last executing test programs: 13.52181576s ago: executing program 0 (id=508): mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0xffffffffffffff95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xffffffff00000001}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x8000) 12.85294631s ago: executing program 0 (id=511): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 9.351744772s ago: executing program 3 (id=527): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x9}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffe}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 9.277964843s ago: executing program 3 (id=529): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_getparam(r1, &(0x7f00000001c0)) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 8.294008837s ago: executing program 3 (id=533): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, 0x0, &(0x7f0000000340)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") 6.379074805s ago: executing program 0 (id=538): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) link(&(0x7f00000001c0)='./bus\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x300, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 6.250225657s ago: executing program 4 (id=539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x9}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffe}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 5.931021332s ago: executing program 4 (id=540): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000400) fcntl$setstatus(0xffffffffffffffff, 0x403, 0x26c00) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 5.897518093s ago: executing program 4 (id=541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000001900010000000000000000001d01000005000d"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x24040846) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 4.666270971s ago: executing program 1 (id=545): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000340)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) 4.581007072s ago: executing program 1 (id=546): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000001100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0x300) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) 4.346707086s ago: executing program 4 (id=547): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002b0000000dbcb329d7bc663200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 4.135307398s ago: executing program 0 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b800800", @ANYBLOB="110008"], 0x8c}}, 0x0) 4.120990929s ago: executing program 4 (id=550): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(r3, &(0x7f0000000000)="fd4e09b370ad518c46af1dc2b8e01940dc8f25e60e723d810be7083e416328bf84ecead4d163f65e705a625c6a5dbbc9875d3f05003650bab25f58ce8c508cdb", 0x40, 0x8000c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 4.013126191s ago: executing program 0 (id=551): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x143c62, 0x0) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) semtimedop(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) 3.757627404s ago: executing program 0 (id=554): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, 0x0, &(0x7f0000000340)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") 3.653965526s ago: executing program 2 (id=555): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3f5, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)="27dfa77f183b9748b5accda3141b30da89999a54768466f42c665cd25d40bc577fb1bc22d50b0577c2e8f0f767bada35c07613d323a58083553271c0cff36594409215764a7076e38ab7370cf83065feb53935211f", 0x55}, {&(0x7f00000004c0)="458a5d246faa19a7f860334e3e1793e1701ab1531c194d32d84ea852329c8575521379ea29429d3a692fffa0584a952544215324b3a3fce2a424148cc741fb954779e49766ef37dc7102ae68291c8faf559384f2b280e98cd41782e6bcc3b7049cbf1433d762a63bc95c8545ce245b3719a59c92c2c2d945d5", 0x79}, {&(0x7f0000000540)="21f2da6817f3bc5e4caea73f9ce257b9ce6a9e82cdb9af82e8cd15bc53bfaa89fde71df5719376a72bcfb0fe7bf7a0642884a8e6505dcf0937a9a78d5f8d6572bbf5e780aff9527480755b040b7380d8351a783b9cb504ba9f028eab1f42d2d9f6fb74c8f3f17d3bff1ae539d7d06320ac0054823408c0767107a8697a08720a1ffc4b9c8970f4191d5d247a36b55ec9fb378d8263c2ffaf4fdc968140ff4394a94559022d6fcf09257be6f693a6ef83e62db40b4b3aa9a8bc058325", 0xbc}], 0x3, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x8040800}}], 0x1, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 3.37098109s ago: executing program 4 (id=556): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3.043079275s ago: executing program 2 (id=557): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f0000000680)=""/26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="3800000020000100000000000000000002000000"], 0x38}}, 0x0) 2.71136533s ago: executing program 1 (id=558): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x10000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x5, 0xffffffff, 0x4, 0x3, 0x2, 0x9, 0x7b, 0x0, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0) 2.074050749s ago: executing program 2 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.697468495s ago: executing program 3 (id=560): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) link(&(0x7f00000001c0)='./bus\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x300, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.045452674s ago: executing program 2 (id=561): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 1.036364414s ago: executing program 1 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b800800", @ANYBLOB="110008"], 0x8c}}, 0x0) 950.713455ms ago: executing program 2 (id=563): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000800) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 854.771357ms ago: executing program 1 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r9 = socket$kcm(0x2, 0x3, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r8, 0x4, r3, r0) r12 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r12, 0x0) shmat(r12, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 757.774039ms ago: executing program 2 (id=565): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_io_uring_setup(0x2070c4, &(0x7f0000000280)={0x0, 0x86ec, 0x10000, 0x1, 0x220, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000200)) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r7, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20080, &(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYRES8=r8]) 594.931171ms ago: executing program 1 (id=566): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(r3, &(0x7f0000000000)="fd4e09b370ad518c46af1dc2b8e01940dc8f25e60e723d810be7083e416328bf84ecead4d163f65e705a625c6a5dbbc9875d3f05003650bab25f58ce8c508cdb", 0x40, 0x8000c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 84.386298ms ago: executing program 3 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 0s ago: executing program 3 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file1/file0\x00', 0x6, &(0x7f0000000300), 0x0, 