last executing test programs: 3m22.55692045s ago: executing program 32 (id=129): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 3m20.074458491s ago: executing program 33 (id=219): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="a9", 0xfffff}], 0x1}}], 0x1, 0x54) 3m11.057565133s ago: executing program 34 (id=492): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/67, 0x43}], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 2m59.036992633s ago: executing program 5 (id=853): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) 2m58.122093814s ago: executing program 5 (id=865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) socket$packet(0x11, 0x3, 0x300) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x44004) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) 2m57.38649389s ago: executing program 5 (id=872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x1, 0x4}}]}, 0x40}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 2m57.219094795s ago: executing program 5 (id=876): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2m56.309639005s ago: executing program 5 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000130001002cbd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=0x0, @ANYBLOB="0c002b80080004"], 0x34}}, 0x20040000) 2m55.610956728s ago: executing program 5 (id=901): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m55.541007974s ago: executing program 35 (id=901): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m46.611459778s ago: executing program 7 (id=1059): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1405, 0x621, 0x0, 0x3, "", [{{0x17}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0fff7bf}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m46.308244545s ago: executing program 7 (id=1062): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) fdatasync(r0) 2m46.034756179s ago: executing program 7 (id=1064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m45.212739032s ago: executing program 7 (id=1075): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2m45.12751463s ago: executing program 7 (id=1076): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) 2m44.56656271s ago: executing program 7 (id=1085): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x0, 0xc0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x200005, 0x10011, 0x3, 0x0}) 2m43.776855311s ago: executing program 36 (id=1085): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x0, 0xc0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x200005, 0x10011, 0x3, 0x0}) 2m26.030523259s ago: executing program 4 (id=1369): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 2m25.921752109s ago: executing program 4 (id=1373): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m25.359843308s ago: executing program 4 (id=1383): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000000100000400000024"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m25.203038332s ago: executing program 4 (id=1387): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2m24.659774701s ago: executing program 4 (id=1392): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x108, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xf6, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb", @typed={0x4, 0xe9}, @typed={0x8, 0x1c, 0x0, 0x0, @pid}]}]}, 0x108}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m24.574664508s ago: executing program 4 (id=1394): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x5, 0x219, &(0x7f00000003c0)="$eJzs3D1rG3ccB/C/ZLm2Wlo8Fdqlf9qlXa6tly4dWooLpYKWJAp5mM5YToQUCXwaJJNBc6a8jhDIEsgW8gb8GrJkMwHjyVMuOJKt2MjPkU2cz2fRj9/3/qffceIQp4f13x/eayxnyXLaCaXZQij+EfphqxDmQjHs6IefntzYfHD15q1//6xUFq5MD/sxfvXd89v3H3//ovPF9afbnUIIYWP+1drXa9+sv7l2t57FehZb7U5M42K73UkXm7W4VM8aSYz/N2tpVov1VlZb2ZMvN9ujpw61LItpqxcbtV7stGNnpRfTO2m9FZMkibOBM6k+2srzsJHneT7TD3men3QHhcnMxXk54/nnI7d7UY/bV9PX/W61Wx08DvK//6ks/BLfmRut2ux2q1O7+a+DPO7Np8Pnw3x+bP5Z+PGHQb6d/fVfZV9eDkuTP3wAAAAAALiUkrhr7P39JDkoH1TvfT6w7/59KXxbGnWmJn8oAAAAwAGy3mojbS5NrwyKZu3Cipmwt/Pbs+GIRy3/+eXR20yo+HJYhFPupxxCOHibYjjlYOUTz1M+ZIzJFzvfIx92dn5fcLzlpQ81RvkCX/zjitkwLiqH1cbM+ZwUAADgchm96T/2kuJEBwIAAAAAAAAAAAAAAAAAAIBP0Hn8mdlFHyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGHeBgAA//+1cVUx") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 2m24.574615619s ago: executing program 37 (id=1394): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x5, 0x219, &(0x7f00000003c0)="$eJzs3D1rG3ccB/C/ZLm2Wlo8Fdqlf9qlXa6tly4dWooLpYKWJAp5mM5YToQUCXwaJJNBc6a8jhDIEsgW8gb8GrJkMwHjyVMuOJKt2MjPkU2cz2fRj9/3/qffceIQp4f13x/eayxnyXLaCaXZQij+EfphqxDmQjHs6IefntzYfHD15q1//6xUFq5MD/sxfvXd89v3H3//ovPF9afbnUIIYWP+1drXa9+sv7l2t57FehZb7U5M42K73UkXm7W4VM8aSYz/N2tpVov1VlZb2ZMvN9ujpw61LItpqxcbtV7stGNnpRfTO2m9FZMkibOBM6k+2srzsJHneT7TD3men3QHhcnMxXk54/nnI7d7UY/bV9PX/W61Wx08DvK//6ks/BLfmRut2ux2q1O7+a+DPO7Np8Pnw3x+bP5Z+PGHQb6d/fVfZV9eDkuTP3wAAAAAALiUkrhr7P39JDkoH1TvfT6w7/59KXxbGnWmJn8oAAAAwAGy3mojbS5NrwyKZu3Cipmwt/Pbs+GIRy3/+eXR20yo+HJYhFPupxxCOHibYjjlYOUTz1M+ZIzJFzvfIx92dn5fcLzlpQ81RvkCX/zjitkwLiqH1cbM+ZwUAADgchm96T/2kuJEBwIAAAAAAAAAAAAAAAAAAIBP0Hn8mdlFHyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGHeBgAA//+1cVUx") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 2m23.033566905s ago: executing program 9 (id=1426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000130001002cbd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="141004001f4c", @ANYRES32=0x0, @ANYBLOB="0c002b80080004"], 0x34}}, 0x20040000) 2m22.789396177s ago: executing program 9 (id=1432): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xffffffff, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}, {0x0, 0x47, 0xd, 0x7, @tick, {0x40, 0xff}, {0x10, 0x9}, @time=@tick=0xfffffff8}], 0x38) 2m22.718654073s ago: executing program 9 (id=1433): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) 2m22.539128279s ago: executing program 9 (id=1436): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) creat(0x0, 0xecf86c37d53049cc) 2m22.30937259s ago: executing program 9 (id=1440): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x40080, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14) 2m22.185089651s ago: executing program 8 (id=1443): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0xfc, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x18}, 0x24000810) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r2, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 2m22.184636691s ago: executing program 8 (id=1444): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)="1e", 0x1, 0x6004081, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e23, 0xffff6a66, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, 0x0}, 0x20008050) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x800}, &(0x7f0000000100)=0x8) 2m22.110255788s ago: executing program 8 (id=1445): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) syz_pidfd_open(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000005a000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89b, 0x1c000, 0x3, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 2m22.066620272s ago: executing program 9 (id=1447): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x84}, {0x7ff, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x7fffffff}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 2m21.946616072s ago: executing program 38 (id=1447): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x84}, {0x7ff, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x7fffffff}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 2m21.942941262s ago: executing program 8 (id=1449): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) creat(0x0, 0xecf86c37d53049cc) 2m21.206805688s ago: executing program 8 (id=1452): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @f={0x6, 0x4, 0x2, 0x3, {0x8, 0x12, "3d284cc2740c3685532992966a4202a61f23"}, 0x1}}, 0x1c) 2m20.806635034s ago: executing program 8 (id=1461): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 2m20.777560986s ago: executing program 39 (id=1461): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 4.146621161s ago: executing program 0 (id=3894): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.251827021s ago: executing program 2 (id=3901): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x3ff, 0x145281) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 3.223943803s ago: executing program 0 (id=3903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='netlink_extack\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.153572339s ago: executing program 2 (id=3904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x6885}, 0x0) 3.084072046s ago: executing program 2 (id=3907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d660000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.018371102s ago: executing program 0 (id=3910): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) syz_pidfd_open(r0, 0x0) setpgid(r0, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89b, 0x1c000, 0x3, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 3.009335192s ago: executing program 2 (id=3911): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000001) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000e00)={0x17c04, 0xffffffffffffffff, 0x6, 0x24000003, 0x400000006, 0x3}) 2.712122719s ago: executing program 0 (id=3916): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2.547289983s ago: executing program 2 (id=3919): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x47}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20006085}, 0x400c0) 2.521523436s ago: executing program 0 (id=3921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 2.254415989s ago: executing program 2 (id=3922): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080)='\x00\x00', 0xfdef, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffe3e) 2.042640429s ago: executing program 3 (id=3924): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 2.042385098s ago: executing program 3 (id=3925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) 2.037159549s ago: executing program 3 (id=3926): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x2000000000700}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 2.014916581s ago: executing program 1 (id=3927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d660000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.999203442s ago: executing program 1 (id=3928): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x5, 0x219, &(0x7f00000003c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 1.918653279s ago: executing program 1 (id=3929): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, '\x00', "e123c5876ff425b1ebe2060000000f586058ff85b07ce696322bff00", "7e25837b", "5ce55765f1ae136f"}, 0x38) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)}], 0x1) 1.918330049s ago: executing program 1 (id=3930): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 1.878458823s ago: executing program 0 (id=3931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6gretap0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.756099443s ago: executing program 40 (id=3931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6gretap0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.605996827s ago: executing program 6 (id=3933): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x2000000000700}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 823.847097ms ago: executing program 3 (id=3934): mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000840)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000022c000480280001800a00010071756f74610000001800028008000240000000000c00014000000000000000090900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a814db02a710d549c1830f06fd6f15eeb297db994cdec1f9d0b862b38eac50a70415d7c27992fd1448e0cd651c8f9512288754396c6d21bcaa0410e0ce342da2fc0635434cd011750d37196f83b07ca383a62a0"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, 0x0, 0x0) 551.349811ms ago: executing program 3 (id=3935): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x3ff, 0x145281) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x50) getpgid(0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 550.758851ms ago: executing program 1 (id=3936): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x4}, 0x100002, 0x0, 0x4, 0x4, 0x3f62, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000008d58a778ef7d038f6d7cfd762879cbbaabc1653673712868697f4e4e91060b4ffe477f0f2d24ba3a89ba62d1bccfbd2530f7a85be2830b81cbdf67fa937af6d2b7003c6f4b5aa3435e4bada413f0a8cc419e386f0da7493a7f46f485eb81f5f029913555799765f01db51baf5e0cdad80e17e29f104b999f86b04b656bb484f823a196f694cbf125f1feed993aada92aafd6465ddf0048503addebf00000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="000000001f00000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x20000268, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000000080)={0x20080522}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) inotify_init() r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 523.089534ms ago: executing program 6 (id=3937): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x47}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20006085}, 0x400c0) 459.394299ms ago: executing program 1 (id=3938): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) unshare(0x64000600) r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa4000021) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r8) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000004ca45f0000000003000000f800fff900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000aa0d8000100000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="00000872cb"], 0x9) 448.23871ms ago: executing program 6 (id=3939): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 233.116619ms ago: executing program 6 (id=3940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6885}, 0x0) 146.446387ms ago: executing program 6 (id=3941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) 146.062517ms ago: executing program 6 (id=3942): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x0, 0x832]}}) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0xa, 0x5, 0x200}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000002000000000000000000000000000000000000000000000000000000000000000000feffffff00"/102]}, 0xde) 0s ago: