loop4): mount failed [ 460.575989][T17400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3939'. [ 460.587968][T17400] !yz!: rxe_newlink: already configured on team_slave_0 [ 460.620254][T17403] loop3: detected capacity change from 0 to 512 [ 460.639272][T17403] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.733965][T17414] loop1: detected capacity change from 0 to 128 [ 460.741468][T17414] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 460.741468][T17414] A"Й5 )ÿ8taLVQuVVTfBi[ [ 460.741468][T17414] >:;: EV -CLho)[00000000000000000000' [ 461.119993][T17427] loop0: detected capacity change from 0 to 2048 [ 461.151256][T17427] EXT4-fs (loop0): failed to initialize system zone (-117) [ 461.166955][T17427] EXT4-fs (loop0): mount failed [ 461.409838][T17444] loop2: detected capacity change from 0 to 1024 [ 461.470952][T17444] EXT4-fs: Ignoring removed oldalloc option [ 461.477158][T17444] EXT4-fs: Ignoring removed bh option [ 461.510007][T17440] loop3: detected capacity change from 0 to 2048 [ 461.523484][T17448] loop1: detected capacity change from 0 to 128 [ 461.542407][T17448] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 461.542407][T17448] A"Й5 )ÿ8taLVQuVVTfBi[ [ 461.542407][T17448] >:;: EV -CLho)[00000000000000000000' [ 461.545750][T17440] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.693989][T17444] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3955: Allocating blocks 449-513 which overlap fs metadata [ 461.757982][T17446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3951: bg 0: block 345: padding at end of block bitmap is not set [ 461.775083][T17446] EXT4-fs (loop3): Remounting filesystem read-only [ 461.824890][T17457] loop0: detected capacity change from 0 to 1024 [ 461.844774][T17457] EXT4-fs: Ignoring removed oldalloc option [ 461.851182][T17457] EXT4-fs: Ignoring removed bh option [ 461.885035][T17466] netlink: 'wޣ': attribute type 13 has an invalid length. [ 461.916504][T17466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.958215][T17466] loop1: detected capacity change from 0 to 512 [ 461.982838][T17474] 9pnet_fd: Insufficient options for proto=fd [ 462.016985][T17466] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.043924][T17482] !yz!: rxe_newlink: already configured on team_slave_0 [ 462.071414][T17465] loop2: detected capacity change from 0 to 2048 [ 462.088963][T17465] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.112930][T17488] loop1: detected capacity change from 0 to 1024 [ 462.141418][T17491] loop0: detected capacity change from 0 to 128 [ 462.147764][T17488] EXT4-fs: Ignoring removed oldalloc option [ 462.154287][T17488] EXT4-fs: Ignoring removed bh option [ 462.161548][T17491] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 462.161548][T17491] A"Й5 )ÿ8taLVQuVVTfBi[ [ 462.161548][T17491] >:;: EV -CLho)[00000000000000000000' [ 462.204028][T17496] loop4: detected capacity change from 0 to 1024 [ 462.210915][T17481] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3961: bg 0: block 345: padding at end of block bitmap is not set [ 462.229873][T17496] EXT4-fs: Ignoring removed oldalloc option [ 462.236241][T17496] EXT4-fs: Ignoring removed bh option [ 462.273929][T17481] EXT4-fs (loop2): Remounting filesystem read-only [ 462.301448][T17499] loop3: detected capacity change from 0 to 2048 [ 462.323277][T17496] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3973: Allocating blocks 449-513 which overlap fs metadata [ 462.398306][T17499] EXT4-fs (loop3): failed to initialize system zone (-117) [ 462.406436][T17499] EXT4-fs (loop3): mount failed [ 462.418819][T17506] loop1: detected capacity change from 0 to 1024 [ 462.437729][T17506] EXT4-fs: Ignoring removed oldalloc option [ 462.443777][T17506] EXT4-fs: Ignoring removed bh option [ 462.451520][T17510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.514164][T17520] !yz!: rxe_newlink: already configured on team_slave_0 [ 462.515020][T17522] netlink: 'wޣ': attribute type 13 has an invalid length. [ 462.565599][T17525] 9pnet_fd: Insufficient options for proto=fd [ 462.593741][T17522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.633929][T17522] loop4: detected capacity change from 0 to 512 [ 462.653392][T17531] loop1: detected capacity change from 0 to 1024 [ 462.664602][T17531] EXT4-fs: Ignoring removed oldalloc option [ 462.670746][T17531] EXT4-fs: Ignoring