last executing test programs: 9.908126036s ago: executing program 1 (id=986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x9c}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 9.881522976s ago: executing program 1 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 9.785805706s ago: executing program 1 (id=993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000"], 0x50}}, 0x0) 9.725331127s ago: executing program 1 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 9.724783687s ago: executing program 1 (id=998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000054}, 0x40000) 9.353181909s ago: executing program 1 (id=1010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='netlink_extack\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x5}]}, 0x18}], 0x1, 0x0, 0x0, 0x4004}, 0x40040) 9.330076149s ago: executing program 32 (id=1010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='netlink_extack\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x5}]}, 0x18}], 0x1, 0x0, 0x0, 0x4004}, 0x40040) 1.785527358s ago: executing program 0 (id=1245): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r0], 0x108}}], 0x2, 0xc040) 1.785208558s ago: executing program 0 (id=1248): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x1d73}, &(0x7f0000000200)=0x8) 1.164891932s ago: executing program 4 (id=1278): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3}, &(0x7f0000000180)=0x8) 1.115609693s ago: executing program 2 (id=1279): r0 = io_uring_setup(0x7d1, 0x0) close_range(r0, r0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000000728d"]) 877.463334ms ago: executing program 0 (id=1286): unshare(0x2c020400) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) 877.347324ms ago: executing program 0 (id=1287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516", 0x6c}], 0x1}, 0x20000004) 870.264574ms ago: executing program 0 (id=1289): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[], 0x0}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 815.880045ms ago: executing program 2 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 778.571555ms ago: executing program 2 (id=1293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 722.583925ms ago: executing program 2 (id=1295): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0x1, 0xc1, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 610.391126ms ago: executing program 2 (id=1300): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x6, 0x2}, 0x3fe}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 579.054906ms ago: executing program 2 (id=1301): r0 = io_uring_setup(0x7d1, 0x0) close_range(r0, r0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000000728d"]) 544.073326ms ago: executing program 5 (id=1303): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1}) 478.698267ms ago: executing program 5 (id=1305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 437.639357ms ago: executing program 5 (id=1307): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) 328.258958ms ago: executing program 5 (id=1309): unshare(0x480) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) 309.986028ms ago: executing program 3 (id=1311): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 261.449818ms ago: executing program 4 (id=1312): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd733, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r4, 0x0, 0x10000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='io_uring_defer\x00', r3, 0x0, 0x10000}, 0x18) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 261.276758ms ago: executing program 5 (id=1313): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}]}, 0x8c}}, 0x0) 245.499518ms ago: executing program 4 (id=1314): syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 245.109248ms ago: executing program 5 (id=1315): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004f40), 0x1, 0x10000, 0x0) 239.980538ms ago: executing program 3 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xd}, @broadcast, @device_a, @random="828f50255961", {0x3}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x5, 0x80, 0x3}, @val={0x76, 0x6, {0xbb, 0x7f, 0x38, 0x9}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 173.038209ms ago: executing program 3 (id=1317): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x6, 0x2}, 0x3fe}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 172.426989ms ago: executing program 4 (id=1318): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x447}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 140.731009ms ago: executing program 3 (id=1319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 97.75624ms ago: executing program 3 (id=1320): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) 43.77675ms ago: executing program 4 (id=1321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000fc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a78", 0xcd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000900)="f742c97e8353ef9d8afd344747fb058fea97deff79dbb8e7b56b20a2d430240b", 0x20}], 0x1}}], 0x2, 0x40408e0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 613µs ago: executing program 3 (id=1322): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x2000082, &(0x7f0000000300)={[{@uni_xlate}, {@utf8}, {@rodir}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@uni_xlate}]}, 0x1, 0x361, &(0x7f0000000900)="$eJzs3T1oJFUcAPD/3uSySfDMFoJotdoJclwiFlpdOE44TKEni1+Ni5fzIxsPsrgQi2y2UQ4rxUaws7tCy6vFQsTOwtYT5FRsvO7ggiOzM/uR/TA5cOOJv18R/vzf+89782bITELy9rV2bF46GZdv3boZCwulmDt77mzcLkUlTkQSub2Y6MP5yXkA4B53O03jjzR3eO+Pl3qRZz8A/Hd1n/9vnBokyndRfPW+WUwJAJixI/78/9zE7JWZTQsAmKGx5/+jB5pHfs0/1/+bgNzi7CcIAPzjXnj5lWfX1iMuVqsLEVsftGqtWjw9aF+7HG9FIzbiTCzHfkT+opC/LWRfn7mwfv5MNfNLJWpZRasWsdVu1fI3hbUkyerLsRLLUSnq0359ktWvdOurEbFQjLpVatVOxlIx/o9LsRGrsRwPjNVHXFg/v1otDlDLxs3Hj+j0j9ad/+lYju9fjyvRiEuR1Q7mv7tSrZ5L1/v12bita+VuPwAAAAAAAAAAAAAAAAAAAAAAmIXT1b5Kf/+cdKvdev/iaIfK8P46rVreXOwP1Mn3B0rLvd15riaj+wMd3J+nVZuLE//qmQMAAAAAAAAAAAAAAAAAAMC9o7kzH/VGY2O7ufPe5nDQHsq88+0XXy9Gr2muKH07GVRFkTxwnF7HoSMn0R8i7ZenyYE+RZBE9Drv1a9d7894uE+5fxZj5VlQHmsqFXOqNxqnHvn5s0lVf2bBXjeTRD6NqUOUisahpq37s8RCROxPWNVDgtVD+txI03Ra+e6no5liK4b2XU9jSrA4tAjf3HzzoSeaDz7ZzXxVjPTY48sv3vjk8982643o5CvTaMxvN/fTIwwRpYixphPD90+pWOfShDthctAZZDrbzZ168sPvLz380XcjnZPJFzcdzrw7fawvRzPzeVCKqPQW4e+menLCzT85ePVO/+496oXLLkNjsViw+vXdn3496uUe+iZhow4AAAAAAAAAAAAAAAAAADgWg3/6HWlI07Q9teqp52c+MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4RoPP/x8KOmOZowR32jHeVN7Ybk4dfPFYTxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+xvwIAAP//AdxwsQ==") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000006122", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r4, &(0x7f0000000340), 0x0}, 0x20) 279.19µs ago: executing program 0 (id=1323): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000040)) 0s ago: executing program 4 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x6d, &(0x7f0000000900)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x4b, 0x0, @opaque="929025a5f90fa6da85c0f903a51a5b77be39071a34b428fd4b1008e17d21efb723319e05913969c80286f8fdc7ed1d09cfc5c21792fff04f4c45f8da1778b4e260a285"}}}}}, 0x0) kernel console output (not intermixed with test programs): (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.604095][ T3575] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.25: Allocating blocks 385-513 which overlap fs metadata [ 40.622531][ T3319] Trying to write to read-only block-device loop4 [ 40.623760][ T3575] EXT4-fs (loop2): pa ffff8881072aa070: logic 16, phys. 129, len 24 [ 40.631679][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.637183][ T3575] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 40.681921][ T3315] Trying to write to read-only block-device loop2 [ 40.699527][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.712597][ T3583] loop4: detected capacity change from 0 to 512 [ 40.811232][ T3583] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 40.989738][ T3596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=3596 comm=syz.1.32 [ 40.994129][ T3596] netlink: 56 bytes leftover after parsing attributes in process `syz.1.32'. [ 41.069847][ T3598] tmpfs: Unknown parameter 'mÂLave' [ 41.431893][ T3603] loop3: detected capacity change from 0 to 1024 [ 41.445899][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.491829][ T3611] loop0: detected capacity change from 0 to 1024 [ 41.512707][ T3611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.552848][ T3611] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.36: Allocating blocks 385-513 which overlap fs metadata [ 41.554226][ T3611] EXT4-fs (loop0): pa ffff8881072aa000: logic 16, phys. 129, len 24 [ 41.574697][ T3611] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 41.637073][ T3322] Trying to write to read-only block-device loop0 [ 41.638555][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.752591][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.762895][ T3617] SELinux: ebitmap: truncated map [ 41.763253][ T3617] SELinux: failed to load policy [ 41.787446][ T3626] bridge0: entered promiscuous mode [ 41.821124][ T3624] loop2: detected capacity change from 0 to 512 [ 41.865478][ T3626] bridge0: left promiscuous mode [ 41.876110][ T3627] hub 6-0:1.0: USB hub found [ 41.881063][ T3627] hub 6-0:1.0: 8 ports detected [ 42.071246][ T3636] bridge0: entered promiscuous mode [ 42.077106][ T3636] bridge0: left promiscuous mode [ 42.156209][ T3645] loop4: detected capacity change from 0 to 256 [ 42.656821][ T3681] netlink: 'syz.4.56': attribute type 7 has an invalid length. [ 42.664469][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 42.837608][ T3693] pimreg: entered allmulticast mode [ 42.847264][ T3693] pimreg: left allmulticast mode [ 42.980824][ T3699] loop4: detected capacity change from 0 to 1024 [ 42.987546][ T3697] loop1: detected capacity change from 0 to 512 [ 43.055310][ T3703] hub 6-0:1.0: USB hub found [ 43.061178][ T3703] hub 6-0:1.0: 8 ports detected [ 43.375627][ T3716] loop4: detected capacity change from 0 to 256 [ 43.754897][ T29] kauditd_printk_skb: 1689 callbacks suppressed [ 43.754913][ T29] audit: type=1326 audit(1761870979.234:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f94935e67 code=0x7ffc0000 [ 43.755052][ T29] audit: type=1326 audit(1761870979.234:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f948db099 code=0x7ffc0000 [ 43.755171][ T29] audit: type=1326 audit(1761870979.234:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 43.795639][ T29] audit: type=1326 audit(1761870979.274:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f94935e67 code=0x7ffc0000 [ 43.795678][ T29] audit: type=1326 audit(1761870979.274:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f948db099 code=0x7ffc0000 [ 43.795716][ T29] audit: type=1326 audit(1761870979.274:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 43.795818][ T29] audit: type=1326 audit(1761870979.274:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f94935e67 code=0x7ffc0000 [ 43.795855][ T29] audit: type=1326 audit(1761870979.274:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f948db099 code=0x7ffc0000 [ 43.796021][ T29] audit: type=1326 audit(1761870979.274:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 43.819272][ T29] audit: type=1326 audit(1761870979.284:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.0.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f94935e67 code=0x7ffc0000 [ 43.886623][ T3740] loop1: detected capacity change from 0 to 512 [ 43.897451][ T3742] loop2: detected capacity change from 0 to 512 [ 44.017448][ T3743] hub 6-0:1.0: USB hub found [ 44.051154][ T3743] hub 6-0:1.0: 8 ports detected [ 44.361564][ T3754] geneve2: entered promiscuous mode [ 44.364153][ T2510] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 49652 - 0 [ 44.376057][ T2510] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 49652 - 0 [ 44.376108][ T2510] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 49652 - 0 [ 44.394200][ T2510] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 49652 - 0 [ 44.548817][ T3757] loop4: detected capacity change from 0 to 512 [ 44.613715][ T3763] hub 6-0:1.0: USB hub found [ 44.618696][ T3763] hub 6-0:1.0: 8 ports detected [ 44.704330][ T3776] loop1: detected capacity change from 0 to 128 [ 44.725062][ T3776] FAT-fs (loop1): Directory bread(block 32) failed [ 44.736234][ T3776] FAT-fs (loop1): Directory bread(block 33) failed [ 44.746563][ T3776] FAT-fs (loop1): Directory bread(block 34) failed [ 44.760750][ T3778] loop2: detected capacity change from 0 to 1024 [ 44.761651][ T3776] FAT-fs (loop1): Directory bread(block 35) failed [ 44.774399][ T3776] FAT-fs (loop1): Directory bread(block 36) failed [ 44.782502][ T3776] FAT-fs (loop1): Directory bread(block 37) failed [ 44.789141][ T3776] FAT-fs (loop1): Directory bread(block 38) failed [ 44.795905][ T3776] FAT-fs (loop1): Directory bread(block 39) failed [ 44.802586][ T3776] FAT-fs (loop1): Directory bread(block 40) failed [ 44.811749][ T3776] FAT-fs (loop1): Directory bread(block 41) failed [ 44.889110][ T3784] pimreg: entered allmulticast mode [ 44.901406][ T3782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=3782 comm=syz.3.95 [ 44.902944][ T3784] pimreg: left allmulticast mode [ 45.068267][ T3803] SELinux: Context @ is not valid (left unmapped). [ 45.088903][ T3803] syzkaller1: entered promiscuous mode [ 45.094429][ T3803] syzkaller1: entered allmulticast mode [ 45.267313][ T3812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=3812 comm=syz.0.107 [ 45.281656][ T3812] netlink: 56 bytes leftover after parsing attributes in process `syz.0.107'. [ 45.497181][ T3818] netlink: 'syz.0.109': attribute type 13 has an invalid length. [ 45.497769][ T3822] pimreg: entered allmulticast