executing program 3 (id=3943): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa0c055, &(0x7f0000000040)={[], [{@smackfsroot={'smackfsroot', 0x3d, '+]'}}]}, 0x0, 0x46b, &(0x7f0000000b80)="$eJzs3MtrXFUYAPBv7mTSps/4qNqHNr6w+Gia9GEXbhQFFwqCLqq7mKalNrXSRLAlmCpSl1JwLy4F/wJXuhF1JbhVcCmFItk0PsCRe+fevCeTxyS3Or8fHTjn3tt7znfOPZNzz52ZADrWrwcjohKxIyJ+TjckWXZGlu7L/sX01MTwH1MTw5Wo11/9vRL1iLg1NTE879honCvNHEoiko8qsX+JcscuXzk/NDo6cinP949feKd/7PKVp85dGDo7cnbk7cGTJ48dHXj6xODxtsS5M63rvvcvHtj74uvXXx4+df3N77/sKuq6II526Yu+eW0516PtLqxkO+ekK10lVoRVqUZE2l21bPzvjmrMdt7ueOHDUisHbKh6vV7f1Xz31TrwP1aJsmsAlKP4Q39rqiciJoY34j74dnbz2cYNUBr3dP5q7OmKJD+mtuD+tp225usmp67++Vlk/bClo9ofANh8X6fznycb85/i1djTG/fMOW5Xth6cbo24IyLujIi7IuLuiNgTkR17b0Tct8ry+xbkF88/kxtrCmyF0vnfM/mzrfnzv3z290+9t5rndkZP9Eatcubc6MiRvE0ORW1Lmh9Ypoxvnv/pk2b7+vK5X/FKyy/mgnk9bnRtmf9/Tg+ND60v6lk3P8jWACcXxz/75CpN7Y2IfWs4fzpvPvf4Fwea7W8d/zLa8Jyp/nnEY43+vxrLxL/w+WRPvu/E4PH+rTE6cqS/uCoW++HHa680K39d8bdB2v/blrz+Z+Lvrcx9Xju2+jKu/fJx03uaVVz/bxRb0uu/u/Jalu7Ot703ND5+aSCiu/LS4u2Ds2cr8sXxN3fsiXh46fGfvsel11ga//6ISC/i+yPigYg4mNf9wYh4KLJTLGVyOiK+e+6Rt9YSf9KqYdsg7f/T8/o/WvT/6hPV899+tZb4G9L+P5alDuVbVvL+t9IKrqftAAAA4L8iyT4DX0kOz6ST5PDhiO3Z2u62ZPTi2PgTZy6++9fpxmfle6OWFCtdjfXgxnroQL42XOQHF+SP5uvGn1Z7svy2/Nk3UJ7tTcZ/6rdq2bUDNpzva0HnMv6hcxn/0LmMf+hcKx3/9Q2uB7D5lhr/kyXUA9h85v/QuYx/6FzGP3Qu4x860nq+1y/RIjHZ5ubtvk3iyhKRlF+Nv/OfYSm7NYpfy2h9cC0fd6U3XctEee9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7fRvAAAA//9YNNzA") socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x200000000000011, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) syz_emit_ethernet(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): lags [ 166.599287][T11486] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2570: couldn't read orphan inode 15 (err -117) [ 166.612315][T11486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.692548][T11490] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2571'. [ 166.756889][T11497] syzkaller0: entered promiscuous mode [ 166.762438][T11497] syzkaller0: entered allmulticast mode [ 166.848846][T11507] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 166.929100][T11511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2582'. [ 167.072632][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.106994][T11523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'. [ 167.135214][T11523] bond1 (unregistering): Released all slaves [ 167.386662][T11538] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2593'. [ 167.658341][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.831311][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2601'. [ 167.862379][T11559] bond1 (unregistering): Released all slaves [ 167.983124][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 168.173749][T11565] syzkaller0: entered promiscuous mode [ 168.179361][T11565] syzkaller0: entered allmulticast mode [ 168.297699][T11576] program syz.3.2608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.595861][T11589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2615'. [ 168.784335][ T29] audit: type=1400 audit(1767614566.578:497): avc: denied { unmount } for pid=7612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.011494][T11607] loop1: detected capacity change from 0 to 512 [ 169.127625][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.140782][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.149850][T11607] EXT4-fs (loop1): 1 truncate cleaned up [ 169.159589][T11607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.281814][ T29] audit: type=1326 audit(1767614567.078:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.0.2622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e0886f749 code=0x0 [ 169.386000][T11614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2621: bg 0: block 465: padding at end of block bitmap is not set [ 169.410126][T11614] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1644 with error 28 [ 169.422626][T11614] EXT4-fs (loop1): This should not happen!! Data will be lost [ 169.422626][T11614] [ 169.432294][T11614] EXT4-fs (loop1): Total free blocks count 0 [ 169.438315][T11614] EXT4-fs (loop1): Free/Dirty block details [ 169.444245][T11614] EXT4-fs (loop1): free_blocks=0 [ 169.449256][T11614] EXT4-fs (loop1): dirty_blocks=1648 [ 169.454574][T11614] EXT4-fs (loop1): Block reservation details [ 169.460609][T11614] EXT4-fs (loop1): i_reserved_data_blocks=1648 [ 169.704355][T11627] loop6: detected capacity change from 0 to 2048 [ 169.717331][T11627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.737021][T11627] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.761773][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.860984][T11642] loop6: detected capacity change from 0 to 128 [ 169.888505][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.956301][T11642] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.972468][T11642] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.050582][T11652] loop0: detected capacity change from 0 to 512 [ 170.173534][T11652] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2638: inode has both inline data and extents flags [ 170.190431][T11652] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2638: couldn't read orphan inode 15 (err -117) [ 170.203191][T11652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.267946][ T29] audit: type=1400 audit(1767614568.068:499): avc: denied { read } for pid=11641 comm="syz.6.2634" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.291220][ T29] audit: type=1400 audit(1767614568.068:500): avc: denied { open } for pid=11641 comm="syz.6.2634" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.483310][T11660] loop3: detected capacity change from 0 to 512 [ 170.546853][ T29] audit: type=1400 audit(1767614568.118:501): avc: denied { execute } for pid=11641 comm="syz.6.2634" name="file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.569110][ T29] audit: type=1400 audit(1767614568.118:502): avc: denied { execute_no_trans } for pid=11641 comm="syz.6.2634" path="/205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 170.625064][T11660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.764243][ T7899] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.803409][T11660] EXT4-fs (loop3): 1 truncate cleaned up [ 170.811603][T11666] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 170.831862][T11660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.986688][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.028305][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.205134][T11677] loop2: detected capacity change from 0 to 512 [ 171.218154][T11677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.242190][T11677] EXT4-fs (loop2): 1 truncate cleaned up [ 171.248483][T11677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.574891][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.603400][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.615761][T11681] __nla_validate_parse: 4 callbacks suppressed [ 171.615774][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 171.655137][T11681] bond1 (unregistering): Released all slaves [ 171.684272][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.762798][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2649'. [ 171.772194][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2649'. [ 172.054210][T11703] loop2: detected capacity change from 0 to 256 [ 172.210226][T11703] FAT-fs (loop2): codepage cp855 not found [ 172.322241][ T29] audit: type=1400 audit(1767614569.728:503): avc: denied { accept } for pid=11683 comm="syz.0.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.474022][T11725] program syz.6.2663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.652139][T11736] loop6: detected capacity change from 0 to 512 [ 172.715292][T11738] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 172.715292][T11738] The task syz.0.2667 (11738) triggered the difference, watch for misbehavior. [ 172.754680][T11736] EXT4-fs (loop6): 1 truncate cleaned up [ 172.766367][T11736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.840068][T11736] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2668: bg 0: block 465: padding at end of block bitmap is not set [ 172.862578][T11736] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 172.875213][T11736] EXT4-fs (loop6): This should not happen!! Data will be lost [ 172.875213][T11736] [ 172.884866][T11736] EXT4-fs (loop6): Total free blocks count 0 [ 172.890996][T11736] EXT4-fs (loop6): Free/Dirty block details [ 172.896935][T11736] EXT4-fs (loop6): free_blocks=0 [ 172.901887][T11736] EXT4-fs (loop6): dirty_blocks=2696 [ 172.907271][T11736] EXT4-fs (loop6): Block reservation details [ 172.913301][T11736] EXT4-fs (loop6): i_reserved_data_blocks=2696 [ 172.930563][ T6734] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 640 with error 28 [ 173.022053][T11762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2680'. [ 173.032204][T11762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2680'. [ 173.168155][T11773] tipc: Enabling of bearer rejected, failed to enable media [ 173.177103][T11773] syzkaller0: entered promiscuous mode [ 173.182585][T11773] syzkaller0: entered allmulticast mode [ 173.242897][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 173.258322][T11778] bond1: entered promiscuous mode [ 173.263755][T11778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.289235][T11778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.297330][T11778] bond2: entered promiscuous mode [ 173.303650][T11778] bond1: (slave bond2): Enslaving as an active interface with an up link [ 173.350045][T11790] loop1: detected capacity change from 0 to 512 [ 173.358495][T11790] EXT4-fs (loop1): 1 truncate cleaned up [ 173.364638][T11790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.435682][T11790] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2691: bg 0: block 465: padding at end of block bitmap is not set [ 173.450538][T11790] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1964 with error 28 [ 173.458306][T11796] program syz.0.2693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.463231][T11790] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.463231][T11790] [ 173.482316][T11790] EXT4-fs (loop1): Total free blocks count 0 [ 173.488468][T11790] EXT4-fs (loop1): Free/Dirty block details [ 173.494406][T11790] EXT4-fs (loop1): free_blocks=0 [ 173.499407][T11790] EXT4-fs (loop1): dirty_blocks=1968 [ 173.504717][T11790] EXT4-fs (loop1): Block reservation details [ 173.510850][T11790] EXT4-fs (loop1): i_reserved_data_blocks=1968 [ 173.548613][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.617526][T11807] loop1: detected capacity change from 0 to 512 [ 173.624952][T11807] EXT4-fs (loop1): first meta block group too large: 3 (group descriptor block count 1) [ 173.868119][T11812] loop1: detected capacity change from 0 to 512 [ 173.879407][T11812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.895563][T11812] EXT4-fs (loop1): 1 truncate cleaned up [ 173.972482][T11812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.014386][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2701'. [ 174.105438][ T29] audit: type=1400 audit(1767614571.888:504): avc: denied { write } for pid=11822 comm="syz.3.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.125032][ T29] audit: type=1400 audit(1767614571.888:505): avc: denied { read } for pid=11822 comm="syz.3.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.158083][T11818] bond2 (unregistering): Released all slaves [ 174.168695][T11826] program syz.3.2704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.210908][T11828] loop3: detected capacity change from 0 to 2048 [ 174.236809][T11828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.258013][T11828] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.288184][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.465396][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2712'. [ 174.484024][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2712'. [ 174.523332][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.585671][T11855] loop0: detected capacity change from 0 to 512 [ 174.598866][T11858] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2715'. [ 174.624118][T11855] EXT4-fs (loop0): 1 truncate cleaned up [ 174.637810][T11855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.656361][T11864] loop6: detected capacity change from 0 to 2048 [ 174.687106][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.697667][T11864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.712035][T11864] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.757465][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.765314][T11873] syzkaller0: entered promiscuous mode [ 174.771956][T11873] syzkaller0: entered allmulticast mode [ 175.291072][T11885] loop2: detected capacity change from 0 to 512 [ 175.324719][T11885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 175.429843][T11885] EXT4-fs (loop2): 1 truncate cleaned up [ 175.436660][T11885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.721122][T11903] syzkaller0: entered promiscuous mode [ 175.726749][T11903] syzkaller0: entered allmulticast mode [ 175.939674][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.962435][T11929] xt_hashlimit: size too large, truncated to 1048576 [ 176.016102][T11935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.060585][T11935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.202429][T11953] syzkaller0: entered promiscuous mode [ 176.208148][T11953] syzkaller0: entered allmulticast mode [ 177.711196][ T29] audit: type=1400 audit(1767614575.508:506): avc: denied { read } for pid=11970 comm="syz.2.2761" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.735785][ T29] audit: type=1400 audit(1767614575.508:507): avc: denied { open } for pid=11970 comm="syz.2.2761" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 178.260580][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.400616][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.633021][T11990] program syz.6.2769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.656348][ T29] audit: type=1400 audit(1767614575.848:508): avc: denied { getopt } for pid=11966 comm="syz.6.