removed bh option [ 462.670966][T17536] loop3: detected capacity change from 0 to 128 [ 462.677986][T17522] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.683139][T17536] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 462.683139][T17536] A"Й5 )ÿ8taLVQuVVTfBi[ [ 462.683139][T17536] >:;: EV -CLho)[00000000000000000000' [ 463.147802][T17550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.185684][T17557] loop4: detected capacity change from 0 to 1024 [ 463.192660][T17557] EXT4-fs: Ignoring removed oldalloc option [ 463.198796][T17557] EXT4-fs: Ignoring removed bh option [ 463.261003][T17565] 9pnet_fd: Insufficient options for proto=fd [ 463.268065][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 463.277296][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 463.296219][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 463.330115][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 463.339219][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 463.349303][T15195] usb usb6-port6: attempt power cycle [ 463.372463][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 463.385155][T17571] 9pnet_fd: Insufficient options for proto=fd [ 463.447499][T17577] loop1: detected capacity change from 0 to 1024 [ 463.461822][T17577] EXT4-fs: Ignoring removed oldalloc option [ 463.468386][T17577] EXT4-fs: Ignoring removed bh option [ 463.506256][T17577] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3999: Allocating blocks 449-513 which overlap fs metadata [ 463.539050][T17584] macvtap6: entered allmulticast mode [ 463.548551][T17584] batman_adv: batadv0: Adding interface: macvtap6 [ 463.555170][T17584] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.594383][T17584] batman_adv: batadv0: Interface activated: macvtap6 [ 463.616602][T17589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.784225][T17593] loop4: detected capacity change from 0 to 1024 [ 463.791642][T17593] EXT4-fs: Ignoring removed oldalloc option [ 463.798162][T17593] EXT4-fs: Ignoring removed bh option [ 463.815867][T17593] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4005: Allocating blocks 449-513 which overlap fs metadata [ 463.841095][T17603] loop1: detected capacity change from 0 to 1024 [ 463.908937][T17603] EXT4-fs: Ignoring removed oldalloc option [ 463.914990][T17603] EXT4-fs: Ignoring removed bh option [ 464.191786][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 464.191803][ T29] audit: type=1400 audit(1760901187.491:18536): avc: denied { read } for pid=17613 comm="syz.1.4009" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 464.222262][ T29] audit: type=1400 audit(1760901187.491:18537): avc: denied { open } for pid=17613 comm="syz.1.4009" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 464.361315][T17616] 9pnet_fd: Insufficient options for proto=fd [ 464.382434][ T29] audit: type=1400 audit(1760901187.681:18538): avc: denied { setopt } for pid=17617 comm="syz.4.4010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 464.407731][ T29] audit: type=1400 audit(1760901187.711:18539): avc: denied { write } for pid=17617 comm="syz.4.4010" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 464.457609][ T29] audit: type=1400 audit(1760901187.761:18540): avc: denied { create } for pid=17619 comm="syz.1.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 464.526840][ T29] audit: type=1400 audit(1760901187.831:18541): avc: denied { setopt } for pid=17619 comm="syz.1.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 464.559852][T17620] loop1: detected capacity change from 0 to 2048 [ 464.567513][ T29] audit: type=1400 audit(1760901187.851:18542): avc: denied { write } for pid=17619 comm="syz.1.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.589034][ T29] audit: type=1400 audit(1760901187.851:18543): avc: denied { ioctl } for pid=17619 comm="syz.1.4012" path="socket:[56144]" dev="sockfs" ino=56144 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 464.628539][T17620] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.944560][T17623] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4012: bg 0: block 345: padding at end of block bitmap is not set [ 464.979680][T17623] EXT4-fs (loop1): Remounting filesystem read-only [ 465.035780][T17628] loop0: detected capacity change from 0 to 128 [ 465.060827][T17628] vfat: Unknown parameter 'ïf8bmXjܗX'$ha#ug [ 465.060827][T17628] A"Й5 )ÿ8taLVQuVVTfBi[ [ 465.060827][T17628] >:;: EV -CLho)[00000000000000000000' [ 465.209751][T17631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.286636][T17636] 9pnet_fd: Insufficient options for proto=fd [ 465.351596][T17638] loop1: detected capacity change from 0 to 1024 [ 465.352545][T17636] __nla_validate_parse: 10 callbacks suppressed [ 465.352564][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 465.374172][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 465.377073][T17638] EXT4-fs: Ignoring removed oldalloc option [ 465.384147][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 465.389448][T17638] EXT4-fs: Ignoring removed bh option [ 465.429396][T17648] 9pnet_fd: Insufficient options for proto=fd [ 465.436593][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 465.445728][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 465.455009][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 465.474816][T15195] usb usb6-port6: unable to enumerate USB device [ 465.480216][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 465.490622][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 465.600874][T17655] 9pnet_fd: Insufficient options for proto=fd [ 465.610980][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 465.772031][T17666] loop1: detected capacity change from 0 to 512 [ 466.234559][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 466.276602][T17676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.344262][T17679] loop0: detected capacity change from 0 to 1024 [ 466.352679][T17679] EXT4-fs: Ignoring removed oldalloc option [ 466.359028][T17679] EXT4-fs: Ignoring removed bh option [ 466.380398][T15059] ================================================================== [ 466.388877][T15059] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 466.396623][T15059] [ 466.398955][T15059] write to 0xffff888237d25ee8 of 1 bytes by task 17660 on cpu 1: [ 466.406946][T15059] folios_put_refs+0x285/0x2d0 [ 466.411829][T15059] folio_batch_move_lru+0x24b/0x280 [ 466.417052][T15059] folio_add_lru+0x14a/0x1f0 [ 466.421770][T15059] shmem_get_folio_gfp+0x7ab/0xd60 [ 466.426921][T15059] shmem_fault+0xf6/0x250 [ 466.431549][T15059] __do_fault+0xbc/0x200 [ 466.436024][T15059] handle_mm_fault+0xf78/0x2be0 [ 466.440924][T15059] __get_user_pages+0x102a/0x1ed0 [ 466.445996][T15059] __mm_populate+0x243/0x3a0 [ 466.450628][T15059] vm_mmap_pgoff+0x232/0x2e0 [ 466.455287][T15059] ksys_mmap_pgoff+0xc2/0x310 [ 466.460119][T15059] x64_sys_call+0x14a3/0x3000 [ 466.464910][T15059] do_syscall_64+0xd2/0x200 [ 466.469446][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.475443][T15059] [ 466.477778][T15059] read to 0xffff888237d25ee8 of 1 bytes by task 15059 on cpu 0: [ 466.485946][T15059] __lru_add_drain_all+0x17e/0x450 [ 466.491193][T15059] lru_add_drain_all+0x10/0x20 [ 466.496058][T15059] invalidate_bdev+0x47/0x70 [ 466.500755][T15059] ext4_put_super+0x624/0x7d0 [ 466.505539][T15059] generic_shutdown_super+0xe6/0x210 [ 466.510934][T15059] kill_block_super+0x2a/0x70 [ 466.515719][T15059] ext4_kill_sb+0x42/0x80 [ 466.520062][T15059] deactivate_locked_super+0x75/0x1c0 [ 466.525444][T15059] deactivate_super+0x97/0xa0 [ 466.530132][T15059] cleanup_mnt+0x269/0x2e0 [ 466.534618][T15059] __cleanup_mnt+0x19/0x20 [ 466.539069][T15059] task_work_run+0x131/0x1a0 [ 466.543783][T15059] exit_to_user_mode_loop+0xed/0x110 [ 466.549172][T15059] do_syscall_64+0x1d6/0x200 [ 466.553875][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.559782][T15059] [ 466.562300][T15059] value changed: 0x1f -> 0x01 [ 466.567261][T15059] [ 466.569858][T15059] Reported by Kernel Concurrency Sanitizer on: [ 466.576281][T15059] CPU: 0 UID: 0 PID: 15059 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 466.586809][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 466.596972][T15059] ================================================================== [ 466.621952][ T29] audit: type=1400 audit(1760901189.921:18544): avc: denied { write } for pid=17680 comm="syz.3.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 466.675412][ T29] audit: type=1400 audit(1760901189.921:18545): avc: denied { nlmsg_write } for pid=17680 comm="syz.3.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 466.678328][T17679] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.4028: Allocating blocks 449-513 which overlap fs metadata