mode [ 45.504981][ T3818] netlink: 'syz.0.109': attribute type 17 has an invalid length. [ 45.597321][ T3822] pimreg: left allmulticast mode [ 45.698769][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 45.713377][ T3834] loop0: detected capacity change from 0 to 256 [ 45.729226][ T3833] syzkaller1: entered promiscuous mode [ 45.734741][ T3833] syzkaller1: entered allmulticast mode [ 45.903820][ T3844] pimreg: entered allmulticast mode [ 45.911416][ T3844] pimreg: left allmulticast mode [ 45.977290][ T3846] bridge: RTM_NEWNEIGH with invalid ether address [ 45.985296][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 45.994422][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.001832][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.010151][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.017593][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.382481][ T3873] FAULT_INJECTION: forcing a failure. [ 46.382481][ T3873] name failslab, interval 1, probability 0, space 0, times 1 [ 46.395151][ T3873] CPU: 1 UID: 0 PID: 3873 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.395183][ T3873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.395261][ T3873] Call Trace: [ 46.395268][ T3873] [ 46.395274][ T3873] __dump_stack+0x1d/0x30 [ 46.395297][ T3873] dump_stack_lvl+0xe8/0x140 [ 46.395323][ T3873] dump_stack+0x15/0x1b [ 46.395345][ T3873] should_fail_ex+0x265/0x280 [ 46.395392][ T3873] ? audit_log_d_path+0x8d/0x150 [ 46.395411][ T3873] should_failslab+0x8c/0xb0 [ 46.395451][ T3873] __kmalloc_cache_noprof+0x4c/0x4a0 [ 46.395546][ T3873] audit_log_d_path+0x8d/0x150 [ 46.395580][ T3873] audit_log_d_path_exe+0x42/0x70 [ 46.395607][ T3873] audit_log_task+0x1e9/0x250 [ 46.395690][ T3873] ? kstrtouint+0x76/0xc0 [ 46.395796][ T3873] audit_seccomp+0x61/0x100 [ 46.395823][ T3873] ? __seccomp_filter+0x82d/0x1250 [ 46.395848][ T3873] __seccomp_filter+0x83e/0x1250 [ 46.395923][ T3873] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 46.396031][ T3873] ? vfs_write+0x7e8/0x960 [ 46.396052][ T3873] ? __rcu_read_unlock+0x4f/0x70 [ 46.396074][ T3873] ? __fget_files+0x184/0x1c0 [ 46.396163][ T3873] __secure_computing+0x82/0x150 [ 46.396199][ T3873] syscall_trace_enter+0xcf/0x1e0 [ 46.396233][ T3873] do_syscall_64+0xac/0x200 [ 46.396255][ T3873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.396360][ T3873] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.396438][ T3873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.396458][ T3873] RIP: 0033:0x7fa8b0a2efc9 [ 46.396471][ T3873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.396487][ T3873] RSP: 002b:00007fa8af48f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 46.396503][ T3873] RAX: ffffffffffffffda RBX: 00007fa8b0c85fa0 RCX: 00007fa8b0a2efc9 [ 46.396554][ T3873] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 46.396571][ T3873] RBP: 00007fa8af48f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.396581][ T3873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.396591][ T3873] R13: 00007fa8b0c86038 R14: 00007fa8b0c85fa0 R15: 00007ffe5f120018 [ 46.396631][ T3873] [ 46.476945][ T3826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.625504][ T3849] netlink: 256 bytes leftover after parsing attributes in process `syz.3.120'. [ 46.695299][ T3879] FAULT_INJECTION: forcing a failure. [ 46.695299][ T3879] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.708506][ T3879] CPU: 1 UID: 0 PID: 3879 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.708530][ T3879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.708550][ T3879] Call Trace: [ 46.708556][ T3879] [ 46.708643][ T3879] __dump_stack+0x1d/0x30 [ 46.708685][ T3879] dump_stack_lvl+0xe8/0x140 [ 46.708723][ T3879] dump_stack+0x15/0x1b [ 46.708740][ T3879] should_fail_ex+0x265/0x280 [ 46.708757][ T3879] should_fail+0xb/0x20 [ 46.708771][ T3879] should_fail_usercopy+0x1a/0x20 [ 46.708818][ T3879] _copy_from_user+0x1c/0xb0 [ 46.708840][ T3879] ____sys_sendmsg+0x1c5/0x4e0 [ 46.708880][ T3879] ___sys_sendmsg+0x17b/0x1d0 [ 46.709011][ T3879] __x64_sys_sendmsg+0xd4/0x160 [ 46.709056][ T3879] x64_sys_call+0x191e/0x3000 [ 46.709080][ T3879] do_syscall_64+0xd2/0x200 [ 46.709169][ T3879] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.709193][ T3879] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.709229][ T3879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.709252][ T3879] RIP: 0033:0x7f9640bbefc9 [ 46.709266][ T3879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.709334][ T3879] RSP: 002b:00007f963f61f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.709401][ T3879] RAX: ffffffffffffffda RBX: 00007f9640e15fa0 RCX: 00007f9640bbefc9 [ 46.709411][ T3879] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000004 [ 46.709422][ T3879] RBP: 00007f963f61f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.709438][ T3879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.709448][ T3879] R13: 00007f9640e16038 R14: 00007f9640e15fa0 R15: 00007ffec5dbca38 [ 46.709473][ T3879] [ 47.058149][ T3893] tmpfs: Unknown parameter 'mÂLave' [ 47.065314][ T3896] loop3: detected capacity change from 0 to 256 [ 47.410303][ T3915] capability: warning: `syz.1.138' uses deprecated v2 capabilities in a way that may be insecure [ 47.478280][ T3917] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.139'. [ 47.496838][ T3917] netlink: zone id is out of range [ 47.502002][ T3917] netlink: zone id is out of range [ 47.507242][ T3917] netlink: zone id is out of range [ 47.515368][ T3917] netlink: zone id is out of range [ 47.520896][ T3917] netlink: zone id is out of range [ 47.526191][ T3917] netlink: zone id is out of range [ 47.531439][ T3917] netlink: del zone limit has 8 unknown bytes [ 47.640775][ T3926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=3926 comm=syz.2.142 [ 47.656447][ T3926] netlink: 56 bytes leftover after parsing attributes in process `syz.2.142'. [ 47.821206][ T3954] ip_vti0: Master is either lo or non-ether device [ 47.900714][ T3956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 47.919007][ T3967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=3967 comm=syz.4.153 [ 47.932820][ T3967] netlink: 56 bytes leftover after parsing attributes in process `syz.4.153'. [ 47.986521][ T3972] loop4: detected capacity change from 0 to 512 [ 48.086305][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 48.104992][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 48.155174][ T3983] bridge0: entered promiscuous mode [ 48.166053][ T3983] bridge0: left promiscuous mode [ 48.250632][ T3992] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.163'. [ 48.260622][ T3992] netlink: zone id is out of range [ 48.265785][ T3992] netlink: zone id is out of range [ 48.270907][ T3992] netlink: zone id is out of range [ 48.417073][ T4000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4000 comm=syz.0.166 [ 48.757029][ T29] kauditd_printk_skb: 1069 callbacks suppressed [ 48.757044][ T29] audit: type=1326 audit(1761870984.244:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa459015e67 code=0x7ffc0000 [ 48.786639][ T29] audit: type=1326 audit(1761870984.244:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa458fbb099 code=0x7ffc0000 [ 48.810074][ T29] audit: type=1326 audit(1761870984.244:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 48.888972][ T4020] loop1: detected capacity change from 0 to 256 [ 48.898955][ T29] audit: type=1326 audit(1761870984.274:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa459015e67 code=0x7ffc0000 [ 48.922593][ T29] audit: type=1326 audit(1761870984.274:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa458fbb099 code=0x7ffc0000 [ 48.945952][ T29] audit: type=1326 audit(1761870984.274:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 48.969292][ T29] audit: type=1326 audit(1761870984.314:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa459015e67 code=0x7ffc0000 [ 48.992830][ T29] audit: type=1326 audit(1761870984.314:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa458fbb099 code=0x7ffc0000 [ 49.016098][ T29] audit: type=1326 audit(1761870984.314:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 49.039439][ T29] audit: type=1326 audit(1761870984.324:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3977 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa459015e67 code=0x7ffc0000 [ 49.083618][ T4024] loop4: detected capacity change from 0 to 512 [ 49.092901][ T4024] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.100019][ T4024] Zero length message leads to an empty skb [ 49.272394][ T4049] loop1: detected capacity change from 0 to 1024 [ 49.311480][ T4049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.350000][ T3316] Trying to write to read-only block-device loop1 [ 49.358295][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.398900][ T4062] bridge0: entered promiscuous mode [ 49.404585][ T4062] bridge0: left promiscuous mode [ 49.531545][ T4067] loop0: detected capacity change from 0 to 2048 [ 49.651258][ T4071] loop0: detected capacity change from 0 to 128 [ 49.699130][ T4071] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 49.707113][ T4071] SELinux: failed to load policy [ 49.756918][ T4075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.766842][ T4075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.978132][ T4084] loop2: detected capacity change from 0 to 1024 [ 50.121600][ T4094] program syz.2.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.216954][ T4104] loop4: detected capacity change from 0 to 128 [ 50.237779][ T4104] Driver unsupported XDP return value 0 on prog (id 225) dev N/A, expect packet loss! [ 50.290675][ T4108] loop2: detected capacity change from 0 to 512 [ 50.307208][ T4108] ieee802154 phy0 wpan0: encryption failed: -22 [ 50.605999][ T4138] __nla_validate_parse: 1 callbacks suppressed [ 50.606138][ T4138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 51.155097][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 51.190235][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 51.268034][ T4161] ip_vti0: Master is either lo or non-ether device [ 51.367239][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 51.451378][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 52.028928][ T4197] loop4: detected capacity change from 0 to 512 [ 52.067059][ T4197] ieee802154 phy0 wpan0: encryption failed: -22 [ 52.127401][ T4198] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 52.158210][ T4200] loop1: detected capacity change from 0 to 128 [ 52.291089][ T4207] syzkaller1: entered promiscuous mode [ 52.296880][ T4207] syzkaller1: entered allmulticast mode [ 52.623135][ T4244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4244 comm=syz.2.236 [ 52.762844][ T4266] tmpfs: Unknown parameter 'mÂLave' [ 52.779607][ T4268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 52.824083][ T4270] FAULT_INJECTION: forcing a failure. [ 52.824083][ T4270] name failslab, interval 1, probability 0, space 0, times 0 [ 52.836796][ T4270] CPU: 0 UID: 0 PID: 4270 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.836822][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.836833][ T4270] Call Trace: [ 52.836840][ T4270] [ 52.836848][ T4270] __dump_stack+0x1d/0x30 [ 52.836874][ T4270] dump_stack_lvl+0xe8/0x140 [ 52.836937][ T4270] dump_stack+0x15/0x1b [ 52.836959][ T4270] should_fail_ex+0x265/0x280 [ 52.837048][ T4270] should_failslab+0x8c/0xb0 [ 52.837083][ T4270] __kmalloc_noprof+0xa5/0x570 [ 52.837115][ T4270] ? io_cache_alloc_new+0x2a/0xb0 [ 52.837180][ T4270] io_cache_alloc_new+0x2a/0xb0 [ 52.837202][ T4270] io_send_zc_prep+0x30e/0x5d0 [ 52.837225][ T4270] io_submit_sqes+0x5ef/0x1060 [ 52.837343][ T4270] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 52.837374][ T4270] ? 0xffffffff81000000 [ 52.837387][ T4270] ? __rcu_read_unlock+0x4f/0x70 [ 52.837417][ T4270] ? get_pid_task+0x96/0xd0 [ 52.837446][ T4270] ? proc_fail_nth_write+0x13b/0x160 [ 52.837513][ T4270] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.837541][ T4270] ? vfs_write+0x7e8/0x960 [ 52.837566][ T4270] ? __rcu_read_unlock+0x4f/0x70 [ 52.837614][ T4270] ? __fget_files+0x184/0x1c0 [ 52.837649][ T4270] ? fput+0x8f/0xc0 [ 52.837667][ T4270] __x64_sys_io_uring_enter+0x78/0x90 [ 52.837698][ T4270] x64_sys_call+0x2df0/0x3000 [ 52.837720][ T4270] do_syscall_64+0xd2/0x200 [ 52.837802][ T4270] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.837831][ T4270] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.837860][ T4270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.837926][ T4270] RIP: 0033:0x7fa45901efc9 [ 52.837940][ T4270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.837956][ T4270] RSP: 002b:00007fa457a7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 52.837978][ T4270] RAX: ffffffffffffffda RBX: 00007fa459275fa0 RCX: 00007fa45901efc9 [ 52.837990][ T4270] RDX: 0000000000000004 RSI: 000000000000749f RDI: 0000000000000004 [ 52.838004][ T4270] RBP: 00007fa457a7f090 R08: 0000000000000000 R09: fffffffffffffef5 [ 52.838020][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.838044][ T4270] R13: 00007fa459276038 R14: 00007fa459275fa0 R15: 00007ffd1c1bc2e8 [ 52.838065][ T4270] [ 53.130671][ T4272] loop0: detected capacity change from 0 to 512 [ 53.146130][ T4272] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.159233][ T4272] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 53.173955][ T4280] tmpfs: Unknown parameter 'mÂLave' [ 53.186105][ T4283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.194702][ T4283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.221476][ T4272] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 53.230172][ T4272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.243036][ T4272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.325557][ T4291] pimreg: entered allmulticast mode [ 53.330830][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.338998][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.346842][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.354754][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.362613][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.370443][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.378206][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.385973][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.388040][ T4297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.245'. [ 53.393696][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.393802][ T4295] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 53.419327][ T3397] IPVS: starting estimator thread 0... [ 53.430124][ T4291] pimreg: left allmulticast mode [ 53.514569][ T4304] loop4: detected capacity change from 0 to 128 [ 53.515571][ T4300] IPVS: using max 2016 ests per chain, 100800 per kthread [ 53.634150][ T4314] loop4: detected capacity change from 0 to 512 [ 53.696127][ T4323] hub 6-0:1.0: USB hub found [ 53.700844][ T4323] hub 6-0:1.0: 8 ports detected [ 53.784523][ T29] kauditd_printk_skb: 1086 callbacks suppressed [ 53.784534][ T29] audit: type=1326 audit(1761870989.264:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm="syz.2.