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.676075][ T29] audit: type=1400 audit(1767614576.128:509): avc: denied { ioctl } for pid=11970 comm="syz.2.2761" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 178.702416][ T29] audit: type=1400 audit(1767614576.128:510): avc: denied { cmd } for pid=11977 comm="syz.1.2766" path="socket:[33288]" dev="sockfs" ino=33288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 178.834523][ T29] audit: type=1400 audit(1767614576.628:511): avc: denied { ioctl } for pid=11997 comm="syz.6.2773" path="socket:[34267]" dev="sockfs" ino=34267 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.926580][T12009] syzkaller0: entered promiscuous mode [ 178.932115][T12009] syzkaller0: entered allmulticast mode [ 179.639948][T12013] cgroup: fork rejected by pids controller in /syz6 [ 179.712129][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.742799][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.021332][T12055] loop3: detected capacity change from 0 to 2048 [ 180.062248][T12055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.129212][ T29] audit: type=1400 audit(1767614577.928:512): avc: denied { mount } for pid=12078 comm="syz.2.2795" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.988717][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.083831][T12103] bond2 (unregistering): Released all slaves [ 181.292517][T12123] __nla_validate_parse: 2 callbacks suppressed [ 181.292534][T12123] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2803'. [ 181.461983][ T29] audit: type=1400 audit(1767614579.228:513): avc: denied { ioctl } for pid=12113 comm="syz.2.2804" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.287215][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.297292][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.318490][T12166] loop2: detected capacity change from 0 to 512 [ 182.353295][T12166] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2822: bg 0: block 5: invalid block bitmap [ 182.375978][T12166] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 182.384990][T12166] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2822: invalid indirect mapped block 3 (level 2) [ 182.399210][T12166] EXT4-fs (loop2): 2 truncates cleaned up [ 182.410407][T12166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.426801][ T29] audit: type=1400 audit(1767614580.228:514): avc: denied { append } for pid=12165 comm="syz.2.2822" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.537977][T12186] loop1: detected capacity change from 0 to 512 [ 182.562325][T12186] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.578318][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.599605][T12186] EXT4-fs (loop1): 1 truncate cleaned up [ 182.651850][T12186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.719584][T12200] 9p: Bad value for 'rfdno' [ 182.933857][ T29] audit: type=1400 audit(1767614580.728:515): avc: denied { write } for pid=12214 comm="syz.3.2844" lport=51014 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 183.023970][T12225] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2848'. [ 183.033189][T12225] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2848'. [ 183.074441][ T29] audit: type=1400 audit(1767614580.758:516): avc: denied { getopt } for pid=12214 comm="syz.3.2844" lport=51014 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 183.098752][ T29] audit: type=1400 audit(1767614580.808:517): avc: denied { getopt } for pid=12220 comm="syz.2.2846" lport=43527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.192384][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.427948][ T29] audit: type=1400 audit(1767614581.228:518): avc: denied { mount } for pid=12264 comm="syz.2.2866" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 183.472378][ T29] audit: type=1400 audit(1767614581.228:519): avc: denied { remount } for pid=12264 comm="syz.2.2866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 183.492714][ T29] audit: type=1400 audit(1767614581.248:520): avc: denied { unmount } for pid=7818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 183.576318][T12267] syzkaller0: entered promiscuous mode [ 183.581892][T12267] syzkaller0: entered allmulticast mode [ 183.589296][ T29] audit: type=1400 audit(1767614581.318:521): avc: denied { ioctl } for pid=12266 comm="syz.2.2867" path="socket:[34568]" dev="sockfs" ino=34568 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 184.073941][T12307] program syz.0.2885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.103548][T12312] loop6: detected capacity change from 0 to 512 [ 184.125918][T12312] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2888: inode has both inline data and extents flags [ 184.141736][T12312] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2888: couldn't read orphan inode 15 (err -117) [ 184.154821][T12312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.431089][T12340] Invalid ELF header magic: != ELF [ 184.440343][T12338] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 184.580433][T12349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2903'. [ 184.623267][T12349] bond1 (unregistering): Released all slaves [ 184.817781][T12363] loop3: detected capacity change from 0 to 1024 [ 184.842250][T12363] EXT4-fs: Ignoring removed bh option [ 184.913455][T12363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.030123][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.637065][T12382] chnl_net:caif_netlink_parms(): no params data found [ 185.699364][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.969070][T12382] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.976207][T12382] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.990422][T12382] bridge_slave_0: entered allmulticast mode [ 186.000767][T12382] bridge_slave_0: entered promiscuous mode [ 186.008017][T12382] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.015229][T12382] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.055566][T12382] bridge_slave_1: entered allmulticast mode [ 186.069256][T12382] bridge_slave_1: entered promiscuous mode [ 186.117870][T12382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.164856][T12382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.218508][T12382] team0: Port device team_slave_0 added [ 186.236359][T12382] team0: Port device team_slave_1 added [ 186.282000][T12429] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2929'. [ 186.310449][T12382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.317598][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.343634][T12382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.399289][T12435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2932'. [ 186.416122][T12382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.423120][T12382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.449065][T12382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.463443][T12435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2932'. [ 186.502197][T12438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2933'. [ 186.553249][T12438] bond3 (unregistering): Released all slaves [ 186.634198][T12443] loop2: detected capacity change from 0 to 512 [ 186.650692][T12382] hsr_slave_0: entered promiscuous mode [ 186.677428][T12382] hsr_slave_1: entered promiscuous mode [ 186.688983][T12443] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2935: inode has both inline data and extents flags [ 186.732934][T12382] debugfs: 'hsr0' already exists in 'hsr' [ 186.738756][T12382] Cannot create hsr debugfs directory [ 186.769951][T12448] tipc: Started in network mode [ 186.774917][T12448] tipc: Node identity 8ac3f3842f98, cluster identity 4711 [ 186.782456][T12448] tipc: Enabled bearer , priority 0 [ 186.801270][T12443] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2935: couldn't read orphan inode 15 (err -117) [ 186.839197][T12454] loop6: detected capacity change from 0 to 128 [ 186.849698][T12443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.892236][T12448] tipc: Resetting bearer [ 186.970290][T12447] tipc: Disabling bearer [ 187.070931][T12382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.132631][T12382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.191368][T12382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.271165][T12382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.353659][T12382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.404546][T12382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.418394][T12382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.437444][T12382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.520469][T12493] program syz.6.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.590441][T12382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.607675][T12382] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.618526][ T1672] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.625634][ T1672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.649819][T12382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.660308][T12382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.675439][ T1672] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.682685][ T1672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.797793][T12382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.897179][T12382] veth0_vlan: entered promiscuous mode [ 187.914994][T12382] veth1_vlan: entered promiscuous mode [ 187.944513][T12382] veth0_macvtap: entered promiscuous mode [ 187.959955][T12382] veth1_macvtap: entered promiscuous mode [ 187.972743][T12382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.982791][T12382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.991793][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.029129][ T1672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.095335][ T1672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.117688][ T1672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.148636][ T1672] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.172258][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 189.172282][ T29] audit: type=1400 audit(1767614586.968:524): avc: denied { create } for pid=12572 comm="syz.3.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 189.304512][T12588] loop6: detected capacity change from 0 to 128 [ 189.451198][T12599] loop6: detected capacity change from 0 to 128 [ 189.649361][T12620] loop6: detected capacity change from 0 to 1024 [ 189.658716][T12620] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.669485][T12620] EXT4-fs: inline encryption not supported [ 189.675877][T12620] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.687758][T12620] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3004: bad orphan inode 11 [ 189.698687][T12620] EXT4-fs (loop6): Remounting filesystem read-only [ 189.705268][T12620] ext4_test_bit(bit=10, block=4) = 1 [ 189.710580][T12620] is_bad_inode(inode)=0 [ 189.714751][T12620] NEXT_ORPHAN(inode)=3254779904 [ 189.719713][T12620] max_ino=32 [ 189.722921][T12620] i_nlink=0 [ 189.730593][T12620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.763575][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.822477][T12632] loop3: detected capacity change from 0 to 128 [ 189.991362][ T29] audit: type=1400 audit(1767614587.788:525): avc: denied { execute } for pid=12652 comm="syz.6.3018" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 190.041096][T12659] loop6: detected capacity change from 0 to 128 [ 190.090519][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.099174][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.110155][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 190.140700][T12670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.150468][T12670] block device autoloading is deprecated and will be removed. [ 190.250447][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 190.266481][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 190.352141][T12693] loop0: detected capacity change from 0 to 128 [ 190.393105][ T29] audit: type=1400 audit(1767614588.188:526): avc: denied { remount } for pid=12696 comm="syz.2.3039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.432370][T12699] loop2: detected capacity change from 0 to 1024 [ 190.441654][T12699] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 190.467413][T12699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.494395][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.826368][T12719] loop2: detected capacity change from 0 to 512 [ 190.833778][T12719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.845967][T12719] EXT4-fs (loop2): 1 truncate cleaned up [ 190.852486][T12719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.343084][T12736] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.380748][T12736] EXT4-fs (loop1): 1 truncate cleaned up [ 191.418746][T12736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.630779][T12750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3059'. [ 191.659308][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.983317][T12760] program syz.2.3063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.095479][ T29] audit: type=1400 audit(1767614589.548:527): avc: denied { read } for pid=12746 comm="syz.6.3057" path="socket:[36638]" dev="sockfs" ino=36638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.302775][T12776] tipc: Started in network mode [ 192.307837][T12776] tipc: Node identity 227311571f54, cluster identity 4711 [ 192.315089][T12776] tipc: Enabled bearer , priority 0 [ 192.440098][T12776] syzkaller0: entered promiscuous mode [ 192.445770][T12776] syzkaller0: entered allmulticast mode [ 192.467572][T12776] tipc: Resetting bearer [ 192.475712][T12775] tipc: Resetting bearer [ 192.496927][T12775] tipc: Disabling bearer [ 192.532115][T12790] set_capacity_and_notify: 1 callbacks suppressed [ 192.532158][T12790] loop6: detected capacity change from 0 to 512 [ 192.548036][T12783] loop0: detected capacity change from 0 to 512 [ 192.564063][T12790] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3076: inode has both inline data and extents flags [ 192.577376][T12783] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.599395][T12790] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3076: couldn't read orphan inode 15 (err -117) [ 192.609590][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.630080][T12783] EXT4-fs (loop0): 1 truncate cleaned up [ 192.638779][T12783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.679519][T12790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.719210][T12799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.737229][T12799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.788945][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.929120][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'. [ 192.995932][T12814] bond1 (unregistering): Released all slaves [ 193.079351][T12823] loop6: detected capacity change from 0 to 1024 [ 193.113865][T12823] EXT4-fs: inline encryption not supported [ 193.150621][T12823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.212283][T12829] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3093'. [ 193.314189][ T29] audit: type=1400 audit(1767614591.108:528): avc: denied { write } for pid=12839 comm="syz.2.3097" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 193.356163][T12823] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.3090: Allocating blocks 497-513 which overlap fs metadata [ 193.385464][T12823] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.3090: Allocating blocks 497-513 which overlap fs metadata [ 193.400323][T12848] loop1: detected capacity change from 0 to 128 [ 193.461952][T12822] EXT4-fs (loop6): pa ffff888107a82af0: logic 48, phys. 177, len 21 [ 193.470062][T12822] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 193.571227][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.666410][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.687857][T12858] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3104'. [ 194.065643][T12883] loop3: detected capacity change from 0 to 128 [ 194.159896][T12888] tipc: Enabled bearer , priority 0 [ 194.168366][T12888] syzkaller0: entered promiscuous mode [ 194.173882][T12888] syzkaller0: entered allmulticast mode [ 194.184748][T12888] tipc: Resetting bearer [ 194.191442][T12887] tipc: Resetting bearer [ 194.200530][T12887] tipc: Disabling bearer [ 194.339093][T12895] loop2: detected capacity change from 0 to 1024 [ 194.346732][T12895] EXT4-fs: Ignoring removed bh option [ 194.395532][T12895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.422547][T12899] loop3: detected capacity change from 0 to 512 [ 194.430328][T12899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.448223][T12899] EXT4-fs (loop3): 1 truncate cleaned up [ 194.454325][T12899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.561342][T12903] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3120'. [ 194.578824][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.835003][T12926] tipc: Enabled bearer , priority 0 [ 194.843409][T12926] syzkaller0: entered promiscuous mode [ 194.849002][T12926] syzkaller0: entered allmulticast mode [ 194.860254][T12926] tipc: Resetting bearer [ 194.867138][T12925] tipc: Resetting bearer [ 194.876473][T12925] tipc: Disabling bearer [ 195.241713][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.411331][ T5002] IPVS: starting estimator thread 0... [ 195.534418][ T29] audit: type=1400 audit(1767614593.268:529): avc: denied { write } for pid=12951 comm="syz.3.3142" name="file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.556948][ T29] audit: type=1400 audit(1767614593.268:530): avc: denied { ioctl } for pid=12951 comm="syz.3.3142" path="/124/file0" dev="tmpfs" ino=652 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.605208][T12959] IPVS: using max 1824 ests per chain, 91200 per kthread [ 196.144442][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 197.076758][T13002] loop2: detected capacity change from 0 to 128 [ 197.141526][T13002] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 197.154973][T13002] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.197928][ T3508] IPVS: starting estimator thread 0... [ 197.267469][ T7818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.285332][T13008] IPVS: using max 2304 ests per chain, 115200 per kthread [ 197.433481][T13014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.522885][T13022] syzkaller0: entered promiscuous mode [ 197.528584][T13022] syzkaller0: entered allmulticast mode [ 197.546601][T13014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.602709][T13014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.737607][T13014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.797757][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 197.807569][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.821231][ T29] audit: type=1400 audit(1767614595.618:531): avc: denied { mount } for pid=13036 comm="syz.6.3174" name="/" dev="ramfs" ino=37469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 197.844147][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.861467][T13041] bond3: entered promiscuous mode [ 197.867531][T13041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.875704][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.912463][T13037] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.934614][T13046] SELinux: failed to load policy [ 197.934602][ T29] audit: type=1400 audit(1767614595.728:532): avc: denied { load_policy } for pid=13036 comm="syz.6.3174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 197.961014][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.100711][T13037] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.124133][T13058] syzkaller0: entered promiscuous mode [ 198.129811][T13058] syzkaller0: entered allmulticast mode [ 198.186673][T13037] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.319181][T13037] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.516939][ T6734] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.526113][ T6734] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.591486][ T6734] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.637043][ T37] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.914482][T13094] loop6: detected capacity change from 0 to 512 [ 198.922922][T13094] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 198.956195][T13094] EXT4-fs (loop6): 1 truncate cleaned up [ 198.962371][T13094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.981467][ T29] audit: type=1400 audit(1767614596.778:533): avc: denied { setattr } for pid=13084 comm="syz.6.3195" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.563758][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.588430][T13112] loop6: detected capacity change from 0 to 512 [ 199.600945][T13112] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3205: inode has both inline data and extents flags [ 199.614565][T13112] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3205: couldn't read orphan inode 15 (err -117) [ 199.627836][T13112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.732473][T13110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.752363][T13114] SELinux: failed to load policy [ 199.814241][T13110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.913031][T13116] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 199.942600][T13110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.058109][T13110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.139369][ T29] audit: type=1400 audit(1767614597.938:534): avc: denied { bind } for pid=13122 comm="syz.2.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.371306][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.539613][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.611536][ T295] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.632508][ T295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.732613][ T29] audit: type=1400 audit(1767614598.528:535): avc: denied { read } for pid=13130 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.813335][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.136540][T13152] tipc: Enabled bearer , priority 0 [ 201.143644][T13152] syzkaller0: entered promiscuous mode [ 201.149314][T13152] syzkaller0: entered allmulticast mode [ 201.161675][T13152] tipc: Resetting bearer [ 201.168222][T13151] tipc: Resetting bearer [ 201.175638][T13151] tipc: Disabling bearer [ 201.596128][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 201.610573][T13156] bond1: entered promiscuous mode [ 201.615955][T13156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.659083][T13161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.704263][T13161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.723374][ T1038] IPVS: starting estimator thread 0... [ 201.792979][T13172] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3224'. [ 201.806974][T13161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.817540][T13168] IPVS: using max 2256 ests per chain, 112800 per kthread [ 201.906243][T13161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.998819][ T295] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.013590][ T295] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.057960][ T295] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.066947][ T295] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.156639][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3230'. [ 202.183602][T13196] loop3: detected capacity change from 0 to 128 [ 202.206440][T13192] bond1: entered promiscuous mode [ 202.213862][T13192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.251186][T13202] syzkaller0: entered promiscuous mode [ 202.257033][T13202] syzkaller0: entered allmulticast mode [ 202.277758][T13202] tipc: Enabled bearer , priority 0 [ 202.295585][T13200] tipc: Resetting bearer [ 202.326374][T13200] tipc: Disabling bearer [ 202.411142][T13210] loop1: detected capacity change from 0 to 128 [ 202.508065][T13210] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 202.523700][T13210] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.543496][ T29] audit: type=1400 audit(1767614600.338:536): avc: denied { lock } for pid=13204 comm="syz.1.3237" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=38997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 202.599198][T12382] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.664921][T13218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.706486][T13220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3240'. [ 202.724462][T13218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.778973][T13218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.829607][T13218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.893108][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3246'. [ 202.908123][T13232] bond2: entered promiscuous mode [ 202.913551][T13232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.924577][ T6734] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.958274][T13235] loop1: detected capacity change from 0 to 128 [ 202.965708][ T6734] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.974413][ T6734] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.006754][ T6734] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.025685][T13239] syzkaller0: entered promiscuous mode [ 203.031340][T13239] syzkaller0: entered allmulticast mode [ 203.065089][T13244] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.081677][T13239] tipc: Enabled bearer , priority 0 [ 203.089166][T13238] tipc: Resetting bearer [ 203.108057][T13238] tipc: Disabling bearer [ 203.137165][T13244] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.182563][T13251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3253'. [ 203.203511][T13252] loop3: detected capacity change from 0 to 128 [ 203.211914][T13244] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.227269][T13254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3254'. [ 203.242525][T13254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3254'. [ 203.267754][T13244] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.330687][T13252] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 203.343662][T13252] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.388116][T11148] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.500912][T13262] loop3: detected capacity change from 0 to 512 [ 203.509598][T13262] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3257: inode has both inline data and extents flags [ 203.523426][T13262] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3257: couldn't read orphan inode 15 (err -117) [ 203.536037][T13262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.258074][ T29] audit: type=1400 audit(1767614602.058:537): avc: denied { create } for pid=13278 comm="syz.6.3263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 204.280697][ T29] audit: type=1400 audit(1767614602.058:538): avc: denied { bind } for pid=13278 comm="syz.6.3263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 204.301459][ T29] audit: type=1400 audit(1767614602.058:539): avc: denied { listen } for pid=13278 comm="syz.6.3263" path="/344/file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 204.323933][ T29] audit: type=1400 audit(1767614602.058:540): avc: denied { connectto } for pid=13278 comm="syz.6.3263" path="/344/file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 204.347581][T13281] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3264'. [ 204.381102][T13283] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.399116][T13283] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 204.399116][T13283] program syz.6.3265 not setting count and/or reply_len properly [ 204.419071][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.564826][T13299] netlink: 'syz.6.3271': attribute type 1 has an invalid length. [ 204.572675][T13299] netlink: 668 bytes leftover after parsing attributes in process `syz.6.3271'. [ 204.634572][T13304] syzkaller0: entered promiscuous mode [ 204.640241][T13304] syzkaller0: entered allmulticast mode [ 204.648806][T13304] tipc: Enabled bearer , priority 0 [ 204.656104][T13303] tipc: Resetting bearer [ 204.664585][T13303] tipc: Disabling bearer [ 204.990533][T13313] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3277'. [ 205.299484][T13329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3283'. [ 205.309421][T13329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3283'. [ 205.390696][T13331] loop3: detected capacity change from 0 to 1024 [ 205.406374][T13331] EXT4-fs: Ignoring removed bh option [ 205.430913][T13333] loop2: detected