0xbf2, &(0x7f0000000c00)="$eJzs3M9rXHsVAPBzbya/mvgmT0R8bl5E5D0Qp2klD/sQbKXixoWgW6EhnZSQ6Q8ykZo0i4n+A6LiUnAjqMXShV13o+DWjbZbiwuhSEwURDRy50eSJjOTad7M3Lb5fOBmvt85995zzlwy997SmwDOrNnsRxrxTkRcSyKKzffTiBirjyYiao31drc3F/+1vbmYxN7et/6eRBIRO9ubi619Jc3XqeZkIiL++NUkPv6D43mr6xsrC5VKebU5P79288756vrGF5ZvLtwo3yjfuvDBl+Yvzn8wd2m+b73++y+XH/3zM1//a+0/v/rv/X/8+BdJXI7pZuxwH/0yG7P7n8lhhYhY6HeynIw0+zncZ1I4YaN0wEUBANBReuga7pNRjJE4uHgrxu/+lGtxAAAAQF/sjUTsAQAAAG+4pOf7/yT8WwEAAAC8jlr/D2Bne3NxZ3szYgDPwb7Knl+JiJlG/7vNpREpRK3+OhGjEXFuJ4nDj7Umjc0+stmIePb00oNnTxtPWw/iOeRualsR8an94794kD+p9z9Tf4r7eP/3+5R/9oVZ9hm8Hv2nEXG5D/lnj8yHffwBOJseX2mcyI6f/9L9659oc/4rtDl3nUbe57/W9d/useu/g/5HOlz/fbPHHPd++bO7nWJZ/19+9LXftJYsf/bacWeTPSbt0fOtiE8X2vWf7PefdOj/Wo85iv+7W+4Ue+n++2zv5xHvRfv+W5Luf5/o/NJypTzX+Nk2x9Yf5n/dKX/e/WfH/1yH/k86/nd6zPGdq1cfdoqd3H/6t7Hk2/XRWPOd7y2sra1eiBhLvnH8/Yvda2mt09pH1v/7n+3++9+u/+w7odb8HLJ7ga3mazb//pGcX7l/77fd+s/u//I8/tdPefx/2GOOz/3+R+93ih3c/zaWLP+z5NKDrjv8aY+JAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhjpBExHUla2h+naakUMRURn4hzaeV2de3zS7e/e+t6FouYidF0ablSnouIYmOeZPML9fHB/OKR+Rcj4u2I+Elxsj4vLd6uXM+7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPZNRcR0JGkpItKI2C2maamUd1UAAABA3828xLqjA6wDAAAAGJyXuf8HAAAAXk/u/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiwt999/CSJiNqHk/UlM9aMjZ608digqwMGKe0enh1WHcDwjeRdAJCbwuk3vdnPOoDhO/Ee/0UuF+ANlJwQn+gYGe97LQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ut575/GTJCJqH07Wl4gotGKjbbd4d4jVAYOU9rDOW0OoAxi+kW7BwvDqAIbPrzicXe3v8YGzJDkhPnGwTu3FyPjAagIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1TNdX5K0FBFpfZympVLExyJiJkaTpeVKeS4i3oqIPxdHx7P5eN5FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HfV9Y2VhUqlvGpgYNDjoDaYPSeDqHkiIk6zed7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5KG6vrGyUKmUV6t5VwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkrbq+sbJQqZRXq1MRUR/sv3N08LBzqOsg7x4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjP/wMAAP//xLIEYg==") r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x200010, &(0x7f0000000340)={[], [{@dont_appraise}]}, 0x0, 0x57a, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) kernel console output (not intermixed with test programs): 60.411563][ T29] audit: type=1326 audit(1751524218.802:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 60.434860][ T29] audit: type=1326 audit(1751524218.802:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 60.458204][ T29] audit: type=1326 audit(1751524218.802:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 60.481361][ T29] audit: type=1326 audit(1751524218.802:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 60.532120][ T4145] loop0: detected capacity change from 0 to 1024 [ 60.576555][ T4154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.119'. [ 60.586714][ T4145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.601433][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 60.669428][ T4160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.690697][ T4160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.762352][ T4162] loop4: detected capacity change from 0 to 1024 [ 60.771265][ T4162] EXT4-fs: Ignoring removed nobh option [ 60.794349][ T4164] loop1: detected capacity change from 0 to 1024 [ 60.795738][ T4162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.802002][ T4164] EXT4-fs: Ignoring removed bh option [ 60.818753][ T4164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.828690][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.832740][ T4162] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.122: Allocating blocks 385-513 which overlap fs metadata [ 60.868281][ T4162] EXT4-fs (loop4): pa ffff888106ad6070: logic 16, phys. 129, len 24 [ 60.876425][ T4162] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 60.903364][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.982943][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.113287][ T4175] loop4: detected capacity change from 0 to 512 [ 61.161619][ T4175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.238594][ T4175] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.595735][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.832872][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.055196][ T4193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.130'. [ 62.078566][ T4193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.130'. [ 62.213713][ T4197] loop3: detected capacity change from 0 to 512 [ 62.222696][ T4197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.237162][ T4197] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.244243][ T4197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.132: bg 0: block 248: padding at end of block bitmap is not set [ 62.259146][ T4197] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.132: Failed to acquire dquot type 1 [ 62.271085][ T4197] EXT4-fs (loop3): 1 truncate cleaned up [ 62.277539][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.291954][ T4197] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.132: deleted inode referenced: 12 [ 62.314792][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.404105][ T4204] loop2: detected capacity change from 0 to 1024 [ 62.424465][ T4204] EXT4-fs: Ignoring removed nobh option [ 62.517902][ T4204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.580699][ T4204] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.135: Allocating blocks 385-513 which overlap fs metadata [ 62.650920][ T4204] EXT4-fs (loop2): pa ffff888106a9f0e0: logic 16, phys. 129, len 24 [ 62.659025][ T4204] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 62.800629][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.941862][ T4219] loop0: detected capacity change from 0 to 256 [ 62.975662][ T4219] FAT-fs (loop0): codepage cp1255 not found [ 62.995831][ T4222] loop2: detected capacity change from 0 to 512 [ 63.296066][ T4222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.306695][ T4222] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.314275][ T4222] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.138: bg 0: block 248: padding at end of block bitmap is not set [ 63.331792][ T4222] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.138: Failed to acquire dquot type 1 [ 63.574043][ T4229] bridge_slave_0: left allmulticast mode [ 63.579808][ T4229] bridge_slave_0: left promiscuous mode [ 63.585515][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.722888][ T4229] bridge_slave_1: left allmulticast mode [ 63.728848][ T4229] bridge_slave_1: left promiscuous mode [ 63.734698][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.827627][ T4229] bond0: (slave bond_slave_0): Releasing backup interface [ 63.834963][ T4222] EXT4-fs (loop2): 1 truncate cleaned up [ 63.847884][ T4222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.863166][ T4229] bond0: (slave bond_slave_1): Releasing backup interface [ 63.876355][ T4229] team0: Port device team_slave_0 removed [ 63.970737][ T4229] team0: Port device team_slave_1 removed [ 63.983323][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.990869][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.091192][ T4229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.098896][ T4229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.137177][ T4231] loop4: detected capacity change from 0 to 1024 [ 64.168319][ T4231] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.196968][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.221777][ T4231] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.141: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.303747][ T4231] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.141: Failed to acquire dquot type 0 [ 64.337208][ T4231] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.141: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.371339][ T4240] loop3: detected capacity change from 0 to 512 [ 64.377637][ T4231] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.141: Invalid inode bitmap blk 0 in block_group 0 [ 64.400826][ T12] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.419174][ T4240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.433167][ T4240] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.433354][ T4231] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 64.566261][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 64.587496][ T4231] EXT4-fs (loop4): 1 orphan inode deleted [ 64.593667][ T4231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.621239][ T4231] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.141: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 64.670439][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.706097][ T4247] loop4: detected capacity change from 0 to 256 [ 64.751271][ T4247] FAT-fs (loop4): codepage cp857 not found [ 64.779884][ T4235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 65.234024][ T4253] loop1: detected capacity change from 0 to 256 [ 65.262867][ T4253] FAT-fs (loop1): codepage cp1255 not found [ 65.444285][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.923614][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 65.923631][ T29] audit: type=1326 audit(1751524224.442:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 65.974050][ T4269] loop4: detected capacity change from 0 to 1024 [ 65.981892][ T29] audit: type=1326 audit(1751524224.472:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.005174][ T29] audit: type=1326 audit(1751524224.472:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.028430][ T29] audit: type=1326 audit(1751524224.482:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.051773][ T29] audit: type=1326 audit(1751524224.482:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.075028][ T29] audit: type=1326 audit(1751524224.482:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.098312][ T29] audit: type=1326 audit(1751524224.482:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.121576][ T29] audit: type=1326 audit(1751524224.482:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.144822][ T29] audit: type=1326 audit(1751524224.482:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.168103][ T29] audit: type=1326 audit(1751524224.482:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 66.792519][ T4279] loop2: detected capacity change from 0 to 1024 [ 66.821918][ T4284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.155'. [ 66.911554][ T4289] loop3: detected capacity change from 0 to 1024 [ 66.924979][ T4289] EXT4-fs: Ignoring removed nobh option [ 66.939613][ T4289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.106973][ T4289] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.156: Allocating blocks 385-513 which overlap fs metadata [ 67.134589][ T4294] loop4: detected capacity change from 0 to 1024 [ 67.154000][ T4294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.179745][ T4289] EXT4-fs (loop3): pa ffff888106a9f1c0: logic 16, phys. 129, len 24 [ 67.187877][ T4289] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 67.260696][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.270600][ T4302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.160'. [ 67.371668][ T4313] loop3: detected capacity change from 0 to 512 [ 67.403786][ T4313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.421672][ T4313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.438315][ T4313] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.165: bg 0: block 248: padding at end of block bitmap is not set [ 67.455266][ T4313] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.165: Failed to acquire dquot type 1 [ 67.479035][ T4313] EXT4-fs (loop3): 1 truncate cleaned up [ 67.498053][ T4313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.526685][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.663614][ T4322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.680780][ T4322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.703159][ T4322] loop3: detected capacity change from 0 to 512 [ 67.725914][ T4322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.744467][ T4322] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.751785][ T4322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.166: bg 0: block 248: padding at end of block bitmap is not set [ 67.989223][ T4322] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.166: Failed to acquire dquot type 1 [ 68.008963][ T4322] EXT4-fs (loop3): 1 truncate cleaned up [ 68.015131][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.144169][ T4327] loop1: detected capacity change from 0 to 1024 [ 68.171230][ T4327] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.224270][ T4327] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.168: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.249749][ T4329] loop0: detected capacity change from 0 to 256 [ 68.260291][ T4327] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.168: Failed to acquire dquot type 0 [ 68.273137][ T4327] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.168: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.291065][ T4327] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.168: Invalid inode bitmap blk 0 in block_group 0 [ 68.291943][ T4329] FAT-fs (loop0): codepage cp857 not found [ 68.309719][ T51] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.344218][ T4327] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 68.353119][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 68.383453][ T4327] EXT4-fs (loop1): 1 orphan inode deleted [ 68.424716][ T4327] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.168: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 68.508411][ T4340] loop2: detected capacity change from 0 to 1024 [ 68.526581][ T4340] EXT4-fs: Ignoring removed nobh option [ 68.535974][ T4341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 68.557340][ T4337] loop1: detected capacity change from 0 to 1024 [ 68.609151][ T4346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 68.731943][ T4340] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.173: Allocating blocks 385-513 which overlap fs metadata [ 68.756949][ T4340] EXT4-fs (loop2): pa ffff888106a9f0e0: logic 16, phys. 129, len 24 [ 68.765143][ T4340] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 68.836788][ T4351] loop0: detected capacity change from 0 to 128 [ 68.910450][ T4351] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 68.918403][ T4351] FAT-fs (loop0): Filesystem has been set read-only [ 68.929499][ T4351] syz.0.175: attempt to access beyond end of device [ 68.929499][ T4351] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 