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 53.815867][ T29] audit: type=1326 audit(1761870989.294:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 53.838480][ T29] audit: type=1326 audit(1761870989.294:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 53.861078][ T29] audit: type=1326 audit(1761870989.294:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 53.883765][ T29] audit: type=1326 audit(1761870989.294:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 53.906317][ T29] audit: type=1326 audit(1761870989.294:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 53.928911][ T29] audit: type=1326 audit(1761870989.294:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 53.951469][ T29] audit: type=1326 audit(1761870989.294:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8b0a2d810 code=0x7ffc0000 [ 53.974035][ T29] audit: type=1326 audit(1761870989.294:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8b0a2d810 code=0x7ffc0000 [ 53.996588][ T29] audit: type=1326 audit(1761870989.304:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm=02 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 54.048921][ T4328] syzkaller1: entered promiscuous mode [ 54.054481][ T4328] syzkaller1: entered allmulticast mode [ 54.165334][ T4336] netlink: 204 bytes leftover after parsing attributes in process `syz.3.260'. [ 54.341465][ T4340] hub 1-0:1.0: USB hub found [ 54.346519][ T4340] hub 1-0:1.0: 8 ports detected [ 54.366002][ T4340] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 54.388850][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.396490][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.404103][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.411721][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.419262][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.426789][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.434300][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.441911][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.449456][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.456993][ T2968] hid-generic 0000:0000:10001.0001: unknown main item tag 0x0 [ 54.532817][ T2968] hid-generic 0000:0000:10001.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.646452][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 54.941346][ T4357] FAULT_INJECTION: forcing a failure. [ 54.941346][ T4357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.954476][ T4357] CPU: 0 UID: 0 PID: 4357 Comm: syz.0.266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.954507][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.954522][ T4357] Call Trace: [ 54.954530][ T4357] [ 54.954538][ T4357] __dump_stack+0x1d/0x30 [ 54.954566][ T4357] dump_stack_lvl+0xe8/0x140 [ 54.954616][ T4357] dump_stack+0x15/0x1b [ 54.954637][ T4357] should_fail_ex+0x265/0x280 [ 54.954656][ T4357] should_fail+0xb/0x20 [ 54.954671][ T4357] should_fail_usercopy+0x1a/0x20 [ 54.954743][ T4357] _copy_from_user+0x1c/0xb0 [ 54.954830][ T4357] ucma_get_event+0x77/0x3e0 [ 54.954905][ T4357] ? kstrtouint_from_user+0x9f/0xf0 [ 54.954926][ T4357] ? should_fail_ex+0xdb/0x280 [ 54.954951][ T4357] ucma_write+0x1b3/0x250 [ 54.954981][ T4357] ? __pfx_ucma_write+0x10/0x10 [ 54.955011][ T4357] vfs_write+0x269/0x960 [ 54.955042][ T4357] ? __rcu_read_unlock+0x4f/0x70 [ 54.955200][ T4357] ? __fget_files+0x184/0x1c0 [ 54.955235][ T4357] ksys_write+0xda/0x1a0 [ 54.955272][ T4357] __x64_sys_write+0x40/0x50 [ 54.955302][ T4357] x64_sys_call+0x2802/0x3000 [ 54.955330][ T4357] do_syscall_64+0xd2/0x200 [ 54.955352][ T4357] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.955433][ T4357] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.955486][ T4357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.955534][ T4357] RIP: 0033:0x7f4f9493efc9 [ 54.955552][ T4357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.955573][ T4357] RSP: 002b:00007f4f9339f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.955621][ T4357] RAX: ffffffffffffffda RBX: 00007f4f94b95fa0 RCX: 00007f4f9493efc9 [ 54.955653][ T4357] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000003 [ 54.955668][ T4357] RBP: 00007f4f9339f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.955683][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.955698][ T4357] R13: 00007f4f94b96038 R14: 00007f4f94b95fa0 R15: 00007ffe1d2621e8 [ 54.955728][ T4357] [ 55.252325][ T4365] pimreg: entered allmulticast mode [ 55.261440][ T4367] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.290986][ T4370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.309623][ T4365] pimreg: left allmulticast mode [ 55.349319][ T4362] bond1: (slave ip6gretap1): making interface the new active one [ 55.369284][ T4362] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 55.392952][ T4375] loop0: detected capacity change from 0 to 512 [ 55.451504][ T4380] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 55.471997][ T4383] hub 6-0:1.0: USB hub found [ 55.472201][ T4380] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 55.479155][ T4383] hub 6-0:1.0: 8 ports detected [ 55.502335][ T4362] syz.2.268 (4362) used greatest stack depth: 10240 bytes left [ 55.562441][ T4380] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.585501][ T4380] vhci_hcd: invalid port number 96 [ 55.590677][ T4380] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 55.604843][ T4391] ip_vti0: Master is either lo or non-ether device [ 55.619067][ T4389] loop3: detected capacity change from 0 to 512 [ 55.650688][ T4392] loop1: detected capacity change from 0 to 512 [ 55.690795][ T4397] hub 6-0:1.0: USB hub found [ 55.695550][ T4397] hub 6-0:1.0: 8 ports detected [ 55.889184][ T4404] loop2: detected capacity change from 0 to 764 [ 55.913621][ T4404] FAULT_INJECTION: forcing a failure. [ 55.913621][ T4404] name failslab, interval 1, probability 0, space 0, times 0 [ 55.926309][ T4404] CPU: 0 UID: 0 PID: 4404 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.926342][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.926358][ T4404] Call Trace: [ 55.926366][ T4404] [ 55.926381][ T4404] __dump_stack+0x1d/0x30 [ 55.926409][ T4404] dump_stack_lvl+0xe8/0x140 [ 55.926431][ T4404] dump_stack+0x15/0x1b [ 55.926464][ T4404] should_fail_ex+0x265/0x280 [ 55.926487][ T4404] ? __pfx_isofs_iget5_test+0x10/0x10 [ 55.926515][ T4404] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 55.926572][ T4404] should_failslab+0x8c/0xb0 [ 55.926612][ T4404] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 55.926638][ T4404] ? isofs_alloc_inode+0x34/0x50 [ 55.926678][ T4404] ? __rcu_read_unlock+0x4f/0x70 [ 55.926702][ T4404] ? __pfx_isofs_iget5_test+0x10/0x10 [ 55.926727][ T4404] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 55.926761][ T4404] isofs_alloc_inode+0x34/0x50 [ 55.926788][ T4404] alloc_inode+0x40/0x170 [ 55.926843][ T4404] ? __pfx_isofs_iget5_set+0x10/0x10 [ 55.926861][ T4404] iget5_locked+0x4a/0xa0 [ 55.926893][ T4404] __isofs_iget+0xdc/0x1100 [ 55.926984][ T4404] ? kfree+0x351/0x400 [ 55.927014][ T4404] ? get_rock_ridge_filename+0x54c/0x5b0 [ 55.927043][ T4404] ? __list_add_valid_or_report+0x38/0xe0 [ 55.927089][ T4404] ? free_frozen_page_commit+0x6f/0x2f0 [ 55.927122][ T4404] ? _raw_spin_unlock+0x26/0x50 [ 55.927149][ T4404] ? __free_frozen_pages+0x284/0x510 [ 55.927214][ T4404] isofs_lookup+0x800/0x930 [ 55.927238][ T4404] ? __pfx_isofs_lookup+0x10/0x10 [ 55.927256][ T4404] path_openat+0xcf3/0x2170 [ 55.927289][ T4404] do_filp_open+0x109/0x230 [ 55.927384][ T4404] do_sys_openat2+0xa6/0x110 [ 55.927437][ T4404] __x64_sys_openat+0xf2/0x120 [ 55.927474][ T4404] x64_sys_call+0x2eab/0x3000 [ 55.927502][ T4404] do_syscall_64+0xd2/0x200 [ 55.927557][ T4404] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.927597][ T4404] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.927685][ T4404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.927706][ T4404] RIP: 0033:0x7fa8b0a2efc9 [ 55.927723][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.927768][ T4404] RSP: 002b:00007fa8af48f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.927785][ T4404] RAX: ffffffffffffffda RBX: 00007fa8b0c85fa0 RCX: 00007fa8b0a2efc9 [ 55.927798][ T4404] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 55.927811][ T4404] RBP: 00007fa8af48f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.927825][ T4404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.927905][ T4404] R13: 00007fa8b0c86038 R14: 00007fa8b0c85fa0 R15: 00007ffe5f120018 [ 55.927941][ T4404] [ 56.289574][ T4407] tipc: Started in network mode [ 56.294508][ T4407] tipc: Node identity 228ab9c8c0fb, cluster identity 4711 [ 56.302071][ T4407] tipc: Enabled bearer , priority 0 [ 56.331433][ T4406] tipc: Disabling bearer [ 56.528337][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 56.718478][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 56.719834][ T4449] syzkaller1: entered promiscuous mode [ 56.732852][ T4449] syzkaller1: entered allmulticast mode [ 56.757624][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 56.856197][ T4457] loop3: detected capacity change from 0 to 1024 [ 56.863008][ T4457] EXT4-fs: Ignoring removed orlov option [ 56.873983][ T4457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.921908][ T4463] FAULT_INJECTION: forcing a failure. [ 56.921908][ T4463] name failslab, interval 1, probability 0, space 0, times 0 [ 56.934633][ T4463] CPU: 0 UID: 0 PID: 4463 Comm: syz.2.299 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.934700][ T4463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.934749][ T4463] Call Trace: [ 56.934756][ T4463] [ 56.934765][ T4463] __dump_stack+0x1d/0x30 [ 56.934792][ T4463] dump_stack_lvl+0xe8/0x140 [ 56.934873][ T4463] dump_stack+0x15/0x1b [ 56.934891][ T4463] should_fail_ex+0x265/0x280 [ 56.934946][ T4463] should_failslab+0x8c/0xb0 [ 56.934980][ T4463] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 56.935021][ T4463] ? sidtab_sid2str_get+0xa0/0x130 [ 56.935060][ T4463] ? skb_put+0xa9/0xf0 [ 56.935088][ T4463] kmemdup_noprof+0x2b/0x70 [ 56.935118][ T4463] sidtab_sid2str_get+0xa0/0x130 [ 56.935213][ T4463] security_sid_to_context_core+0x1eb/0x2e0 [ 56.935315][ T4463] security_sid_to_context+0x27/0x40 [ 56.935347][ T4463] avc_audit_post_callback+0x9d/0x520 [ 56.935386][ T4463] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 56.935441][ T4463] common_lsm_audit+0x1bb/0x230 [ 56.935491][ T4463] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 56.935577][ T4463] slow_avc_audit+0x104/0x140 [ 56.935683][ T4463] avc_has_perm+0x13a/0x180 [ 56.935719][ T4463] selinux_socket_sendmsg+0x175/0x1b0 [ 56.935756][ T4463] security_socket_sendmsg+0x48/0x80 [ 56.935786][ T4463] __sock_sendmsg+0x30/0x180 [ 56.935864][ T4463] ____sys_sendmsg+0x31e/0x4e0 [ 56.935905][ T4463] ___sys_sendmsg+0x17b/0x1d0 [ 56.936058][ T4463] __x64_sys_sendmsg+0xd4/0x160 [ 56.936140][ T4463] x64_sys_call+0x191e/0x3000 [ 56.936170][ T4463] do_syscall_64+0xd2/0x200 [ 56.936193][ T4463] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.936228][ T4463] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.936386][ T4463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.936408][ T4463] RIP: 0033:0x7fa8b0a2efc9 [ 56.936423][ T4463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.936445][ T4463] RSP: 002b:00007fa8af48f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.936469][ T4463] RAX: ffffffffffffffda RBX: 00007fa8b0c85fa0 RCX: 00007fa8b0a2efc9 [ 56.936520][ T4463] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 56.936535][ T4463] RBP: 00007fa8af48f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.936550][ T4463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.936619][ T4463] R13: 00007fa8b0c86038 R14: 00007fa8b0c85fa0 R15: 00007ffe5f120018 [ 56.936650][ T4463] [ 57.207936][ T4457] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.233614][ T4465] geneve2: entered promiscuous mode [ 57.242401][ T52] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 33814 - 0 [ 57.251372][ T4457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.258480][ T52] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 33814 - 0 [ 57.268790][ T52] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 33814 - 0 [ 57.277744][ T52] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 33814 - 0 [ 57.286274][ T4457] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 57.293109][ T4457] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.300715][ T4457] vhci_hcd vhci_hcd.0: Device attached [ 57.312328][ T4457] mmap: syz.3.297 (4457) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.330573][ T4468] vhci_hcd: connection closed [ 57.330704][ T37] vhci_hcd: stop threads [ 57.339694][ T37] vhci_hcd: release socket [ 57.344108][ T37] vhci_hcd: disconnect device [ 57.414648][ T4476] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 57.626235][ T4492] pim6reg1: entered promiscuous mode [ 57.631639][ T4492] pim6reg1: entered allmulticast mode [ 57.746441][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 57.844640][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.897779][ T4516] loop3: detected capacity change from 0 to 164 [ 58.112998][ T4525] tmpfs: Unknown parameter 'mÂLave' [ 58.338163][ T4532] wireguard0: entered promiscuous mode [ 58.343714][ T4532] wireguard0: entered allmulticast mode [ 58.406922][ T4546] process 'syz.0.331' launched './file0' with NULL argv: empty string added [ 58.461459][ T4550] FAULT_INJECTION: forcing a failure. [ 58.461459][ T4550] name failslab, interval 1, probability 0, space 0, times 0 [ 58.474203][ T4550] CPU: 1 UID: 0 PID: 4550 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.474235][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.474249][ T4550] Call Trace: [ 58.474255][ T4550] [ 58.474261][ T4550] __dump_stack+0x1d/0x30 [ 58.474285][ T4550] dump_stack_lvl+0xe8/0x140 [ 58.474371][ T4550] dump_stack+0x15/0x1b [ 58.474387][ T4550] should_fail_ex+0x265/0x280 [ 58.474404][ T4550] should_failslab+0x8c/0xb0 [ 58.474497][ T4550] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 58.474561][ T4550] ? perf_event_alloc+0x14c/0x1740 [ 58.474594][ T4550] perf_event_alloc+0x14c/0x1740 [ 58.474628][ T4550] __se_sys_perf_event_open+0x615/0x11c0 [ 58.474665][ T4550] ? __rcu_read_unlock+0x4f/0x70 [ 58.474756][ T4550] __x64_sys_perf_event_open+0x67/0x80 [ 58.474783][ T4550] x64_sys_call+0x7bd/0x3000 [ 58.474805][ T4550] do_syscall_64+0xd2/0x200 [ 58.474827][ T4550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.474931][ T4550] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.474969][ T4550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.474994][ T4550] RIP: 0033:0x7f4f9493efc9 [ 58.475007][ T4550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.475023][ T4550] RSP: 002b:00007f4f9339f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 58.475062][ T4550] RAX: ffffffffffffffda RBX: 00007f4f94b95fa0 RCX: 00007f4f9493efc9 [ 58.475077][ T4550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 58.475091][ T4550] RBP: 00007f4f9339f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.475105][ T4550] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 58.475116][ T4550] R13: 00007f4f94b96038 R14: 00007f4f94b95fa0 R15: 00007ffe1d2621e8 [ 58.475135][ T4550] [ 59.425732][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 59.425749][ T29] audit: type=1326 audit(1761870994.914:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.562101][ T29] audit: type=1326 audit(1761870994.944:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.585631][ T29] audit: type=1326 audit(1761870994.954:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.609011][ T29] audit: type=1326 audit(1761870994.954:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.632428][ T29] audit: type=1326 audit(1761870994.954:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.655918][ T29] audit: type=1326 audit(1761870994.954:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.679301][ T29] audit: type=1326 audit(1761870994.954:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.702738][ T29] audit: type=1326 audit(1761870994.954:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.726166][ T29] audit: type=1326 audit(1761870994.964:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.749491][ T29] audit: type=1326 audit(1761870994.964:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 59.777710][ T4582] FAULT_INJECTION: forcing a failure. [ 59.777710][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 59.790376][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.790404][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.790419][ T4582] Call Trace: [ 59.790426][ T4582] [ 59.790434][ T4582] __dump_stack+0x1d/0x30 [ 59.790499][ T4582] dump_stack_lvl+0xe8/0x140 [ 59.790519][ T4582] dump_stack+0x15/0x1b [ 59.790538][ T4582] should_fail_ex+0x265/0x280 [ 59.790561][ T4582] should_failslab+0x8c/0xb0 [ 59.790626][ T4582] __kmalloc_noprof+0xa5/0x570 [ 59.790683][ T4582] ? fib6_info_alloc+0x2e/0x90 [ 59.790727][ T4582] fib6_info_alloc+0x2e/0x90 [ 59.790757][ T4582] ip6_route_info_create+0xe7/0x390 [ 59.790790][ T4582] ip6_route_add+0x49/0x170 [ 59.790873][ T4582] ipv6_route_ioctl+0x251/0x280 [ 59.790973][ T4582] inet6_ioctl+0x152/0x190 [ 59.791009][ T4582] sock_do_ioctl+0x73/0x220 [ 59.791101][ T4582] sock_ioctl+0x41b/0x610 [ 59.791129][ T4582] ? __pfx_sock_ioctl+0x10/0x10 [ 59.791190][ T4582] __se_sys_ioctl+0xce/0x140 [ 59.791216][ T4582] __x64_sys_ioctl+0x43/0x50 [ 59.791240][ T4582] x64_sys_call+0x1816/0x3000 [ 59.791267][ T4582] do_syscall_64+0xd2/0x200 [ 59.791289][ T4582] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.791349][ T4582] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.791402][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.791427][ T4582] RIP: 0033:0x7fa45901efc9 [ 59.791443][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.791460][ T4582] RSP: 002b:00007fa457a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.791477][ T4582] RAX: ffffffffffffffda RBX: 00007fa459275fa0 RCX: 00007fa45901efc9 [ 59.791496][ T4582] RDX: 00002000000005c0 RSI: 000000000000890b RDI: 0000000000000007 [ 59.791522][ T4582] RBP: 00007fa457a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.791536][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.791550][ T4582] R13: 00007fa459276038 R14: 00007fa459275fa0 R15: 00007ffd1c1bc2e8 [ 59.791572][ T4582] [ 59.813928][ T4585] loop1: detected capacity change from 0 to 2048 [ 59.815291][ T4577] 9pnet: Could not find request transport: rdma [ 60.000996][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 60.067838][ T4599] ip_vti0: Master is either lo or non-ether device [ 60.110056][ T4604] loop3: detected capacity change from 0 to 1024 [ 60.119883][ T4605] loop1: detected capacity change from 0 to 512 [ 60.138065][ T4604] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.149003][ T4604] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.192713][ T4604] JBD2: no valid journal superblock found [ 60.198524][ T4604] EXT4-fs (loop3): Could not load journal inode [ 60.268790][ T4604] validate_nla: 46 callbacks suppressed [ 60.268804][ T4604] netlink: 'syz.3.352': attribute type 32 has an invalid length. [ 60.434598][ T4619] geneve2: entered promiscuous mode [ 60.442016][ T37] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 36725 - 0 [ 60.455485][ T37] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 36725 - 0 [ 60.464572][ T37] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 36725 - 0 [ 60.473582][ T37] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 36725 - 0 [ 60.554578][ T4622] loop0: detected capacity change from 0 to 136 [ 60.561944][ T4622] Attempt to read inode for relocated directory [ 60.579906][ T4622] syz.0.358: attempt to access beyond end of device [ 60.579906][ T4622] loop0: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 60.596033][ T4622] syz.0.358: attempt to access beyond end of device [ 60.596033][ T4622] loop0: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 60.669313][ T4625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.360'. [ 61.021727][ T4651] netlink: 'syz.0.367': attribute type 39 has an invalid length. [ 61.077102][ T4658] loop0: detected capacity change from 0 to 164 [ 61.103914][ T4658] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.117912][ T4658] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.130431][ T4658] Symlink component flag not implemented [ 61.136198][ T4658] Symlink component flag not implemented [ 61.149374][ T4658] Symlink component flag not implemented (7) [ 61.155544][ T4658] Symlink component flag not implemented (116) [ 61.320251][ T4676] loop2: detected capacity change from 0 to 1024 [ 61.446298][ T4684] loop1: detected capacity change from 0 to 1024 [ 61.453203][ T4684] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.464255][ T4684] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.474934][ T4684] JBD2: no valid journal superblock found [ 61.480742][ T4684] EXT4-fs (loop1): Could not load journal inode [ 61.489218][ T4684] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 61.559593][ T4692] tmpfs: Unknown parameter 'mÂLave' [ 61.603011][ T4702] 9pnet_fd: p9_fd_create_unix (4702): problem connecting socket: ./file0: -2 [ 61.618208][ T4702] netlink: 'syz.3.383': attribute type 4 has an invalid length. [ 61.645845][ T4702] binfmt_misc: register: failed to install interpreter file ./file0 [ 61.657882][ T4702] bridge2: entered promiscuous mode [ 61.661551][ T4702] netlink: 'syz.3.383': attribute type 4 has an invalid length. [ 61.695744][ T4707] loop3: detected capacity change from 0 to 512 [ 61.721458][ T4707] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.738144][ T4707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.747227][ T4707] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.385: corrupted inode contents [ 61.765143][ T4707] EXT4-fs (loop3): Remounting filesystem read-only [ 61.771879][ T4707] EXT4-fs (loop3): 1 truncate cleaned up [ 61.777647][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.788271][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.798935][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 61.809692][ T4707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.864008][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.866133][ T4711] tipc: Enabling of bearer rejected, failed to enable media [ 61.922584][ T4722] loop2: detected capacity change from 0 to 4096 [ 61.929111][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 61.946599][ T4722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.011017][ T4729] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 62.036399][ T4731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=4731 comm=syz.4.393 [ 62.065967][ T4731] loop4: detected capacity change from 0 to 1024 [ 62.078132][ T4731] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.089153][ T4731] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.102517][ T4731] JBD2: no valid journal superblock found [ 62.108522][ T4731] EXT4-fs (loop4): Could not load journal inode [ 62.129781][ T4731] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 62.154739][ T4731] loop4: detected capacity change from 0 to 512 [ 62.188828][ T4731] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.245246][ T4745] loop1: detected capacity change from 0 to 128 [ 62.334266][ T3319] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 62.418379][ T4758] loop4: detected capacity change from 0 to 1024 [ 62.444151][ T4758] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.455100][ T4758] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.479282][ T4761] random: crng reseeded on system resumption [ 62.492295][ T4758] JBD2: no valid journal superblock found [ 62.498088][ T4758] EXT4-fs (loop4): Could not load journal inode [ 62.504734][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 62.523969][ T4763] loop2: detected capacity change from 0 to 1024 [ 62.551158][ T4763] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.562186][ T4763] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.589004][ T4767] ip_vti0: Master is either lo or non-ether device [ 62.597649][ T4763] JBD2: no valid journal superblock found [ 62.603416][ T4763] EXT4-fs (loop2): Could not load journal inode [ 62.640577][ T4770] tipc: Enabling of bearer rejected, failed to enable media [ 62.727986][ T4777] loop1: detected capacity change from 0 to 2048 [ 62.738621][ T4777] EXT4-fs: Ignoring removed bh option [ 62.800169][ T4783] netlink: 100 bytes leftover after parsing attributes in process `syz.4.408'. [ 63.141098][ T4820] tmpfs: Unknown parameter 'mÂLave' [ 63.296926][ T4839] tipc: Enabling of bearer rejected, failed to enable media [ 63.307024][ T4836] tipc: Enabling of bearer rejected, failed to enable media [ 63.427804][ T4851] syz.0.420 uses obsolete (PF_INET,SOCK_PACKET) [ 63.441603][ T4851] FAULT_INJECTION: forcing a failure. [ 63.441603][ T4851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.454901][ T4851] CPU: 0 UID: 0 PID: 4851 Comm: syz.0.420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.454926][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.454990][ T4851] Call Trace: [ 63.454997][ T4851] [ 63.455006][ T4851] __dump_stack+0x1d/0x30 [ 63.455087][ T4851] dump_stack_lvl+0xe8/0x140 [ 63.455115][ T4851] dump_stack+0x15/0x1b [ 63.455131][ T4851] should_fail_ex+0x265/0x280 [ 63.455165][ T4851] should_fail_alloc_page+0xf2/0x100 [ 63.455202][ T4851] __alloc_frozen_pages_noprof+0xff/0x360 [ 63.455248][ T4851] alloc_pages_mpol+0xb3/0x260 [ 63.455268][ T4851] alloc_pages_noprof+0x90/0x130 [ 63.455288][ T4851] alloc_skb_with_frags+0x193/0x470 [ 63.455323][ T4851] sock_alloc_send_pskb+0x430/0x4e0 [ 63.455450][ T4851] tun_get_user+0x9b3/0x26e0 [ 63.455491][ T4851] ? ref_tracker_alloc+0x1f2/0x2f0 [ 63.455566][ T4851] ? selinux_file_permission+0x1e4/0x320 [ 63.455601][ T4851] tun_chr_write_iter+0x15e/0x210 [ 63.455691][ T4851] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 63.455725][ T4851] vfs_write+0x52a/0x960 [ 63.455883][ T4851] ksys_write+0xda/0x1a0 [ 63.455908][ T4851] __x64_sys_write+0x40/0x50 [ 63.455937][ T4851] x64_sys_call+0x2802/0x3000 [ 63.455965][ T4851] do_syscall_64+0xd2/0x200 [ 63.456039][ T4851] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.456138][ T4851] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.456171][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.456192][ T4851] RIP: 0033:0x7f4f9493efc9 [ 63.456217][ T4851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.456239][ T4851] RSP: 002b:00007f4f9339f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.456309][ T4851] RAX: ffffffffffffffda RBX: 00007f4f94b95fa0 RCX: 00007f4f9493efc9 [ 63.456325][ T4851] RDX: 0000000000000fce RSI: 0000200000001240 RDI: 0000000000000003 [ 63.456339][ T4851] RBP: 00007f4f9339f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.456354][ T4851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.456368][ T4851] R13: 00007f4f94b96038 R14: 00007f4f94b95fa0 R15: 00007ffe1d2621e8 [ 63.456391][ T4851] [ 63.727399][ T4858] pimreg: entered allmulticast mode [ 63.782879][ T4868] veth2: entered promiscuous mode [ 63.788088][ T4868] veth2: entered allmulticast mode [ 63.799489][ T4865] loop4: detected capacity change from 0 to 512 [ 63.825869][ T4868] FAULT_INJECTION: forcing a failure. [ 63.825869][ T4868] name failslab, interval 1, probability 0, space 0, times 0 [ 63.838564][ T4868] CPU: 1 UID: 0 PID: 4868 Comm: syz.2.426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.838595][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.838609][ T4868] Call Trace: [ 63.838616][ T4868] [ 63.838624][ T4868] __dump_stack+0x1d/0x30 [ 63.838676][ T4868] dump_stack_lvl+0xe8/0x140 [ 63.838760][ T4868] dump_stack+0x15/0x1b [ 63.838800][ T4868] should_fail_ex+0x265/0x280 [ 63.838823][ T4868] ? alloc_tty_struct+0x4c/0x400 [ 63.838868][ T4868] should_failslab+0x8c/0xb0 [ 63.838905][ T4868] __kmalloc_cache_noprof+0x4c/0x4a0 [ 63.838990][ T4868] alloc_tty_struct+0x4c/0x400 [ 63.839015][ T4868] ? tty_open+0x81/0xaf0 [ 63.839119][ T4868] ? should_failslab+0x8c/0xb0 [ 63.839225][ T4868] tty_init_dev+0x39/0x330 [ 63.839312][ T4868] tty_open+0x6c7/0xaf0 [ 63.839340][ T4868] chrdev_open+0x2eb/0x3a0 [ 63.839370][ T4868] do_dentry_open+0x649/0xa20 [ 63.839386][ T4868] ? __pfx_chrdev_open+0x10/0x10 [ 63.839503][ T4868] vfs_open+0x37/0x1e0 [ 63.839523][ T4868] path_openat+0x1c5e/0x2170 [ 63.839560][ T4868] do_filp_open+0x109/0x230 [ 63.839613][ T4868] do_sys_openat2+0xa6/0x110 [ 63.839639][ T4868] __x64_sys_openat+0xf2/0x120 [ 63.839666][ T4868] x64_sys_call+0x2eab/0x3000 [ 63.839694][ T4868] do_syscall_64+0xd2/0x200 [ 63.839716][ T4868] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.839829][ T4868] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.839877][ T4868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.839902][ T4868] RIP: 0033:0x7fa8b0a2d810 [ 63.839919][ T4868] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 63.840013][ T4868] RSP: 002b:00007fa8af48eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 63.840034][ T4868] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa8b0a2d810 [ 63.840046][ T4868] RDX: 0000000000000002 RSI: 00007fa8af48ec10 RDI: 00000000ffffff9c [ 63.840063][ T4868] RBP: 00007fa8af48ec10 R08: 0000000000000000 R09: 00007fa8af48e986 [ 63.840075][ T4868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 63.840157][ T4868] R13: 00007fa8b0c86038 R14: 00007fa8b0c85fa0 R15: 00007ffe5f120018 [ 63.840178][ T4868] [ 64.085901][ T4873] hub 6-0:1.0: USB hub found [ 64.115882][ T4873] hub 6-0:1.0: 8 ports detected [ 64.259997][ T4886] syzkaller1: entered promiscuous mode [ 64.265623][ T4886] syzkaller1: entered allmulticast mode [ 64.368366][ T4900] tmpfs: Unknown parameter 'mÂLave' [ 64.398960][ T4907] loop3: detected capacity change from 0 to 164 [ 64.476318][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 64.476335][ T29] audit: type=1326 audit(1761870999.964:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 64.526207][ T29] audit: type=1326 audit(1761870999.964:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 64.549590][ T29] audit: type=1326 audit(1761871000.004:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 64.670139][ T4926] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 64.693527][ T4922] loop4: detected capacity change from 0 to 512 [ 64.708793][ T4922] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 64.793586][ T4940] FAULT_INJECTION: forcing a failure. [ 64.793586][ T4940] name failslab, interval 1, probability 0, space 0, times 0 [ 64.793623][ T4940] CPU: 0 UID: 0 PID: 4940 Comm: syz.4.445 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.793649][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.793662][ T4940] Call Trace: [ 64.793669][ T4940] [ 64.793678][ T4940] __dump_stack+0x1d/0x30 [ 64.793727][ T4940] dump_stack_lvl+0xe8/0x140 [ 64.793749][ T4940] dump_stack+0x15/0x1b [ 64.793768][ T4940] should_fail_ex+0x265/0x280 [ 64.793784][ T4940] should_failslab+0x8c/0xb0 [ 64.793809][ T4940] __kvmalloc_node_noprof+0x12e/0x670 [ 64.793867][ T4940] ? nf_tables_newset+0xde3/0x14e0 [ 64.793891][ T4940] nf_tables_newset+0xde3/0x14e0 [ 64.794054][ T4940] nfnetlink_rcv+0xbc9/0x16c0 [ 64.794144][ T4940] ? kmem_cache_free+0xe4/0x3d0 [ 64.794278][ T4940] netlink_unicast+0x5c0/0x690 [ 64.794314][ T4940] netlink_sendmsg+0x58b/0x6b0 [ 64.794337][ T4940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.794357][ T4940] __sock_sendmsg+0x145/0x180 [ 64.794381][ T4940] ____sys_sendmsg+0x31e/0x4e0 [ 64.794484][ T4940] ___sys_sendmsg+0x17b/0x1d0 [ 64.794627][ T4940] __x64_sys_sendmsg+0xd4/0x160 [ 64.794858][ T4940] x64_sys_call+0x191e/0x3000 [ 64.794900][ T4940] do_syscall_64+0xd2/0x200 [ 64.794920][ T4940] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.794958][ T4940] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.794992][ T4940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.795123][ T4940] RIP: 0033:0x7f9640bbefc9 [ 64.795139][ T4940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.795159][ T4940] RSP: 002b:00007f963f61f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.795180][ T4940] RAX: ffffffffffffffda RBX: 00007f9640e15fa0 RCX: 00007f9640bbefc9 [ 64.795204][ T4940] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 64.795217][ T4940] RBP: 00007f963f61f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.795229][ T4940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.795239][ T4940] R13: 00007f9640e16038 R14: 00007f9640e15fa0 R15: 00007ffec5dbca38 [ 64.795258][ T4940] [ 64.867477][ T4943] syzkaller1: entered promiscuous mode [ 65.052441][ T4943] syzkaller1: entered allmulticast mode [ 65.236989][ T4977] loop1: detected capacity change from 0 to 136 [ 65.244087][ T4977] Attempt to read inode for relocated directory [ 65.260233][ T4977] syz.1.451: attempt to access beyond end of device [ 65.260233][ T4977] loop1: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 65.277028][ T4977] syz.1.451: attempt to access beyond end of device [ 65.277028][ T4977] loop1: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 65.302338][ T3005] udevd[3005]: worker [3309] terminated by signal 33 (Unknown signal 33) [ 65.310979][ T3005] udevd[3005]: worker [3309] failed while handling '/devices/virtual/block/loop1' [ 65.360784][ T4987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.407034][ T29] audit: type=1400 audit(1761871000.874:4973): avc: denied { bind } for pid=4984 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.426320][ T29] audit: type=1400 audit(1761871000.874:4974): avc: denied { name_bind } for pid=4984 comm="syz.0.455" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 65.448070][ T29] audit: type=1400 audit(1761871000.874:4975): avc: denied { node_bind } for pid=4984 comm="syz.0.455" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 65.448103][ T29] audit: type=1326 audit(1761871000.884:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 65.448198][ T29] audit: type=1326 audit(1761871000.884:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 65.517518][ T29] audit: type=1326 audit(1761871000.884:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 65.517578][ T29] audit: type=1326 audit(1761871000.884:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9493efc9 code=0x7ffc0000 [ 65.611169][ T4989] tmpfs: Unknown parameter 'mÂLave' [ 65.777166][ T5000] bridge0: entered promiscuous mode [ 65.937046][ T5005] syzkaller1: entered promiscuous mode [ 65.937067][ T5005] syzkaller1: entered allmulticast mode [ 66.046468][ T5009] loop4: detected capacity change from 0 to 1024 [ 66.058901][ T5009] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.058940][ T5009] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.079984][ T5009] JBD2: no valid journal superblock found [ 66.085805][ T5009] EXT4-fs (loop4): Could not load journal inode [ 66.157292][ T5014] loop4: detected capacity change from 0 to 136 [ 66.186001][ T5014] Attempt to read inode for relocated directory [ 66.196716][ T5014] syz.4.465: attempt to access beyond end of device [ 66.196716][ T5014] loop4: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 66.197976][ T5014] syz.4.465: attempt to access beyond end of device [ 66.197976][ T5014] loop4: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 66.346672][ T5026] tmpfs: Unknown parameter 'mÂLave' [ 66.599765][ T4999] bridge0: left promiscuous mode [ 66.603937][ T5046] tipc: Started in network mode [ 66.609785][ T5046] tipc: Node identity 367cdec7f46e, cluster identity 4711 [ 66.617080][ T5046] tipc: Enabled bearer , priority 0 [ 66.624029][ T5045] tipc: Resetting bearer [ 66.677475][ T5045] tipc: Disabling bearer [ 66.713558][ T5051] tmpfs: Unknown parameter 'mÂLave' [ 66.841720][ T5060] loop1: detected capacity change from 0 to 1024 [ 66.849568][ T5060] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.860597][ T5060] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.862958][ T5060] JBD2: no valid journal superblock found [ 66.863012][ T5060] EXT4-fs (loop1): Could not load journal inode [ 66.945886][ T5065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 66.966053][ T5066] dummy0: entered promiscuous mode [ 66.966089][ T5066] macsec1: entered promiscuous mode [ 66.972002][ T5066] dummy0: left promiscuous mode [ 67.787929][ T5082] bridge0: entered promiscuous mode [ 68.054368][ T5109] tmpfs: Unknown parameter 'mÂLave' [ 68.056558][ T5112] loop1: detected capacity change from 0 to 136 [ 68.082120][ T5116] program syz.3.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.100760][ T5112] Attempt to read inode for relocated directory [ 68.158012][ T5121] loop1: detected capacity change from 0 to 1024 [ 68.166132][ T5121] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.177121][ T5121] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.195788][ T5121] JBD2: no valid journal superblock found [ 68.201582][ T5121] EXT4-fs (loop1): Could not load journal inode [ 68.230664][ T5123] FAULT_INJECTION: forcing a failure. [ 68.230664][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.243939][ T5123] CPU: 1 UID: 0 PID: 5123 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.243971][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.244026][ T5123] Call Trace: [ 68.244033][ T5123] [ 68.244042][ T5123] __dump_stack+0x1d/0x30 [ 68.244068][ T5123] dump_stack_lvl+0xe8/0x140 [ 68.244091][ T5123] dump_stack+0x15/0x1b [ 68.244109][ T5123] should_fail_ex+0x265/0x280 [ 68.244131][ T5123] should_fail+0xb/0x20 [ 68.244182][ T5123] should_fail_usercopy+0x1a/0x20 [ 68.244203][ T5123] _copy_to_user+0x20/0xa0 [ 68.244231][ T5123] simple_read_from_buffer+0xb5/0x130 [ 68.244259][ T5123] proc_fail_nth_read+0x10e/0x150 [ 68.244387][ T5123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.244425][ T5123] vfs_read+0x1a8/0x770 [ 68.244497][ T5123] ? __rcu_read_unlock+0x4f/0x70 [ 68.244562][ T5123] ? __fget_files+0x184/0x1c0 [ 68.244599][ T5123] ksys_read+0xda/0x1a0 [ 68.244631][ T5123] __x64_sys_read+0x40/0x50 [ 68.244661][ T5123] x64_sys_call+0x27c0/0x3000 [ 68.244709][ T5123] do_syscall_64+0xd2/0x200 [ 68.244731][ T5123] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.244763][ T5123] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.244800][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.244826][ T5123] RIP: 0033:0x7fa45901d9dc [ 68.244919][ T5123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.244935][ T5123] RSP: 002b:00007fa457a7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.245002][ T5123] RAX: ffffffffffffffda RBX: 00007fa459275fa0 RCX: 00007fa45901d9dc [ 68.245013][ T5123] RDX: 000000000000000f RSI: 00007fa457a7f0a0 RDI: 0000000000000007 [ 68.245025][ T5123] RBP: 00007fa457a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.245036][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.245054][ T5123] R13: 00007fa459276038 R14: 00007fa459275fa0 R15: 00007ffd1c1bc2e8 [ 68.245073][ T5123] [ 68.469108][ T5127] loop4: detected capacity change from 0 to 128 [ 68.482162][ T5127] loop4: detected capacity change from 0 to 512 [ 68.600869][ T5081] bridge0: left promiscuous mode [ 68.836750][ T5141] bridge0: entered promiscuous mode [ 68.859159][ T5144] loop0: detected capacity change from 0 to 136 [ 68.887136][ T5141] bridge0: left promiscuous mode [ 68.912524][ T5144] Attempt to read inode for relocated directory [ 69.119120][ T5149] bridge0: entered promiscuous mode [ 69.148107][ T5149] bridge0: left promiscuous mode [ 69.656538][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 69.656554][ T29] audit: type=1326 audit(1761871005.144:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.750376][ T5160] loop3: detected capacity change from 0 to 