capacity change from 0 to 128 [ 205.487122][T13333] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 205.500698][T13331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.518946][T13333] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.546192][ T29] audit: type=1400 audit(1767614603.348:541): avc: denied { read write } for pid=13330 comm="syz.3.3284" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.568932][ T29] audit: type=1400 audit(1767614603.348:542): avc: denied { open } for pid=13330 comm="syz.3.3284" path="/160/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.644924][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.700586][ T7818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.859206][T13341] loop3: detected capacity change from 0 to 512 [ 205.870523][T13341] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.882127][T13341] EXT4-fs (loop3): 1 truncate cleaned up [ 205.888442][T13341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.953256][T13354] loop0: detected capacity change from 0 to 128 [ 206.201754][T13368] loop0: detected capacity change from 0 to 512 [ 206.208847][T13368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.220178][T13368] EXT4-fs (loop0): 1 truncate cleaned up [ 206.226355][T13368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.401354][ T1672] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.413522][ T295] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.425458][ T1672] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.437474][ T1672] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.463824][T13372] loop1: detected capacity change from 0 to 128 [ 206.549618][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.866733][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 206.939154][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.996373][T13394] bond1: entered promiscuous mode [ 207.002178][T13394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.098665][T13400] loop6: detected capacity change from 0 to 128 [ 207.383075][T13433] netlink: 'syz.1.3324': attribute type 1 has an invalid length. [ 207.725429][T13475] loop3: detected capacity change from 0 to 128 [ 208.067193][T13496] loop1: detected capacity change from 0 to 1024 [ 208.074396][T13496] EXT4-fs: Ignoring removed bh option [ 208.089478][T13496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.114422][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.177622][T13506] loop2: detected capacity change from 0 to 128 [ 208.268885][T13509] __nla_validate_parse: 2 callbacks suppressed [ 208.268901][T13509] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3357'. [ 208.430999][ T29] audit: type=1326 audit(1767614606.228:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.500485][ T6734] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.508305][T13530] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.508343][ T29] audit: type=1326 audit(1767614606.258:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.508411][ T29] audit: type=1326 audit(1767614606.258:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.541557][T13511] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 208.541708][ T29] audit: type=1326 audit(1767614606.258:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.568704][T13511] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.577736][ T29] audit: type=1326 audit(1767614606.258:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.577773][ T29] audit: type=1326 audit(1767614606.258:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.577804][ T29] audit: type=1326 audit(1767614606.258:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.681825][ T29] audit: type=1326 audit(1767614606.258:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.705329][ T29] audit: type=1326 audit(1767614606.258:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.728863][ T29] audit: type=1326 audit(1767614606.258:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.2.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcff61ef749 code=0x7ffc0000 [ 208.787261][T13530] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.847393][T13530] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.865893][T12382] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.897380][T13530] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.918883][T13546] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 208.953275][T13546] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.974889][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.986398][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.021345][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.060563][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.132280][T13546] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.624127][T13573] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 209.748882][T13573] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.853351][T13582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.976833][T13582] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 209.976833][T13582] program syz.3.3382 not setting count and/or reply_len properly [ 210.076144][T13593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3384'. [ 210.094938][T13573] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.492154][T13616] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.497149][T13619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3396'. [ 210.515355][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 210.515836][ T3602] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.531260][T13616] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.553748][T13614] SELinux: failed to load policy [ 210.572548][T13616] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.617430][T13616] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.693084][ T1672] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.713389][ T1672] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.730471][ T1672] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.745084][ T1672] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.839018][T13643] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3406'. [ 210.866498][T13645] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3408'. [ 211.281757][T13681] set_capacity_and_notify: 4 callbacks suppressed [ 211.281774][T13681] loop0: detected capacity change from 0 to 128 [ 211.351114][T13681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 211.364130][T13681] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.419678][ T7612] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.434745][T13687] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.528208][T13687] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.587414][T13687] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.607219][T13694] tipc: Enabled bearer , priority 0 [ 211.614211][T13694] syzkaller0: entered promiscuous mode [ 211.619785][T13694] syzkaller0: entered allmulticast mode [ 211.632746][T13690] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.652448][T13694] tipc: Resetting bearer [ 211.660658][T13687] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.669321][T13695] SELinux: failed to load policy [ 211.676553][T13693] tipc: Resetting bearer [ 211.683754][T13693] tipc: Disabling bearer [ 211.712917][T13690] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.765140][ T3623] IPVS: starting estimator thread 0... [ 211.829823][T13690] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.855137][T13698] IPVS: using max 2256 ests per chain, 112800 per kthread [ 211.940761][T13690] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.000823][T13713] netlink: 'syz.6.3430': attribute type 1 has an invalid length. [ 212.008736][T13713] netlink: 668 bytes leftover after parsing attributes in process `syz.6.3430'. [ 212.131912][T13722] loop1: detected capacity change from 0 to 128 [ 212.366247][ T1741] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863861][ T6734] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.872345][ T6734] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.876213][T13722] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 212.881213][ T6734] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.960077][T13722] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.185123][T12382] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.199213][T13752] loop6: detected capacity change from 0 to 1024 [ 213.208754][T13752] EXT4-fs: Ignoring removed bh option [ 213.227010][T13752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.262435][T13747] loop0: detected capacity change from 0 to 512 [ 213.347119][T13747] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.375512][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.387657][T13747] EXT4-fs (loop0): 1 truncate cleaned up [ 213.405094][T13747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.536368][T13774] netlink: 'syz.6.3454': attribute type 1 has an invalid length. [ 213.544181][T13774] netlink: 668 bytes leftover after parsing attributes in process `syz.6.3454'. [ 213.873682][T13785] loop2: detected capacity change from 0 to 128 [ 214.339202][T13793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3461'. [ 214.356987][T13785] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 214.372525][T13785] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.385513][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.520277][ T7818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.923121][T13818] loop0: detected capacity change from 0 to 128 [ 215.005413][T13826] loop6: detected capacity change from 0 to 512 [ 215.020014][T13826] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 215.040721][T13826] EXT4-fs (loop6): 1 truncate cleaned up [ 215.047456][T13826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.256439][T13832] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.332026][T13832] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 215.332026][T13832] program syz.2.3475 not setting count and/or reply_len properly [ 215.570203][T13818] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 215.598297][T13849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3481'. [ 215.617716][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.627093][T13818] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.716355][ T7612] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.732491][T13858] loop2: detected capacity change from 0 to 128 [ 215.873748][T13858] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 215.887186][T13858] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.958479][T13867] tipc: Enabled bearer , priority 0 [ 215.965488][T13867] syzkaller0: entered promiscuous mode [ 215.971015][T13867] syzkaller0: entered allmulticast mode [ 215.985149][T13865] tipc: Resetting bearer [ 215.993297][T13865] tipc: Disabling bearer [ 216.033955][ T7818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.554778][T13873] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 216.554778][T13873] program syz.1.3489 not setting count and/or reply_len properly [ 216.633256][T13882] program syz.1.3492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.785568][T13891] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3496'. [ 216.875740][T13892] loop1: detected capacity change from 0 to 512 [ 216.892133][T13892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.986127][T13892] EXT4-fs (loop1): 1 truncate cleaned up [ 216.992575][T13892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.212757][T13904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3499'. [ 217.381439][T13912] loop2: detected capacity change from 0 to 128 [ 217.440786][T13912] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 217.453560][T13912] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.514198][ T7818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.518901][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.546557][ T5692] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.552912][T13915] loop1: detected capacity change from 0 to 1024 [ 217.562027][T13915] EXT4-fs: Ignoring removed bh option [ 217.576045][ T5692] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.593045][ T5692] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.610441][ T5692] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.619108][T13915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.704727][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.742250][T13930] loop1: detected capacity change from 0 to 512 [ 217.759791][T13930] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3505: inode has both inline data and extents flags [ 217.784132][T13930] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3505: couldn't read orphan inode 15 (err -117) [ 217.797196][T13930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.842054][T13933] loop3: detected capacity change from 0 to 128 [ 218.026243][T13933] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 218.039268][T13933] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.188965][T11148] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.927903][T13951] loop3: detected capacity change from 0 to 512 [ 219.029892][T13951] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.050648][ T8180] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.072185][T13951] EXT4-fs (loop3): 1 truncate cleaned up [ 219.079002][T13951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.154631][T13956] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3513'. [ 219.201948][T13958] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.257406][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.279877][T13962] loop3: detected capacity change from 0 to 128 [ 219.294573][ T8180] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.378288][ T8180] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.488863][ T8180] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.550657][T13968] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 219.559440][T13968] FAT-fs (loop3): Filesystem has been set read-only [ 219.570852][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.716683][ T8180] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.789177][ T8180] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.868827][ T8180] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.960413][ T8180] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.089410][ T8180] bridge_slave_1: left allmulticast mode [ 220.095193][ T8180] bridge_slave_1: left promiscuous mode [ 220.100960][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.109570][ T8180] bridge_slave_0: left allmulticast mode [ 220.115429][ T8180] bridge_slave_0: left promiscuous mode [ 220.121093][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.151166][T13997] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 220.151166][T13997] program syz.2.3521 not setting count and/or reply_len properly [ 220.169488][ T8180] bridge_slave_1: left allmulticast mode [ 220.175259][ T8180] bridge_slave_1: left promiscuous mode [ 220.181153][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.189673][ T8180] bridge_slave_0: left allmulticast mode [ 220.195513][ T8180] bridge_slave_0: left promiscuous mode [ 220.201228][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.222222][ T8180] bridge_slave_1: left allmulticast mode [ 220.227936][ T8180] bridge_slave_1: left promiscuous mode [ 220.233710][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.300649][ T8180] bridge_slave_0: left allmulticast mode [ 220.306424][ T8180] bridge_slave_0: left promiscuous mode [ 220.312095][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.382883][T14015] loop0: detected capacity change from 0 to 128 [ 220.555176][T14028] loop2: detected capacity change from 0 to 512 [ 220.562567][T14028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.669443][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.682257][T14034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.720772][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 220.720788][ T29] audit: type=1326 audit(1767614618.498:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad2f749 code=0x7ffc0000 [ 220.750432][ T29] audit: type=1326 audit(1767614618.498:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad2f749 code=0x7ffc0000 [ 220.773925][ T29] audit: type=1326 audit(1767614618.498:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7ad2f749 code=0x7ffc0000 [ 220.797428][ T29] audit: type=1326 audit(1767614618.498:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad2f749 code=0x7ffc0000 [ 220.820874][ T29] audit: type=1326 audit(1767614618.498:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3d7ad2f749 code=0x7ffc0000 [ 220.844326][ T29] audit: type=1326 audit(1767614618.498:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad2f749 code=0x7ffc0000 [ 220.867761][ T29] audit: type=1326 audit(1767614618.498:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.1.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad2f749 code=0x7ffc0000 [ 220.964019][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.979356][T14038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3532'. [ 221.030970][ T8180] bond0 (unregistering): Released all slaves [ 221.081339][ T8180] bond1 (unregistering): (slave bond2): Releasing backup interface [ 221.106007][T14028] EXT4-fs (loop2): 1 truncate cleaned up [ 221.112176][T14028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.149961][ T8180] bond2 (unregistering): left promiscuous mode [ 221.156416][ T8180] bond1 (unregistering): Released all slaves [ 221.165520][ T8180] bond2 (unregistering): Released all slaves [ 221.178010][ T8180] bond3 (unregistering): Released all slaves [ 221.204983][ T8180] bond4 (unregistering): Released all slaves [ 221.262807][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.274078][T14015] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 221.298806][T14015] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.319653][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.331207][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.342515][ T8180] bond0 (unregistering): Released all slaves [ 221.397456][ T7612] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.418646][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.428947][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.439601][ T8180] bond0 (unregistering): Released all slaves [ 221.452790][T14008] tipc: Enabled bearer , priority 10 [ 221.461369][T14024] tipc: Enabled bearer , priority 0 [ 221.492988][ T8180] tipc: Disabling bearer [ 221.498368][ T8180] tipc: Disabling bearer [ 221.508466][ T8180] tipc: Left network mode [ 221.513784][ T8180] tipc: Left network mode [ 221.540741][ T8180] tipc: Left network mode [ 221.553318][ T8180] hsr_slave_0: left promiscuous mode [ 221.559275][ T8180] hsr_slave_1: left promiscuous mode [ 221.565038][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.572463][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.588367][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.595823][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.605904][ T8180] hsr_slave_0: left promiscuous mode [ 221.611723][ T8180] hsr_slave_1: left promiscuous mode [ 221.625130][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.632561][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.648920][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.656389][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.675377][ T8180] hsr_slave_0: left promiscuous mode [ 221.690886][ T8180] hsr_slave_1: left promiscuous mode [ 221.815281][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.822701][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.844373][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.851928][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.863376][T14082] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 221.863376][T14082] program syz.6.3547 not setting count and/or reply_len properly [ 221.906776][ T8180] veth1_macvtap: left promiscuous mode [ 221.913123][ T8180] veth0_macvtap: left promiscuous mode [ 221.919774][ T8180] veth1_vlan: left promiscuous mode [ 221.925175][ T8180] veth0_vlan: left promiscuous mode [ 221.999746][T14096] loop0: detected capacity change from 0 to 512 [ 222.080180][T14096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 222.117312][T14096] EXT4-fs (loop0): 1 truncate cleaned up [ 222.123679][T14096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.148419][ T8180] veth1_macvtap: left promiscuous mode [ 222.154603][ T8180] veth0_macvtap: left promiscuous mode [ 222.161263][ T8180] veth1_vlan: left promiscuous mode [ 222.166889][ T8180] veth0_vlan: left promiscuous mode [ 222.173186][ T8180] veth1_macvtap: left promiscuous mode [ 222.179599][ T8180] veth0_macvtap: left promiscuous mode [ 222.186546][ T8180] veth1_vlan: left promiscuous mode [ 222.192070][ T8180] veth0_vlan: left promiscuous mode [ 222.348884][T14108] loop6: detected capacity change from 0 to 128 [ 222.404516][T14108] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.428705][T14108] ext4 filesystem being mounted at /428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.504331][ T7899] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.584926][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.649074][T14123] loop2: detected capacity change from 0 to 1024 [ 222.658421][T14127] loop6: detected capacity change from 0 to 1024 [ 222.666606][T14123] EXT4-fs: Ignoring removed bh option [ 222.676198][T14127] EXT4-fs: Ignoring removed orlov option [ 222.704308][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3561'. [ 222.713369][T14130] netlink: 'syz.1.3561': attribute type 11 has an invalid length. [ 222.802429][T14138] loop0: detected capacity change from 0 to 128 [ 222.810233][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 222.828058][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 222.897567][T14137] loop6: detected capacity change from 0 to 8192 [ 222.962814][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 222.977565][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 223.071333][T14138] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.090647][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 223.100674][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 223.165929][ T3392] tipc: Node number set to 1025970519 [ 223.195228][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3561'. [ 223.204239][T14130] netlink: 'syz.1.3561': attribute type 11 has an invalid length. [ 224.007625][T14181] loop5: detected capacity change from 0 to 7 [ 224.285390][T14188] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3580'. [ 224.358609][T14194] loop0: detected capacity change from 0 to 128 [ 224.505959][T14194] ext4 filesystem being mounted at /408/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.560270][T14201] loop3: detected capacity change from 0 to 128 [ 224.594965][T14208] program syz.2.3584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.833157][T14216] loop2: detected capacity change from 0 to 512 [ 224.883980][T14216] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3589: inode has both inline data and extents flags [ 224.904420][ T8180] bridge_slave_1: left allmulticast mode [ 224.910223][ T8180] bridge_slave_1: left promiscuous mode [ 224.915943][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.970419][ T8180] bridge_slave_0: left allmulticast mode [ 224.976196][ T8180] bridge_slave_0: left promiscuous mode [ 224.981965][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.995932][T14216] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3589: couldn't read orphan inode 15 (err -117) [ 225.293546][T14201] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.308510][ T8180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.336649][ T8180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.356357][ T8180] bond0 (unregistering): Released all slaves [ 225.376672][ T8180] bond1 (unregistering): Released all slaves [ 225.396845][ T8180] bond2 (unregistering): Released all slaves [ 225.414900][ T8180] bond3 (unregistering): Released all slaves [ 225.554256][ T8180] tipc: Disabling bearer [ 225.585379][ T8180] tipc: Left network mode [ 225.626871][ T8180] hsr_slave_0: left promiscuous mode [ 225.663289][ T8180] hsr_slave_1: left promiscuous mode [ 225.697482][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.704931][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.868097][T14259] SELinux: failed to load policy [ 225.878377][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.885885][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.896070][ T8180] veth1_macvtap: left promiscuous mode [ 225.901577][ T8180] veth0_macvtap: left promiscuous mode [ 225.907178][ T8180] veth1_vlan: left promiscuous mode [ 225.912414][ T8180] veth0_vlan: left promiscuous mode [ 226.010191][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 226.043100][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 226.051725][T14270] program syz.1.3601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.074636][T14271] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3602'. [ 226.400246][T14255] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.414311][T14281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.463813][T14255] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.490505][T14281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.517950][T14255] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.548710][T14281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.579119][T14255] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.610383][T14281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.663699][ T8180] IPVS: stop unused estimator thread 0... [ 226.688234][ T295] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.708330][ T295] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.742541][ T295] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.768743][ T295] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.799562][ T295] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.811582][T14309] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3609: inode has both inline data and extents flags [ 226.837257][ T295] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.849995][T14309] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3609: couldn't read orphan inode 15 (err -117) [ 226.868220][ T295] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.906924][ T295] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.182112][T14314] Set syz1 is full, maxelem 65536 reached [ 227.240463][T14334] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 227.290609][T14341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3617'. [ 227.850654][T14358] set_capacity_and_notify: 1 callbacks suppressed [ 227.850748][T14358] loop1: detected capacity change from 0 to 512 [ 227.871071][T14358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 227.898810][T14358] EXT4-fs (loop1): 1 truncate cleaned up [ 227.905324][T14358] EXT4-fs mount: 13 callbacks suppressed [ 227.905339][T14358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.327192][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.558621][T14381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3623'. [ 228.693514][T14398] loop2: detected capacity change from 0 to 128 [ 229.215659][T14422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3638'. [ 229.335888][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.496018][T14398] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.540627][T14398] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.014552][ T7818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.148746][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3653'. [ 230.157810][T14469] netlink: 'syz.2.3653': attribute type 11 has an invalid length. [ 230.166084][T14468] loop0: detected capacity change from 0 to 512 [ 230.173721][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3653'. [ 230.182840][T14469] netlink: 'syz.2.3653': attribute type 11 has an invalid length. [ 230.191273][T14468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.204667][T14471] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.224323][T14468] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3652: bad orphan inode 131083 [ 230.257654][T14468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.299008][T14471] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.318145][T14476] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.336090][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.388110][T14476] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.412686][T14471] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.457342][T14476] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.484372][T14471] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.510492][T14497] loop2: detected capacity change from 0 to 128 [ 230.525751][T14476] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.564361][ T288] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.576488][ T886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.589251][ T288] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.602292][ T288] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.679672][T14497] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 230.693425][T14497] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.779235][ T7818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.342992][ T29] audit: type=1326 audit(1767614629.138:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.368479][ T29] audit: type=1326 audit(1767614629.168:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.391968][ T29] audit: type=1326 audit(1767614629.168:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.415410][ T29] audit: type=1326 audit(1767614629.168:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.438877][ T29] audit: type=1326 audit(1767614629.168:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.462438][ T29] audit: type=1326 audit(1767614629.168:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.485980][ T29] audit: type=1326 audit(1767614629.168:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.509400][ T29] audit: type=1326 audit(1767614629.168:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.532832][ T29] audit: type=1326 audit(1767614629.168:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14534 comm="syz.6.