68.945539][ T4351] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 68.953455][ T4351] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 68.963650][ T4351] syz.0.175: attempt to access beyond end of device [ 68.963650][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 68.977142][ T4351] syz.0.175: attempt to access beyond end of device [ 68.977142][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 68.993135][ T4354] syz.0.175: attempt to access beyond end of device [ 68.993135][ T4354] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.006724][ T4351] syz.0.175: attempt to access beyond end of device [ 69.006724][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.020578][ T4351] syz.0.175: attempt to access beyond end of device [ 69.020578][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.034581][ T4351] syz.0.175: attempt to access beyond end of device [ 69.034581][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.047937][ T4351] syz.0.175: attempt to access beyond end of device [ 69.047937][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.061608][ T4351] syz.0.175: attempt to access beyond end of device [ 69.061608][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.074966][ T4351] syz.0.175: attempt to access beyond end of device [ 69.074966][ T4351] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 69.141330][ T4358] program syz.1.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.779853][ T4370] hub 6-0:1.0: USB hub found [ 69.785156][ T4370] hub 6-0:1.0: 8 ports detected [ 69.842133][ T4374] loop2: detected capacity change from 0 to 256 [ 69.875037][ T4374] FAT-fs (loop2): codepage cp857 not found [ 69.952175][ T4383] loop2: detected capacity change from 0 to 1024 [ 69.963174][ T4383] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.990867][ T4383] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.183: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.007204][ T4383] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.183: Failed to acquire dquot type 0 [ 70.019982][ T4383] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.183: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.043270][ T4383] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.183: Invalid inode bitmap blk 0 in block_group 0 [ 70.064917][ T37] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.080289][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 70.093482][ T4383] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 70.109846][ T4383] EXT4-fs (loop2): 1 orphan inode deleted [ 70.115993][ T4383] EXT4-fs mount: 5 callbacks suppressed [ 70.116011][ T4383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.140961][ T4383] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.183: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 70.177055][ T4401] loop4: detected capacity change from 0 to 256 [ 70.220493][ T4401] FAT-fs (loop4): codepage cp1255 not found [ 70.229792][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.352058][ T4417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.186'. [ 70.601309][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.661877][ T4493] loop2: detected capacity change from 0 to 128 [ 71.729580][ T4493] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 71.737591][ T4493] FAT-fs (loop2): Filesystem has been set read-only [ 71.818021][ T4493] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 71.825909][ T4493] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 72.315679][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 72.315697][ T29] audit: type=1400 audit(1751524230.832:455): avc: denied { append } for pid=4512 comm="syz.4.192" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.531750][ T4546] loop2: detected capacity change from 0 to 1024 [ 72.546947][ T4546] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.579880][ T4546] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.196: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.629161][ T4546] Quota error (device loop2): write_blk: dquota write failed [ 72.636628][ T4546] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 72.667462][ T4546] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.196: Failed to acquire dquot type 0 [ 72.726123][ T4546] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.196: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.748252][ T4546] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.196: Invalid inode bitmap blk 0 in block_group 0 [ 72.761141][ T4546] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 72.769767][ T331] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.784708][ T4546] EXT4-fs (loop2): 1 orphan inode deleted [ 72.785551][ T331] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 72.790950][ T4546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.799011][ T331] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 72.825915][ T4546] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.196: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.870233][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.898921][ T4556] loop2: detected capacity change from 0 to 512 [ 72.910591][ T4556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.932318][ T4556] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.940109][ T4556] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.198: bg 0: block 248: padding at end of block bitmap is not set [ 72.958136][ T4556] Quota error (device loop2): write_blk: dquota write failed [ 72.965570][ T4556] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 72.975556][ T4556] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.198: Failed to acquire dquot type 1 [ 72.988814][ T4556] EXT4-fs (loop2): 1 truncate cleaned up [ 72.994993][ T4556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.021226][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.188997][ T4559] syzkaller0: entered promiscuous mode [ 73.194621][ T4559] syzkaller0: entered allmulticast mode [ 73.425908][ T4569] netlink: 60 bytes leftover after parsing attributes in process `syz.2.202'. [ 73.586081][ T4573] bridge_slave_0: left allmulticast mode [ 73.591868][ T4573] bridge_slave_0: left promiscuous mode [ 73.597582][ T4573] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.726046][ T4573] bridge_slave_1: left allmulticast mode [ 73.731833][ T4573] bridge_slave_1: left promiscuous mode [ 73.737587][ T4573] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.751662][ T4573] bond0: (slave bond_slave_0): Releasing backup interface [ 73.763043][ T4573] bond0: (slave bond_slave_1): Releasing backup interface [ 73.775616][ T4573] team0: Port device team_slave_0 removed [ 73.786122][ T4573] team0: Port device team_slave_1 removed [ 73.793326][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.800923][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.809936][ T4576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 73.821042][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.828633][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.175928][ T4582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.206'. [ 74.268507][ T4587] loop0: detected capacity change from 0 to 1024 [ 74.319464][ T4589] loop3: detected capacity change from 0 to 1024 [ 74.325973][ T29] audit: type=1326 audit(1751524232.812:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971314e929 code=0x7ffc0000 [ 74.349218][ T29] audit: type=1326 audit(1751524232.812:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971314e929 code=0x7ffc0000 [ 74.372543][ T29] audit: type=1326 audit(1751524232.812:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f971314e929 code=0x7ffc0000 [ 74.395817][ T29] audit: type=1326 audit(1751524232.812:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971314e929 code=0x7ffc0000 [ 74.607887][ T4587] EXT4-fs: Ignoring removed nobh option [ 74.709419][ T4587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.731920][ T4587] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.207: Allocating blocks 385-513 which overlap fs metadata [ 74.771004][ T4587] EXT4-fs (loop0): pa ffff888106a9f230: logic 16, phys. 129, len 24 [ 74.779113][ T4587] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 74.935549][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.959827][ T4607] loop0: detected capacity change from 0 to 256 [ 75.970967][ T4606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 76.004053][ T4607] FAT-fs (loop0): codepage cp857 not found [ 76.049982][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 76.109033][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.123891][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.199061][ T4623] loop1: detected capacity change from 0 to 256 [ 76.248789][ T4623] FAT-fs (loop1): codepage cp1255 not found [ 76.664806][ T4631] loop3: detected capacity change from 0 to 512 [ 76.675851][ T4631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.694347][ T4631] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.701223][ T4631] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.220: bg 0: block 248: padding at end of block bitmap is not set [ 76.717331][ T4631] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.220: Failed to acquire dquot type 1 [ 76.730139][ T4631] EXT4-fs (loop3): 1 truncate cleaned up [ 76.736744][ T4631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.762270][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.812573][ T4634] loop3: detected capacity change from 0 to 1024 [ 76.983195][ T4639] bridge_slave_0: left allmulticast mode [ 76.989067][ T4639] bridge_slave_0: left promiscuous mode [ 76.994797][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.076150][ T4639] bridge_slave_1: left allmulticast mode [ 77.081923][ T4639] bridge_slave_1: left promiscuous mode [ 77.087640][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.141454][ T4639] bond0: (slave bond_slave_0): Releasing backup interface [ 77.190569][ T4639] bond0: (slave bond_slave_1): Releasing backup interface [ 77.270009][ T4648] loop1: detected capacity change from 0 to 256 [ 77.297639][ T4639] team0: Port device team_slave_0 removed [ 77.394451][ T4639] team0: Port device team_slave_1 removed [ 77.462309][ T4648] FAT-fs (loop1): codepage cp857 not found [ 77.477085][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.484638][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.532616][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.540132][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.877034][ T4660] loop4: detected capacity change from 0 to 1024 [ 77.920512][ T4660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.934724][ T4660] EXT4-fs (loop4): shut down requested (2) [ 77.940798][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 77.940814][ T29] audit: type=1400 audit(1751524236.452:577): avc: denied { ioctl } for pid=4658 comm="syz.4.230" path="/48/file1/file1" dev="loop4" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.971528][ T4660] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 77.973281][ T29] audit: type=1400 audit(1751524236.492:578): avc: denied { read } for pid=2977 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 78.002277][ T29] audit: type=1400 audit(1751524236.492:579): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.009297][ T4660] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 78.023835][ T29] audit: type=1400 audit(1751524236.492:580): avc: denied { search } for pid=2977 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.023863][ T29] audit: type=1400 audit(1751524236.492:581): avc: denied { add_name } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.023888][ T29] audit: type=1400 audit(1751524236.492:582): avc: denied { create } for pid=2977 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.046829][ T4652] syzkaller0: entered promiscuous mode [ 78.054225][ T29] audit: type=1400 audit(1751524236.492:583): avc: denied { append open } for pid=2977 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.074934][ T4652] syzkaller0: entered allmulticast mode [ 78.095515][ T29] audit: type=1400 audit(1751524236.492:584): avc: denied { getattr } for pid=2977 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.221960][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.735983][ T4678] loop3: detected capacity change from 0 to 256 [ 78.781671][ T29] audit: type=1326 audit(1751524237.302:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 78.822216][ T4681] loop2: detected capacity change from 0 to 1024 [ 78.870612][ T4678] FAT-fs (loop3): codepage cp1255 not found [ 78.881108][ T29] audit: type=1326 audit(1751524237.322:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 79.236019][ T4687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 79.372075][ T4690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.237'. [ 79.433215][ T4693] loop2: detected capacity change from 0 to 128 [ 79.442251][ T4693] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 79.450258][ T4693] FAT-fs (loop2): Filesystem has been set read-only [ 79.475001][ T4693] bio_check_eod: 23260 callbacks suppressed [ 79.475020][ T4693] syz.2.238: attempt to access beyond end of device [ 79.475020][ T4693] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.498740][ T4693] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 79.506651][ T4693] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 79.522371][ T4693] syz.2.238: attempt to access beyond end of device [ 79.522371][ T4693] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.640623][ T4697] syz.2.238: attempt to access beyond end of device [ 79.640623][ T4697] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.684891][ T4693] syz.2.238: attempt to access beyond end of device [ 79.684891][ T4693] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.755271][ T4697] syz.2.238: attempt to access beyond end of device [ 79.755271][ T4697] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.771118][ T4697] syz.2.238: attempt to access beyond end of device [ 79.771118][ T4697] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.785595][ T4697] syz.2.238: attempt to access beyond end of device [ 79.785595][ T4697] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.901733][ T4693] syz.2.238: attempt to access beyond end of device [ 79.901733][ T4693] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 80.057389][ T4693] syz.2.238: attempt to access beyond end of device [ 80.057389][ T4693] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 80.111125][ T4693] syz.2.238: attempt to access beyond end of device [ 80.111125][ T4693] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 80.307657][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 80.332280][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 80.401478][ T4705] loop2: detected capacity change from 0 to 1024 [ 80.442099][ T4705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.479670][ T4705] EXT4-fs (loop2): shut down requested (2) [ 80.508228][ T4711] loop4: detected capacity change from 0 to 512 [ 80.537750][ T4705] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 80.546671][ T4705] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 80.593191][ T4711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.640517][ T4711] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.651518][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.693791][ T4707] syzkaller0: entered promiscuous mode [ 80.699372][ T4707] syzkaller0: entered allmulticast mode [ 81.628342][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.646312][ T4729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 81.829860][ T4735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.251'. [ 82.270266][ T4741] loop0: detected capacity change from 0 to 512 [ 82.280384][ T4741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.290541][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.309212][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.317951][ T4741] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.321264][ T4747] loop3: detected capacity change from 0 to 1024 [ 82.325061][ T4741] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.253: bg 0: block 248: padding at end of block bitmap is not set [ 82.347144][ T4741] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.253: Failed to acquire dquot type 1 [ 82.372877][ T4741] EXT4-fs (loop0): 1 truncate cleaned up [ 82.379571][ T4741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.394526][ T4747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.417967][ T4747] EXT4-fs (loop3): shut down requested (2) [ 82.431318][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 82.440753][ T4747] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 82.450035][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.470278][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.495619][ T4753] loop0: detected capacity change from 0 to 128 [ 82.504035][ T4753] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.512006][ T4753] FAT-fs (loop0): Filesystem has been set read-only [ 82.574135][ T4753] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.582109][ T4753] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 82.625382][ T4760] loop4: detected capacity change from 0 to 1024 [ 82.637905][ T4760] EXT4-fs: Ignoring removed bh option [ 82.643368][ T4760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.653021][ T4760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.690951][ T4760] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.259: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 83.492016][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.530012][ T4769] hub 6-0:1.0: USB hub found [ 83.534765][ T4769] hub 6-0:1.0: 8 ports detected [ 83.569561][ T4775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 83.870591][ T4795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'. [ 84.609035][ T4887] loop4: detected capacity change from 0 to 512 [ 84.641227][ T4887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.676683][ T4887] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.198294][ T4887] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.268: bg 0: block 248: padding at end of block bitmap is not set [ 85.218177][ T4887] __quota_error: 68 callbacks suppressed [ 85.218195][ T4887] Quota error (device loop4): write_blk: dquota write failed [ 85.231382][ T4887] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 85.241544][ T4887] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.268: Failed to acquire dquot type 1 [ 85.303959][ T4887] EXT4-fs (loop4): 1 truncate cleaned up [ 85.319151][ T4887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.418055][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.443898][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 85.483132][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 85.500729][ T4920] loop4: detected capacity change from 0 to 128 [ 85.516022][ T4920] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.523962][ T4920] FAT-fs (loop4): Filesystem has been set read-only [ 85.540488][ T4920] bio_check_eod: 18074 callbacks suppressed [ 85.540505][ T4920] syz.4.270: attempt to access beyond end of device [ 85.540505][ T4920] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 85.568297][ T4920] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.568325][ T4920] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 85.569605][ T4920] syz.4.270: attempt to access beyond end of device [ 85.569605][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.569651][ T4920] syz.4.270: attempt to access beyond end of device [ 85.569651][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.569698][ T4920] syz.4.270: attempt to access beyond end of device [ 85.569698][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.569828][ T4920] syz.4.270: attempt to access beyond end of device [ 85.569828][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.569872][ T4920] syz.4.270: attempt to access beyond end of device [ 85.569872][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.569914][ T4920] syz.4.270: attempt to access beyond end of device [ 85.569914][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.569963][ T4920] syz.4.270: attempt to access beyond end of device [ 85.569963][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.570008][ T4920] syz.4.270: attempt to access beyond end of device [ 85.570008][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.570142][ T4920] syz.4.270: attempt to access beyond end of device [ 85.570142][ T4920] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.838392][ T4926] loop3: detected capacity change from 0 to 1024 [ 85.871328][ T4926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.007323][ T29] audit: type=1326 audit(1751524244.522:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.009557][ T29] audit: type=1326 audit(1751524244.532:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.009593][ T29] audit: type=1326 audit(1751524244.532:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.009619][ T29] audit: type=1326 audit(1751524244.532:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.009684][ T29] audit: type=1326 audit(1751524244.532:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.010437][ T29] audit: type=1326 audit(1751524244.532:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.010472][ T29] audit: type=1326 audit(1751524244.532:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.010734][ T29] audit: type=1326 audit(1751524244.532:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99488be929 