164 [ 69.757411][ T29] audit: type=1326 audit(1761871005.154:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.757529][ T29] audit: type=1326 audit(1761871005.154:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.804294][ T29] audit: type=1326 audit(1761871005.164:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.804329][ T29] audit: type=1326 audit(1761871005.164:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.804480][ T29] audit: type=1326 audit(1761871005.164:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.874643][ T29] audit: type=1326 audit(1761871005.164:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.898003][ T29] audit: type=1400 audit(1761871005.164:5401): avc: denied { write } for pid=5151 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.898093][ T29] audit: type=1326 audit(1761871005.164:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45901efc9 code=0x7ffc0000 [ 69.940565][ T29] audit: type=1326 audit(1761871005.164:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa45901d810 code=0x7ffc0000 [ 70.019511][ T5162] syzkaller1: entered promiscuous mode [ 70.019536][ T5162] syzkaller1: entered allmulticast mode [ 70.070133][ T5164] bridge0: entered promiscuous mode [ 70.076305][ T5168] pimreg: entered allmulticast mode [ 70.077170][ T5168] pimreg: left allmulticast mode [ 70.230412][ T5181] loop4: detected capacity change from 0 to 128 [ 70.247622][ T5183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.259726][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.392535][ T5196] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 70.408286][ T5196] net_ratelimit: 2 callbacks suppressed [ 70.408303][ T5196] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 70.736385][ T5227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.843619][ T5163] bridge0: left promiscuous mode [ 70.916379][ T5238] loop1: detected capacity change from 0 to 256 [ 71.086989][ T5253] loop3: detected capacity change from 0 to 128 [ 71.101542][ T5253] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.116182][ T5253] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.157889][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.408521][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.417110][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.486953][ T5294] random: crng reseeded on system resumption [ 71.748216][ T5326] loop2: detected capacity change from 0 to 512 [ 71.758401][ T5326] EXT4-fs: test_dummy_encryption option not supported [ 71.842052][ T5335] loop2: detected capacity change from 0 to 2048 [ 71.934269][ T5340] loop2: detected capacity change from 0 to 8192 [ 72.081526][ T5360] loop4: detected capacity change from 0 to 256 [ 72.150142][ T5365] loop1: detected capacity change from 0 to 128 [ 72.170161][ T5368] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 72.176761][ T5368] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.184265][ T5368] vhci_hcd vhci_hcd.0: Device attached [ 72.207551][ T5368] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.236358][ T5368] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.250085][ T5368] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.258252][ T5374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.606'. [ 72.267575][ T5374] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 72.282452][ T5368] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 72.289078][ T5368] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.296725][ T5368] vhci_hcd vhci_hcd.0: Device attached [ 72.307646][ T5378] loop2: detected capacity change from 0 to 512 [ 72.325583][ T5378] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 72.340851][ T5383] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 72.347515][ T5383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.355178][ T5383] vhci_hcd vhci_hcd.0: Device attached [ 72.365586][ T9] vhci_hcd: vhci_device speed not set [ 72.379064][ T5378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 72.401059][ T5368] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(13) [ 72.407689][ T5368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.415351][ T5368] vhci_hcd vhci_hcd.0: Device attached [ 72.425772][ T5378] System zones: 1-12 [ 72.427566][ T9] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 72.430067][ T5378] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 72.445772][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.476170][ T5378] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 5: comm syz.2.608: lblock 0 mapped to illegal pblock 5 (length 1) [ 72.490175][ T5378] EXT4-fs (loop2): Remounting filesystem read-only [ 72.496756][ T5378] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.608: error -117 reading directory block [ 72.527187][ T5368] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(16) [ 72.533901][ T5368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.541535][ T5368] vhci_hcd vhci_hcd.0: Device attached [ 72.547328][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.564617][ T5397] vhci_hcd: connection closed [ 72.564652][ T5375] vhci_hcd: connection closed [ 72.564654][ T5384] vhci_hcd: connection closed [ 72.564932][ T2510] vhci_hcd: stop threads [ 72.583061][ T2510] vhci_hcd: release socket [ 72.587618][ T2510] vhci_hcd: disconnect device [ 72.595470][ T5369] vhci_hcd: connection reset by peer [ 72.614124][ T5392] vhci_hcd: connection closed [ 72.647675][ T2510] vhci_hcd: stop threads [ 72.656712][ T2510] vhci_hcd: release socket [ 72.657528][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.661134][ T2510] vhci_hcd: disconnect device [ 72.685467][ T2510] vhci_hcd: stop threads [ 72.689786][ T2510] vhci_hcd: release socket [ 72.694209][ T2510] vhci_hcd: disconnect device [ 72.699136][ T2510] vhci_hcd: stop threads [ 72.703385][ T2510] vhci_hcd: release socket [ 72.707782][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.715675][ T2510] vhci_hcd: disconnect device [ 72.723697][ T5410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.749868][ T2510] vhci_hcd: stop threads [ 72.754146][ T2510] vhci_hcd: release socket [ 72.758637][ T2510] vhci_hcd: disconnect device [ 72.764250][ T5414] 9pnet_fd: Insufficient options for proto=fd [ 72.774152][ T5412] loop4: detected capacity change from 0 to 1024 [ 73.029141][ T5438] 9pnet_fd: Insufficient options for proto=fd [ 73.106877][ T5440] sctp: [Deprecated]: syz.1.631 (pid 5440) Use of int in max_burst socket option deprecated. [ 73.106877][ T5440] Use struct sctp_assoc_value instead [ 73.169053][ T5447] 9pnet_fd: Insufficient options for proto=fd [ 73.247168][ T5459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.324863][ T5466] loop4: detected capacity change from 0 to 512 [ 73.383660][ T5471] loop0: detected capacity change from 0 to 1024 [ 73.406242][ T3005] udevd[3005]: worker [3610] terminated by signal 33 (Unknown signal 33) [ 73.418502][ T5471] EXT4-fs: Ignoring removed orlov option [ 73.423849][ T5466] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 73.438485][ T3005] udevd[3005]: worker [3610] failed while handling '/devices/virtual/block/loop4' [ 73.466280][ T5479] batadv_slave_1: entered promiscuous mode [ 73.488330][ T5477] 9pnet_fd: Insufficient options for proto=fd [ 73.501581][ T5466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 73.525567][ T5466] System zones: 1-12 [ 73.529684][ T5466] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 73.622803][ T5466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.706231][ T5466] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 5: comm syz.4.642: lblock 0 mapped to illegal pblock 5 (length 1) [ 73.720211][ T5466] EXT4-fs (loop4): Remounting filesystem read-only [ 73.726748][ T5466] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.642: error -117 reading directory block [ 73.794313][ T5507] loop3: detected capacity change from 0 to 512 [ 73.811382][ T5504] loop1: detected capacity change from 0 to 128 [ 73.844798][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.864504][ T5507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.910910][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.953845][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.972645][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.055186][ T5523] loop1: detected capacity change from 0 to 512 [ 74.173708][ T5535] loop0: detected capacity change from 0 to 512 [ 74.229377][ T5535] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 74.255783][ T5535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 74.283304][ T5535] System zones: 1-12 [ 74.291892][ T5548] loop2: detected capacity change from 0 to 256 [ 74.296235][ T5535] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 74.378852][ T5535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.428070][ T5535] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 5: comm syz.0.673: lblock 0 mapped to illegal pblock 5 (length 1) [ 74.442079][ T5535] EXT4-fs (loop0): Remounting filesystem read-only [ 74.448672][ T5535] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.673: error -117 reading directory block [ 74.528634][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.572347][ T5570] loop2: detected capacity change from 0 to 1024 [ 74.623406][ T5570] ext4: Unknown parameter 'nouser_xattr' [ 74.674847][ T5570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 74.780940][ T5593] loop2: detected capacity change from 0 to 1024 [ 74.826670][ T5593] EXT4-fs: Ignoring removed orlov option [ 74.845977][ T5597] 9pnet_fd: Insufficient options for proto=fd [ 74.886034][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.909678][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.024591][ T5613] loop1: detected capacity change from 0 to 128 [ 75.075635][ T5619] loop2: detected capacity change from 0 to 128 [ 75.134321][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 75.134338][ T29] audit: type=1400 audit(1761871010.614:5442): avc: denied { create } for pid=5612 comm="syz.1.706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.184768][ T5627] 9pnet_fd: Insufficient options for proto=fd [ 75.225314][ T29] audit: type=1400 audit(1761871010.664:5443): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.307481][ T29] audit: type=1326 audit(1761871010.794:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.350225][ T5637] tmpfs: Unknown parameter 'mÂLave' [ 75.355703][ T29] audit: type=1326 audit(1761871010.794:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.379188][ T29] audit: type=1326 audit(1761871010.794:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.402538][ T29] audit: type=1326 audit(1761871010.794:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.425957][ T29] audit: type=1326 audit(1761871010.794:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.425985][ T29] audit: type=1326 audit(1761871010.794:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.426016][ T29] audit: type=1326 audit(1761871010.794:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.426054][ T29] audit: type=1326 audit(1761871010.814:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.2.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b0a2efc9 code=0x7ffc0000 [ 75.513914][ T5648] loop0: detected capacity change from 0 to 256 [ 75.930449][ T5675] 9pnet_fd: Insufficient options for proto=fd [ 75.949481][ T5678] loop2: detected capacity change from 0 to 512 [ 75.970741][ T5679] loop1: detected capacity change from 0 to 256 [ 75.982263][ T5678] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 75.995989][ T5678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 76.032513][ T5678] System zones: 1-12 [ 76.047330][ T5678] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 76.105290][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.165179][ T5678] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 5: comm syz.2.735: lblock 0 mapped to illegal pblock 5 (length 1) [ 76.179269][ T5678] EXT4-fs (loop2): Remounting filesystem read-only [ 76.185850][ T5678] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.735: error -117 reading directory block [ 76.229744][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.430773][ T5722] loop4: detected capacity change from 0 to 512 [ 76.470412][ T5722] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 76.488268][ T5722] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 76.505555][ T5722] System zones: 1-12 [ 76.515697][ T5722] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 76.534428][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.548790][ T5722] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 5: comm syz.4.754: lblock 0 mapped to illegal pblock 5 (length 1) [ 76.562707][ T5722] EXT4-fs (loop4): Remounting filesystem read-only [ 76.569370][ T5722] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.754: error -117 reading directory block [ 76.638257][ T5738] loop2: detected capacity change from 0 to 512 [ 76.658421][ T5738] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.666421][ T5738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 76.691750][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.715600][ T5738] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 76.724120][ T5738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 76.777000][ T5738] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.762: dx entry: limit 65535 != root limit 120 [ 76.777632][ T5746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.789262][ T5738] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.762: Corrupt directory, running e2fsck is recommended [ 76.878133][ T5754] program syz.3.