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9bbef749 code=0x7ffc0000 [ 231.610567][ T3482] IPVS: starting estimator thread 0... [ 231.705259][T14546] IPVS: using max 2304 ests per chain, 115200 per kthread [ 231.822661][T14560] program syz.2.3685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.965210][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3690'. [ 231.974294][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3690'. [ 231.983648][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3690'. [ 231.992553][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3690'. [ 232.033305][T14575] loop6: detected capacity change from 0 to 512 [ 232.042649][T14575] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 232.054049][T14575] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3692: bad orphan inode 131083 [ 232.065504][T14575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.094216][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.139078][T14583] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3693'. [ 232.182394][T14588] loop1: detected capacity change from 0 to 1024 [ 232.190489][T14588] EXT4-fs: inline encryption not supported [ 232.196469][T14588] EXT4-fs: Ignoring removed i_version option [ 232.204747][T14588] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 232.222661][T14588] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.3698: lblock 2 mapped to illegal pblock 2 (length 1) [ 232.237045][T14588] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 232.246443][T14588] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.3698: lblock 0 mapped to illegal pblock 48 (length 1) [ 232.261672][T14588] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3698: Failed to acquire dquot type 0 [ 232.273637][T14588] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 232.283280][T14588] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.3698: mark_inode_dirty error [ 232.295002][T14588] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 232.305327][T14588] EXT4-fs (loop1): 1 orphan inode deleted [ 232.311515][T14588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.325125][ T12] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 232.340346][T14593] loop6: detected capacity change from 0 to 128 [ 232.353160][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 232.374309][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.383854][T12382] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 232.397172][T12382] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 232.406873][T12382] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 232.513620][T14593] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 232.526771][T14593] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.578207][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 232.587219][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3702'. [ 232.596534][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 232.607947][ T7899] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.697430][T14612] loop6: detected capacity change from 0 to 512 [ 232.704834][T14612] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 232.735236][T14612] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3703: bad orphan inode 131083 [ 232.756843][T14612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.778470][T14621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.795350][T14621] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 232.795350][T14621] program syz.0.3710 not setting count and/or reply_len properly [ 232.854018][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.026696][T14640] loop1: detected capacity change from 0 to 128 [ 233.088367][ T1588] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.117296][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.157391][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.230959][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.697710][T14656] loop0: detected capacity change from 0 to 512 [ 233.713120][T14656] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 233.830820][T14640] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.984469][T14656] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3723: bad orphan inode 131083 [ 234.002527][T14640] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.019921][T14656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.129501][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.302685][T12382] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.511008][T14680] program syz.0.3726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.561482][T14686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.587428][T14688] loop0: detected capacity change from 0 to 512 [ 234.622944][T14688] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3735: inode has both inline data and extents flags [ 234.649846][T14688] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3735: couldn't read orphan inode 15 (err -117) [ 234.668788][T14688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.841394][T14702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.375505][T14707] loop5: detected capacity change from 0 to 7 [ 235.638481][T14702] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 235.638481][T14702] program syz.2.3739 not setting count and/or reply_len properly [ 235.772046][T14725] program syz.6.3743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.796347][T14726] loop1: detected capacity change from 0 to 512 [ 235.856161][T14726] EXT4-fs (loop1): 1 truncate cleaned up [ 235.877112][T14726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.889354][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.920365][T14732] loop6: detected capacity change from 0 to 512 [ 236.249253][T14739] loop6: detected capacity change from 0 to 512 [ 236.475546][T14577] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 236.674206][T14739] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.713520][T14736] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3744: bg 0: block 465: padding at end of block bitmap is not set [ 236.729462][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.759632][T14739] EXT4-fs (loop6): 1 truncate cleaned up [ 236.765772][T14739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.840606][T14736] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1048 with error 117 [ 236.853285][T14736] EXT4-fs (loop1): This should not happen!! Data will be lost [ 236.853285][T14736] [ 236.915071][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.041753][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.082306][T14736] syz.1.3744 (14736) used greatest stack depth: 9952 bytes left [ 237.139018][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.547705][T14785] loop3: detected capacity change from 0 to 128 [ 237.955208][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.287109][T14785] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 238.303348][T14785] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.392193][T11148] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.464156][T14811] loop2: detected capacity change from 0 to 512 [ 238.479889][T14811] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3767: inode has both inline data and extents flags [ 238.509014][T14811] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3767: couldn't read orphan inode 15 (err -117) [ 238.556389][T14811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.804394][T14828] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 239.185204][T14851] loop1: detected capacity change from 0 to 128 [ 239.279109][T14851] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 239.292103][T14851] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.348213][T12382] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.759429][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.952100][T14885] loop2: detected capacity change from 0 to 512 [ 239.989548][T14885] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3791: inode has both inline data and extents flags [ 240.003089][T14885] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3791: couldn't read orphan inode 15 (err -117) [ 240.015943][T14885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.363546][T14916] __nla_validate_parse: 7 callbacks suppressed [ 240.363562][T14916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3793'. [ 240.612355][T14945] loop1: detected capacity change from 0 to 128 [ 240.701499][T14945] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 240.717416][T14950] program syz.6.3800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.725289][T14945] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.793828][T14954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.843835][T14954] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 240.843835][T14954] program syz.6.3802 not setting count and/or reply_len properly [ 240.906668][T12382] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.929789][ T7818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.992989][T14973] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3805'. [ 241.043242][T14976] loop1: detected capacity change from 0 to 1024 [ 241.050452][T14976] EXT4-fs: Ignoring removed oldalloc option [ 241.056486][T14976] EXT4-fs: Ignoring removed bh option [ 241.168968][T14976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.246696][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.348772][T15002] tipc: Enabled bearer , priority 0 [ 241.394073][T15013] program syz.3.3812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.403653][T15001] tipc: Disabling bearer [ 241.490160][T15023] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.508177][T15025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.527382][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 241.536349][T15028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3815'. [ 241.549683][T15025] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 241.549683][T15025] program syz.6.3817 not setting count and/or reply_len properly [ 241.617280][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 241.626340][T15028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3815'. [ 241.640839][T15023] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.746832][T15023] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.892775][T15023] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.913688][T15069] program syz.0.3825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.949024][T15072] loop1: detected capacity change from 0 to 1024 [ 242.010260][T15079] loop6: detected capacity change from 0 to 512 [ 242.021010][T15079] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 242.060068][T15072] EXT4-fs: Ignoring removed oldalloc option [ 242.066162][T15072] EXT4-fs: Ignoring removed bh option [ 242.109753][ T6734] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.183204][ T6734] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.251037][ T6734] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.296442][ T6734] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.377312][T15079] EXT4-fs (loop6): 1 truncate cleaned up [ 242.383736][T15079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.404824][T15072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.515603][T12382] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.550701][T15101] loop1: detected capacity change from 0 to 128 [ 242.741406][T15101] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 242.750267][T15101] FAT-fs (loop1): Filesystem has been set read-only [ 242.809671][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.874377][T15110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.886585][T15112] tipc: Enabled bearer , priority 0 [ 242.896036][T15113] loop0: detected capacity change from 0 to 1024 [ 242.906223][T15111] tipc: Disabling bearer [ 242.912314][T15113] EXT4-fs: Ignoring removed oldalloc option [ 242.918311][T15113] EXT4-fs: Ignoring removed bh option [ 242.937921][T15113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.943689][ T1038] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 242.973127][ T1038] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 243.009701][T15122] fido_id[15122]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 