code=0x7ffc0000 [ 86.385756][ T4939] loop4: detected capacity change from 0 to 1024 [ 86.388241][ T4939] EXT4-fs: Ignoring removed bh option [ 86.388338][ T4939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.472704][ T4939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.475877][ T4939] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.274: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 86.488384][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.543240][ T4942] hub 6-0:1.0: USB hub found [ 86.543342][ T4942] hub 6-0:1.0: 8 ports detected [ 86.624381][ T4950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'. [ 86.841500][ T4967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.850157][ T4967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.862543][ T4967] loop2: detected capacity change from 0 to 512 [ 86.869890][ T4967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.879342][ T4967] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.886659][ T4967] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.277: bg 0: block 248: padding at end of block bitmap is not set [ 86.914602][ T4967] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.277: Failed to acquire dquot type 1 [ 86.938248][ T4967] EXT4-fs (loop2): 1 truncate cleaned up [ 86.944927][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.946433][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.987902][ T4972] loop0: detected capacity change from 0 to 512 [ 87.026155][ T4972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.051300][ T4972] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.132459][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 88.150725][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 88.266711][ T5031] loop1: detected capacity change from 0 to 1024 [ 88.275593][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.277588][ T5031] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.348404][ T5031] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.283: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.394494][ T5031] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.283: Failed to acquire dquot type 0 [ 88.407531][ T5031] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.283: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.424203][ T5031] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.283: Invalid inode bitmap blk 0 in block_group 0 [ 88.437415][ T5031] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 88.446209][ T5031] EXT4-fs (loop1): 1 orphan inode deleted [ 88.454023][ T5031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.467036][ T3969] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.477764][ T5044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.284'. [ 88.491024][ T3969] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 88.504021][ T5031] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.283: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 88.592908][ T5060] loop0: detected capacity change from 0 to 512 [ 88.620560][ T5060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.647424][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.653282][ T5060] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.786723][ T5070] loop1: detected capacity change from 0 to 512 [ 88.800128][ T5070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.823800][ T5070] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.356270][ T5070] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.287: bg 0: block 248: padding at end of block bitmap is not set [ 89.390656][ T5070] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.287: Failed to acquire dquot type 1 [ 89.428967][ T5070] EXT4-fs (loop1): 1 truncate cleaned up [ 89.435313][ T5070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.478032][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.546187][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.619052][ T5110] loop0: detected capacity change from 0 to 128 [ 89.630372][ T5110] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 89.638326][ T5110] FAT-fs (loop0): Filesystem has been set read-only [ 89.656708][ T5110] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 89.664629][ T5110] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 89.758858][ T5112] loop1: detected capacity change from 0 to 1024 [ 89.779925][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.816576][ T5112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.878924][ T5119] loop2: detected capacity change from 0 to 1024 [ 89.901411][ T5119] EXT4-fs: Ignoring removed nobh option [ 90.127764][ T5119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.300699][ T5119] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.292: Allocating blocks 385-513 which overlap fs metadata [ 90.343434][ T5119] EXT4-fs (loop2): pa ffff888106a9f0e0: logic 16, phys. 129, len 24 [ 90.351556][ T5119] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 90.511204][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.547973][ T5110] bio_check_eod: 33539 callbacks suppressed [ 90.547992][ T5110] syz.0.288: attempt to access beyond end of device [ 90.547992][ T5110] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 90.624318][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.755461][ T5130] program syz.2.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.843366][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 90.843384][ T29] audit: type=1326 audit(1751524249.362:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 90.872922][ T29] audit: type=1326 audit(1751524249.362:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 90.896179][ T29] audit: type=1326 audit(1751524249.362:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 90.919421][ T29] audit: type=1326 audit(1751524249.362:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 90.942664][ T29] audit: type=1326 audit(1751524249.362:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 90.966479][ T29] audit: type=1326 audit(1751524249.362:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 90.989835][ T29] audit: type=1326 audit(1751524249.362:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 91.013087][ T29] audit: type=1326 audit(1751524249.362:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 91.051200][ T5110] syz.0.288: attempt to access beyond end of device [ 91.051200][ T5110] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.092913][ T5110] syz.0.288: attempt to access beyond end of device [ 91.092913][ T5110] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.326868][ T5139] netlink: 60 bytes leftover after parsing attributes in process `syz.3.296'. [ 91.374598][ T5143] loop4: detected capacity change from 0 to 512 [ 91.445539][ T5143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.509488][ T5148] loop0: detected capacity change from 0 to 256 [ 91.529802][ T5149] loop2: detected capacity change from 0 to 512 [ 91.576529][ T5151] hub 6-0:1.0: USB hub found [ 91.602268][ T5149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.622586][ T5143] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.633283][ T5151] hub 6-0:1.0: 8 ports