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.961052][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.067142][ T5777] loop3: detected capacity change from 0 to 256 [ 77.069823][ T5774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.108732][ T5777] FAT-fs (loop3): codepage cp932 not found [ 77.189612][ T5788] loop3: detected capacity change from 0 to 512 [ 77.219679][ T5788] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 77.221730][ T5791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.786'. [ 77.262705][ T5788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 77.297750][ T5788] System zones: 1-12 [ 77.301855][ T5788] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.333578][ T5788] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.785: Inode bitmap for bg 0 marked uninitialized [ 77.391355][ T5788] EXT4-fs (loop3): Remounting filesystem read-only [ 77.412481][ T5788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.448106][ T5788] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.785: error -117 reading directory block [ 77.500790][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.595609][ T9] vhci_hcd: vhci_device speed not set [ 77.715734][ T5852] loop2: detected capacity change from 0 to 2048 [ 77.749439][ T5855] loop4: detected capacity change from 0 to 512 [ 77.804319][ T5855] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.812369][ T5855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 77.825570][ T5855] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 77.863197][ T5855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.877971][ T5855] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.815: dx entry: limit 65535 != root limit 120 [ 77.890038][ T5855] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.815: Corrupt directory, running e2fsck is recommended [ 77.903287][ T5872] loop0: detected capacity change from 0 to 2048 [ 77.954674][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.993506][ T5492] Alternate GPT is invalid, using primary GPT. [ 78.000076][ T5492] loop0: p2 p3 p7 [ 78.016722][ T5872] Alternate GPT is invalid, using primary GPT. [ 78.023180][ T5872] loop0: p2 p3 p7 [ 78.090534][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 78.091609][ T5494] udevd[5494]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 78.110451][ T5492] udevd[5492]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 78.169213][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 78.172094][ T5492] udevd[5492]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 78.192616][ T5494] udevd[5494]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 78.204678][ T5900] loop2: detected capacity change from 0 to 512 [ 78.229413][ T5900] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 78.237417][ T5900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 78.258090][ T5900] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 78.267177][ T5900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.280910][ T5900] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.837: dx entry: limit 65535 != root limit 120 [ 78.292996][ T5900] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.837: Corrupt directory, running e2fsck is recommended [ 78.316415][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.464523][ T5927] loop2: detected capacity change from 0 to 2048 [ 78.503463][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.508381][ T5933] loop3: detected capacity change from 0 to 128 [ 78.515872][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.547017][ T5939] loop2: detected capacity change from 0 to 128 [ 78.553044][ T5933] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 78.560950][ T5933] FAT-fs (loop3): Filesystem has been set read-only [ 78.684393][ T5958] program syz.1.865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.710913][ T5961] loop2: detected capacity change from 0 to 256 [ 78.776343][ T5972] loop2: detected capacity change from 0 to 512 [ 78.794306][ T5972] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 78.832631][ T5972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 78.856530][ T5972] System zones: 1-12 [ 78.860789][ T5972] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 78.871837][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 78.890550][ T5972] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 5: comm syz.2.872: lblock 0 mapped to illegal pblock 5 (length 1) [ 78.904469][ T5972] EXT4-fs (loop2): Remounting filesystem read-only [ 78.911097][ T5972] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.872: error -117 reading directory block [ 78.957419][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.975775][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'. [ 79.019137][ T5999] loop2: detected capacity change from 0 to 256 [ 79.069959][ T6009] program syz.0.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.119420][ T6017] loop1: detected capacity change from 0 to 512 [ 79.130638][ T6017] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 79.141363][ T6017] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 79.150557][ T6017] System zones: 1-12 [ 79.162661][ T6017] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 79.199828][ T6017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.228135][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.245338][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.300242][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.310655][ T6039] loop3: detected capacity change from 0 to 512 [ 79.345106][ T6039] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 79.353156][ T6039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 79.380891][ T6039] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.391507][ T6047] program syz.2.905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.400893][ T6039] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.903: iget: bad i_size value: 12154761577498 [ 79.423753][ T6039] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.903: couldn't read orphan inode 13 (err -117) [ 79.456287][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.489965][ T6051] syzkaller0: entered promiscuous mode [ 79.495738][ T6051] syzkaller0: entered allmulticast mode [ 79.506689][ T6039] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.903: dx entry: limit 65535 != root limit 120 [ 79.518787][ T6039] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.903: Corrupt directory, running e2fsck is recommended [ 79.532287][ T6053] loop2: detected capacity change from 0 to 7 [ 79.583654][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.613917][ T6058] 9pnet_fd: Insufficient options for proto=fd [ 79.661617][ T6063] loop2: detected capacity change from 0 to 512 [ 79.696333][ T6063] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 79.710537][ T6063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 79.731020][ T6063] System zones: 1-12 [ 79.735032][ T6063] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 79.842940][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.896903][ T6079] program syz.0.919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.904617][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 79.915128][ T6081] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 79.915231][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.929613][ T6081] team1: entered promiscuous mode [ 79.938280][ T6081] team1: entered allmulticast mode [ 80.053189][ T6098] loop2: detected capacity change from 0 to 7 [ 80.090053][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.121337][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.190203][ T6121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.214864][ T6125] loop4: detected capacity change from 0 to 512 [ 80.236889][ T6125] EXT4-fs: Ignoring removed i_version option [ 80.242945][ T6125] EXT4-fs: Ignoring removed bh option [ 80.300682][ T6138] loop1: detected capacity change from 0 to 1024 [ 80.308292][ T6138] EXT4-fs: inline encryption not supported [ 80.314237][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 80.314312][ T29] audit: type=1400 audit(1761871015.794:5492): avc: denied { bind } for pid=6139 comm="syz.4.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.341060][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.374766][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.383385][ T29] audit: type=1400 audit(1761871015.804:5493): avc: denied { remount } for pid=6137 comm="syz.1.946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.481689][ T29] audit: type=1400 audit(1761871015.964:5494): avc: denied { read } for pid=6159 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.540765][ T6162] loop3: detected capacity change from 0 to 4096 [ 80.551364][ T6162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.569688][ T29] audit: type=1400 audit(1761871016.054:5495): avc: denied { read } for pid=6161 comm="syz.3.956" name="file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.591790][ T29] audit: type=1400 audit(1761871016.054:5496): avc: denied { open } for pid=6161 comm="syz.3.956" path="/180/file1/file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.614893][ T29] audit: type=1400 audit(1761871016.054:5497): avc: denied { ioctl } for pid=6161 comm="syz.3.956" path="/180/file1/file3" dev="loop3" ino=16 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.642421][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.665338][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.960'. [ 80.691582][ T6178] loop3: detected capacity change from 0 to 256 [ 80.707794][ T6178] FAT-fs (loop3): codepage cp932 not found [ 80.763038][ T29] audit: type=1400 audit(1761871016.244:5498): avc: denied { create } for pid=6184 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.799126][ T29] audit: type=1400 audit(1761871016.264:5499): avc: denied { bind } for pid=6184 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.818449][ T29] audit: type=1400 audit(1761871016.264:5500): avc: denied { name_bind } for pid=6184 comm="syz.3.966" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.838855][ T29] audit: type=1400 audit(1761871016.264:5501): avc: denied { node_bind } for pid=6184 comm="syz.3.966" saddr=fe80::31 src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 80.883281][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 80.894255][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 80.900742][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 80.934121][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 80.943004][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 80.951864][ T6197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.077744][ T6216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.161840][ T6226] loop4: detected capacity change from 0 to 512 [ 81.176408][ T6226] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.184368][ T6226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 81.193457][ T6226] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 81.201969][ T6226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.233153][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.271432][ T6240] loop4: detected capacity change from 0 to 256 [ 81.320304][ T6246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.478283][ T6270] loop3: detected capacity change from 0 to 512 [ 81.601258][ T1084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.611601][ T1084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44433 - 0 [ 81.669132][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.680793][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.686600][ T1084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.698822][ T1084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44433 - 0 [ 81.758982][ T1084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.769399][ T1084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44433 - 0 [ 81.828492][ T1084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.838852][ T1084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44433 - 0 [ 81.925926][ T1084] bridge_slave_1: left allmulticast mode [ 81.931604][ T1084] bridge_slave_1: left promiscuous mode [ 81.937362][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.946630][ T1084] bridge_slave_0: left allmulticast mode [ 81.952498][ T1084] bridge_slave_0: left promiscuous mode [ 81.958356][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.077517][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.087854][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.097815][ T1084] bond0 (unregistering): Released all slaves [ 82.166529][ T1084] hsr_slave_0: left promiscuous mode [ 82.178216][ T1084] hsr_slave_1: left promiscuous mode [ 82.183808][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.191396][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.199060][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.206533][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.217800][ T1084] veth1_macvtap: left promiscuous mode [ 82.223319][ T1084] veth0_macvtap: left promiscuous mode [ 82.233577][ T1084] veth1_vlan: left promiscuous mode [ 82.240765][ T1084] veth0_vlan: left promiscuous mode [ 82.326077][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 82.346087][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 82.376957][ T6343] 9pnet_fd: Insufficient options for proto=fd [ 82.402267][ T6288] chnl_net:caif_netlink_parms(): no params data found [ 82.551122][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.558302][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.602890][ T6288] bridge_slave_0: entered allmulticast mode [ 82.621527][ T6288] bridge_slave_0: entered promiscuous mode [ 