243.320395][T15138] loop1: detected capacity change from 0 to 128 [ 243.629105][T15138] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 243.645645][T15138] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.709547][T12382] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.947613][T15157] loop1: detected capacity change from 0 to 128 [ 243.977293][T15158] loop3: detected capacity change from 0 to 512 [ 243.984792][T15158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.194063][T15157] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 244.202902][T15157] FAT-fs (loop1): Filesystem has been set read-only [ 244.313625][T15158] EXT4-fs (loop3): 1 truncate cleaned up [ 244.318937][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 244.320322][T15158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.328428][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3853'. [ 244.349358][T15161] netlink: 'syz.2.3853': attribute type 11 has an invalid length. [ 244.400087][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 244.409044][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3853'. [ 244.418057][T15161] netlink: 'syz.2.3853': attribute type 11 has an invalid length. [ 244.437244][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.452126][T15167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.607113][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.693025][T15191] loop3: detected capacity change from 0 to 512 [ 244.705656][T15191] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3865: inode has both inline data and extents flags [ 244.720381][T15191] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3865: couldn't read orphan inode 15 (err -117) [ 244.733434][T15191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.976976][T15199] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 245.401168][T15208] loop6: detected capacity change from 0 to 128 [ 245.964591][T15208] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 246.001129][T15208] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.062360][T15216] program syz.2.3872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.074923][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.101594][ T7899] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.226796][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 246.235807][T15222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3876'. [ 246.374038][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 246.383148][T15222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3876'. [ 246.409317][T15235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.556090][T15240] loop0: detected capacity change from 0 to 128 [ 247.022562][T15231] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 247.033006][T15231] FAT-fs (loop0): Filesystem has been set read-only [ 247.101551][T15248] loop2: detected capacity change from 0 to 128 [ 247.121200][T15248] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 247.130088][T15248] FAT-fs (loop2): Filesystem has been set read-only [ 247.181976][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'. [ 247.190924][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3885'. [ 247.199965][T15252] netlink: 'syz.6.3885': attribute type 11 has an invalid length. [ 247.257148][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'. [ 247.266126][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3885'. [ 247.275195][T15252] netlink: 'syz.6.3885': attribute type 11 has an invalid length. [ 247.396781][T15271] loop0: detected capacity change from 0 to 512 [ 247.408171][T15275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.423586][T15271] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3894: inode has both inline data and extents flags [ 247.438056][T15271] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3894: couldn't read orphan inode 15 (err -117) [ 247.450824][T15271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.264395][ T7612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.292684][T15293] loop6: detected capacity change from 0 to 128 [ 248.320845][T15293] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 248.329635][T15293] FAT-fs (loop6): Filesystem has been set read-only [ 248.365627][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'. [ 248.374622][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3903'. [ 248.383725][T15299] netlink: 'syz.0.3903': attribute type 11 has an invalid length. [ 248.407631][T15299] netlink: 'syz.0.3903': attribute type 11 has an invalid length. [ 248.451342][T15305] loop6: detected capacity change from 0 to 1024 [ 248.483334][T15305] EXT4-fs: Ignoring removed oldalloc option [ 248.489463][T15305] EXT4-fs: Ignoring removed bh option [ 248.508949][T15311] loop2: detected capacity change from 0 to 512 [ 248.513985][T15314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.526899][T15311] EXT4-fs (loop2): 1 truncate cleaned up [ 248.532958][T15311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.559793][T15305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.619676][ T7899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.700457][T15323] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3911: bg 0: block 465: padding at end of block bitmap is not set [ 248.721281][T15323] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 248.733839][T15323] EXT4-fs (loop2): This should not happen!! Data will be lost [ 248.733839][T15323] [ 248.743564][T15323] EXT4-fs (loop2): Total free blocks count 0 [ 248.749594][T15323] EXT4-fs (loop2): Free/Dirty block details [ 248.755567][T15323] EXT4-fs (loop2): free_blocks=0 [ 248.760550][T15323] EXT4-fs (loop2): dirty_blocks=2832 [ 248.765956][T15323] EXT4-fs (loop2): Block reservation details [ 248.771946][T15323] EXT4-fs (loop2): i_reserved_data_blocks=2832 [ 248.804221][T15329] EXT4-fs: Ignoring removed i_version option [ 248.810313][T15329] EXT4-fs: Ignoring removed bh option [ 248.839579][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 776 with error 28 [ 248.853348][T15331] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 248.862245][T15331] FAT-fs (loop6): Filesystem has been set read-only [ 248.883528][T15329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.918985][T15329] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.941977][T15329] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.3916: iget: bad i_size value: 2533274857506816 [ 248.966634][ T7612] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 248.979798][ T7612] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 249.224261][T12786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.460293][T15352] set_capacity_and_notify: 3 callbacks suppressed [ 249.460313][T15352] loop3: detected capacity change from 0 to 512 [ 249.491891][T15352] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3926: inode has both inline data and extents flags [ 249.503046][T15357] loop1: detected capacity change from 0 to 128 [ 249.539419][T15352] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3926: couldn't read orphan inode 15 (err -117) [ 249.581793][T15352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.837381][T15370] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 249.908591][T15372] loop6: detected capacity change from 0 to 512 [ 249.946948][T15372] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3933: inode has both inline data and extents flags [ 250.030132][T15372] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3933: couldn't read orphan inode 15 (err -117) [ 250.044187][T15372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.327546][T15364] chnl_net:caif_netlink_parms(): no params data found [ 250.465859][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.473091][T15364] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.536053][T15384] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 250.668728][T11148] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.957398][T15364] bridge_slave_0: entered allmulticast mode [ 250.964115][T15364] bridge_slave_0: entered promiscuous mode [ 250.972113][T15388] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.987346][T15364] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.994523][T15364] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.014843][T15364] bridge_slave_1: entered allmulticast mode [ 251.021545][T15364] bridge_slave_1: entered promiscuous mode [ 251.051037][T15388] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.063531][T15364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.074024][T15364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.102664][T15364] team0: Port device team_slave_0 added [ 251.109648][T15364] team0: Port device team_slave_1 added [ 251.128308][T15364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.135313][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.161325][T15364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.174645][T15388] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.186548][T15364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.193522][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.219550][T15364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.261012][T15364] hsr_slave_0: entered promiscuous mode [ 251.267170][T15364] hsr_slave_1: entered promiscuous mode [ 251.273071][T15364] debugfs: 'hsr0' already exists in 'hsr' [ 251.278878][T15364] Cannot create hsr debugfs directory [ 251.286066][T15388] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.409733][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.435299][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.453130][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.470851][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.509831][T15415] loop3: detected capacity change from 0 to 1024 [ 251.517075][T15415] EXT4-fs: Ignoring removed oldalloc option [ 251.523074][T15415] EXT4-fs: Ignoring removed bh option [ 251.716956][T15420] ================================================================== [ 251.725185][T15420] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 251.733215][T15420] [ 251.735560][T15420] write to 0xffff88811b9465cc of 4 bytes by task 15415 on cpu 1: [ 251.743301][T15420] xas_set_mark+0x12b/0x140 [ 251.747860][T15420] tag_pages_for_writeback+0xc2/0x290 [ 251.753286][T15420] ext4_do_writepages+0x6a8/0x27e0 [ 251.758445][T15420] ext4_writepages+0x179/0x300 [ 251.763241][T15420] do_writepages+0x1c6/0x310 [ 251.767883][T15420] file_write_and_wait_range+0x156/0x2c0 [ 251.773534][T15420] generic_buffers_fsync_noflush+0x45/0x130 [ 251.779454][T15420] ext4_sync_file+0x1ab/0x690 [ 251.784150][T15420] vfs_fsync_range+0x10d/0x130 [ 251.788945][T15420] ext4_buffered_write_iter+0x34f/0x3c0 [ 251.794541][T15420] ext4_file_write_iter+0x387/0xf60 [ 251.799777][T15420] iter_file_splice_write+0x66b/0xa20 [ 251.805182][T15420] direct_splice_actor+0x156/0x2a0 [ 251.810323][T15420] splice_direct_to_actor+0x312/0x680 [ 251.815716][T15420] do_splice_direct+0xda/0x150 [ 251.820502][T15420] do_sendfile+0x380/0x650 [ 251.824970][T15420] __x64_sys_sendfile64+0x105/0x150 [ 251.830198][T15420] x64_sys_call+0x2db1/0x3000 [ 251.834909][T15420] do_syscall_64+0xca/0x2b0 [ 251.839444][T15420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.845351][T15420] [ 251.847680][T15420] read to 0xffff88811b9465cc of 4 bytes by task 15420 on cpu 0: [ 251.855354][T15420] file_write_and_wait_range+0x10e/0x2c0 [ 251.860999][T15420] generic_buffers_fsync_noflush+0x45/0x130 [ 251.866913][T15420] ext4_sync_file+0x1ab/0x690 [ 251.871609][T15420] vfs_fsync_range+0x10d/0x130 [ 251.876393][T15420] ext4_buffered_write_iter+0x34f/0x3c0 [ 251.881971][T15420] ext4_file_write_iter+0x387/0xf60 [ 251.887195][T15420] iter_file_splice_write+0x66b/0xa20 [ 251.892580][T15420] direct_splice_actor+0x156/0x2a0 [ 251.897708][T15420] splice_direct_to_actor+0x312/0x680 [ 251.903113][T15420] do_splice_direct+0xda/0x150 [ 251.907891][T15420] do_sendfile+0x380/0x650 [ 251.912332][T15420] __x64_sys_sendfile64+0x105/0x150 [ 251.917554][T15420] x64_sys_call+0x2db1/0x3000 [ 251.922252][T15420] do_syscall_64+0xca/0x2b0 [ 251.926783][T15420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.932695][T15420] [ 251.935029][T15420] value changed: 0x02000021 -> 0x04000021 [ 251.940770][T15420] [ 251.943118][T15420] Reported by Kernel Concurrency Sanitizer on: [ 251.949293][T15420] CPU: 0 UID: 0 PID: 15420 Comm: syz.3.3943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 251.959120][T15420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.969189][T15420] ================================================================== [ 252.074407][T15364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.126997][T15364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.230262][T15364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.239863][T15364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.315200][T15364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.333360][T15364] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.383045][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.390218][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.418339][ T1588] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.425455][ T1588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.533001][T15364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.672701][T15364] veth0_vlan: entered promiscuous mode [ 252.683854][T15364] veth1_vlan: entered promiscuous mode [ 252.701992][T15364] veth0_macvtap: entered promiscuous mode [ 252.710588][T15364] veth1_macvtap: entered promiscuous mode [ 252.722081][T15364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.734502][T15364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.746147][ T1672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.760779][ T1672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.779729][ T1672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.792792][ T1672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.802351][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 252.802369][ T29] audit: type=1400 audit(1767614650.598:602): avc: denied { mount } for pid=15364 comm="syz-executor" name="/" dev="gadgetfs" ino=4532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1