82.629855][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.637185][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.667881][ T6288] bridge_slave_1: entered allmulticast mode [ 82.673619][ T6383] 9pnet_fd: Insufficient options for proto=fd [ 82.684120][ T6288] bridge_slave_1: entered promiscuous mode [ 82.721013][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.746776][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.801119][ T6288] team0: Port device team_slave_0 added [ 82.809722][ T6288] team0: Port device team_slave_1 added [ 82.841643][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.848694][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.874651][ T6288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.917091][ T6412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1036'. [ 82.921967][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.933134][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.959136][ T6288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.995390][ T6288] hsr_slave_0: entered promiscuous mode [ 83.006561][ T6288] hsr_slave_1: entered promiscuous mode [ 83.039594][ T6419] 9pnet_fd: Insufficient options for proto=fd [ 83.054229][ T6288] debugfs: 'hsr0' already exists in 'hsr' [ 83.060013][ T6288] Cannot create hsr debugfs directory [ 83.081419][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 83.220455][ T6440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.246586][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1049'. [ 83.272801][ T6288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.287387][ T6288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.299330][ T6288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.308425][ T6288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.338269][ T6452] loop3: detected capacity change from 0 to 512 [ 83.374015][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.406292][ T6452] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.410200][ T6288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.428609][ T6288] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.448046][ T6288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.458428][ T6288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.472423][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.479563][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.495645][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.501709][ T6452] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.502786][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.597738][ T6481] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 83.612543][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.766333][ T6497] 9pnet_fd: Insufficient options for proto=fd [ 83.793761][ T6288] veth0_vlan: entered promiscuous mode [ 83.807424][ T6288] veth1_vlan: entered promiscuous mode [ 83.853837][ T6288] veth0_macvtap: entered promiscuous mode [ 83.861400][ T6288] veth1_macvtap: entered promiscuous mode [ 83.888284][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.900074][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.916113][ T2510] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.930793][ T2510] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.939780][ T2510] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950875][ T2510] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.002503][ T6516] 9pnet_fd: Insufficient options for proto=fd [ 84.096736][ T6528] 9pnet_fd: Insufficient options for proto=fd [ 84.173311][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.381658][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.406885][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.435961][ T6546] syzkaller0: entered promiscuous mode [ 84.441523][ T6546] syzkaller0: entered allmulticast mode [ 84.560991][ T6575] loop0: detected capacity change from 0 to 512 [ 85.088762][ T6603] loop3: detected capacity change from 0 to 256 [ 85.134707][ T6603] FAT-fs (loop3): codepage cp950 not found [ 85.296104][ T6612] xt_TCPMSS: Only works on TCP SYN packets [ 85.645136][ T6629] loop5: detected capacity change from 0 to 512 [ 85.760151][ T6629] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 85.771070][ T6629] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 85.781152][ T6629] EXT4-fs (loop5): group descriptors corrupted! [ 85.918240][ T6640] loop2: detected capacity change from 0 to 1024 [ 86.033573][ T6651] smc: net device bond0 applied user defined pnetid SYZ2 [ 86.040994][ T6651] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1125'. [ 86.068172][ T6651] smc: removing net device bond0 with user defined pnetid SYZ2 [ 86.076679][ T6651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.086701][ T6651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.096639][ T6651] bond0 (unregistering): Released all slaves [ 86.252057][ T6665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6665 comm=syz.4.1131 [ 86.264604][ T6665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6665 comm=syz.4.1131 [ 86.440999][ T6683] netlink: 'syz.4.1140': attribute type 5 has an invalid length. [ 86.448807][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 86.506730][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 86.506747][ T29] audit: type=1400 audit(1761871021.994:5563): avc: denied { name_bind } for pid=6688 comm="syz.2.1143" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.656430][ T6707] loop2: detected capacity change from 0 to 128 [ 86.713365][ T29] audit: type=1400 audit(1761871022.194:5564): avc: denied { connect } for pid=6710 comm="syz.4.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.727182][ T6712] 9pnet_fd: Insufficient options for proto=fd [ 86.747298][ T29] audit: type=1400 audit(1761871022.234:5565): avc: denied { create } for pid=6710 comm="syz.4.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 86.784471][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.821542][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.862457][ T29] audit: type=1400 audit(1761871022.334:5566): avc: denied { create } for pid=6725 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.882297][ T29] audit: type=1400 audit(1761871022.334:5567): avc: denied { connect } for pid=6725 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.902223][ T29] audit: type=1400 audit(1761871022.344:5568): avc: denied { write } for pid=6725 comm="syz.4.1161" path="socket:[16413]" dev="sockfs" ino=16413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.988998][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.997739][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.604003][ T6752] loop2: detected capacity change from 0 to 512 [ 87.650045][ T6747] 9pnet: Could not find request transport: fd0x0000000000000003 [ 87.659282][ T6754] loop3: detected capacity change from 0 to 512 [ 87.716313][ T6754] EXT4-fs: Ignoring removed bh option [ 87.750132][ T6760] loop0: detected capacity change from 0 to 256 [ 87.760815][ T6754] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 87.803802][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1176'. [ 87.828126][ T6754] EXT4-fs (loop3): 1 truncate cleaned up [ 87.859011][ T6774] netlink: 'syz.5.1180': attribute type 11 has an invalid length. [ 87.860014][ T6754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.941043][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.956455][ T6779] loop2: detected capacity change from 0 to 256 [ 88.148363][ T29] audit: type=1400 audit(1761871023.634:5569): avc: denied { getopt } for pid=6795 comm="syz.3.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.183980][ T6811] loop0: detected capacity change from 0 to 512 [ 88.192602][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.215324][ T6811] EXT4-fs: Ignoring removed bh option [ 88.230970][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.242030][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.255125][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.328761][ T6828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.411469][ T6836] netlink: 'syz.5.1208': attribute type 10 has an invalid length. [ 88.449574][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 88.452171][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.465582][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1208'. [ 88.466979][ T6836] team0: Port device bond0 added [ 88.513921][ T6840] syzkaller0: entered promiscuous mode [ 88.519632][ T6840] syzkaller0: entered allmulticast mode [ 88.547587][ T6843] team0 (unregistering): Port device team_slave_0 removed [ 88.556975][ T6843] team0 (unregistering): Port device team_slave_1 removed [ 88.566985][ T6843] team0 (unregistering): Port device bond0 removed [ 88.670350][ T6852] loop2: detected capacity change from 0 to 256 [ 88.874665][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 88.888534][ T6872] team1: entered promiscuous mode [ 88.893613][ T6872] team1: entered allmulticast mode [ 88.905959][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'. [ 88.927247][ T6877] loop2: detected capacity change from 0 to 256 [ 89.131305][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1235'. [ 89.147601][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 89.163461][ T6904] batadv0: entered promiscuous mode [ 89.194191][ T6904] macvtap1: entered promiscuous mode [ 89.199705][ T6904] macvtap1: entered allmulticast mode [ 89.205105][ T6904] batadv0: entered allmulticast mode [ 89.214351][ T6904] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 89.236545][ T6912] batadv0: left allmulticast mode [ 89.241712][ T6912] batadv0: left promiscuous mode [ 89.249624][ T6920] loop2: detected capacity change from 0 to 7 [ 89.253438][ T6919] loop0: detected capacity change from 0 to 512 [ 89.374316][ T6934] loop5: detected capacity change from 0 to 2048 [ 89.381171][ T6934] EXT4-fs: inline encryption not supported [ 89.402991][ T6934] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.422716][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 89.423549][ T29] audit: type=1400 audit(1761871024.904:5570): avc: denied { remove_name } for pid=6933 comm="syz.5.1249" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.436136][ T6934] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1249: bg 0: block 120: padding at end of block bitmap is not set [ 89.454341][ T29] audit: type=1400 audit(1761871024.904:5571): avc: denied { rename } for pid=6933 comm="syz.5.1249" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.491408][ T6934] EXT4-fs (loop5): Remounting filesystem read-only [ 89.498034][ T6934] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 89.500945][ T29] audit: type=1400 audit(1761871024.984:5572): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.540386][ T6288] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 89.613257][ T6949] loop2: detected capacity change from 0 to 7 [ 89.840209][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.865840][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.887675][ T6988] netlink: 'syz.5.1271': attribute type 1 has an invalid length. [ 89.895476][ T6988] netlink: 'syz.5.1271': attribute type 2 has an invalid length. [ 90.383851][ T7037] loop5: detected capacity change from 0 to 1024 [ 90.384256][ T7037] EXT4-fs: Ignoring removed oldalloc option [ 90.384294][ T7037] EXT4-fs: Ignoring removed bh option [ 90.419106][ T7037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec118, mo2=0003] [ 90.419135][ T7037] System zones: 1-12 [ 90.419719][ T7037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.490783][ T7046] bond1: option arp_interval: invalid value (18446744073709551611) [ 90.490878][ T7046] bond1: option arp_interval: allowed values 0 - 2147483647 [ 90.492743][ T7046] bond1 (unregistering): Released all slaves [ 90.512849][ T6288] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.814987][ T7076] 9pnet_fd: Insufficient options for proto=fd [ 90.925916][ T7090] loop2: detected capacity change from 0 to 7 [ 91.144927][ T7111] loop3: detected capacity change from 0 to 256 [ 91.160051][ T6881] ================================================================== [ 91.168155][ T6881] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 91.175273][ T6881] [ 91.177593][ T6881] write to 0xffff888106c95264 of 4 bytes by task 5492 on cpu 1: [ 91.185214][ T6881] shmem_symlink+0x387/0x3d0 [ 91.189808][ T6881] vfs_symlink+0xd4/0x1e0 [ 91.194144][ T6881] do_symlinkat+0xc7/0x3c0 [ 91.198582][ T6881] __x64_sys_symlink+0x50/0x60 [ 91.203341][ T6881] x64_sys_call+0x23d0/0x3000 [ 91.208012][ T6881] do_syscall_64+0xd2/0x200 [ 91.212515][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.218414][ T6881] [ 91.220735][ T6881] read to 0xffff888106c95264 of 4 bytes by task 6881 on cpu 0: [ 91.228274][ T6881] fill_mg_cmtime+0x5b/0x260 [ 91.232871][ T6881] generic_fillattr+0x24a/0x340 [ 91.237723][ T6881] shmem_getattr+0x181/0x200 [ 91.242312][ T6881] vfs_getattr_nosec+0x146/0x1e0 [ 91.247252][ T6881] vfs_statx+0x113/0x390 [ 91.251499][ T6881] vfs_fstatat+0x115/0x170 [ 91.255921][ T6881] __se_sys_newfstatat+0x55/0x260 [ 91.260962][ T6881] __x64_sys_newfstatat+0x55/0x70 [ 91.265999][ T6881] x64_sys_call+0x135a/0x3000 [ 91.270683][ T6881] do_syscall_64+0xd2/0x200 [ 91.275209][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.281102][ T6881] [ 91.283416][ T6881] value changed: 0x266988d0 -> 0x26af2a2a [ 91.289120][ T6881] [ 91.291434][ T6881] Reported by Kernel Concurrency Sanitizer on: [ 91.297609][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.306906][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.317042][ T6881] ================================================================== [ 91.353744][ T7111] FAT-fs (loop3): codepage cp932 not found