detected [ 91.642239][ T5148] FAT-fs (loop0): codepage cp1255 not found [ 91.666552][ T5149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.372663][ T5149] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.300: bg 0: block 248: padding at end of block bitmap is not set [ 92.397852][ T5149] Quota error (device loop2): write_blk: dquota write failed [ 92.405378][ T5149] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 92.415392][ T5149] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.300: Failed to acquire dquot type 1 [ 92.433796][ T5149] EXT4-fs (loop2): 1 truncate cleaned up [ 92.440214][ T5149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.527865][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.553172][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.699611][ T5182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.304'. [ 92.754813][ T5180] loop1: detected capacity change from 0 to 1024 [ 92.770471][ T5180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.771051][ T5189] loop4: detected capacity change from 0 to 512 [ 92.802134][ T5189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.816815][ T5189] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.823838][ T5189] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.306: bg 0: block 248: padding at end of block bitmap is not set [ 92.839461][ T5189] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.306: Failed to acquire dquot type 1 [ 92.851925][ T5189] EXT4-fs (loop4): 1 truncate cleaned up [ 92.859867][ T5189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.874103][ T5189] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.306: deleted inode referenced: 12 [ 93.453559][ T5214] program syz.0.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.469445][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.486687][ T5214] loop0: detected capacity change from 0 to 1024 [ 93.530928][ T5214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.549000][ T5214] EXT4-fs (loop0): shut down requested (2) [ 93.556999][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.566517][ T5214] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 93.583955][ T5214] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 93.627817][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.832226][ T5244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.311'. [ 94.016889][ T5254] loop0: detected capacity change from 0 to 512 [ 94.405121][ T5254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.465108][ T5254] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.512270][ T5263] loop1: detected capacity change from 0 to 1024 [ 94.745804][ T5299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.317'. [ 95.491195][ T5313] loop1: detected capacity change from 0 to 512 [ 95.534590][ T5313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.594615][ T5313] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.636028][ T5313] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.320: bg 0: block 248: padding at end of block bitmap is not set [ 95.695991][ T5313] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.320: Failed to acquire dquot type 1 [ 95.788359][ T5313] EXT4-fs (loop1): 1 truncate cleaned up [ 95.834710][ T5313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.905423][ T5311] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.320: deleted inode referenced: 12 [ 95.921794][ T5321] loop3: detected capacity change from 0 to 1024 [ 96.413877][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 96.413895][ T29] audit: type=1400 audit(1751524254.922:777): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.513945][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.647328][ T5323] syzkaller0: entered promiscuous mode [ 96.652961][ T5323] syzkaller0: entered allmulticast mode [ 96.688398][ T5327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.324'. [ 96.724388][ T5318] Set syz1 is full, maxelem 65536 reached [ 97.279960][ T29] audit: type=1400 audit(1751524255.802:778): avc: denied { write } for pid=5338 comm="syz.2.328" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.372995][ T29] audit: type=1400 audit(1751524255.852:779): avc: denied { create } for pid=5338 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.392322][ T29] audit: type=1400 audit(1751524255.852:780): avc: denied { write } for pid=5338 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.539011][ T5351] program syz.3.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.541002][ T29] audit: type=1400 audit(1751524256.062:781): avc: denied { read write } for pid=5350 comm="syz.3.329" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.572119][ T29] audit: type=1400 audit(1751524256.062:782): avc: denied { open } for pid=5350 comm="syz.3.329" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.713236][ T29] audit: type=1400 audit(1751524256.232:783): avc: denied { create } for pid=5357 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.248193][ T5391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.331'. [ 99.213489][ T29] audit: type=1400 audit(1751524257.732:784): avc: denied { read write } for pid=5479 comm="syz.0.334" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.214180][ T5480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.263797][ T29] audit: type=1400 audit(1751524257.732:785): avc: denied { open } for pid=5479 comm="syz.0.334" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.266387][ T5480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.287263][ T29] audit: type=1400 audit(1751524257.732:786): avc: denied { ioctl } for pid=5479 comm="syz.0.334" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.909254][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 99.926034][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 99.964114][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.076563][ T5570] loop3: detected capacity change from 0 to 1024 [ 100.226071][ T5585] loop1: detected capacity change from 0 to 1024 [ 100.253518][ T5585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.297573][ T5585] EXT4-fs (loop1): shut down requested (2) [ 100.321592][ T5585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 100.340740][ T5585] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 100.369592][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.615012][ T5608] netlink: 'syz.3.345': attribute type 1 has an invalid length. [ 100.645222][ T5608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.707017][ T5602] syzkaller0: entered promiscuous mode [ 100.712598][ T5602] syzkaller0: entered allmulticast mode [ 100.722270][ T5608] bond1: (slave dummy0): making interface the new active one [ 100.740746][ T5608] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 101.706366][ T5653] loop0: detected capacity change from 0 to 512 [ 101.723617][ T5653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.756540][ T5653] EXT4-fs (loop0): orphan cleanup on readonly fs [ 101.790132][ T5653] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.349: bg 0: block 248: padding at end of block bitmap is not set [ 101.850916][ T5653] __quota_error: 16 callbacks suppressed [ 101.850932][ T5653] Quota error (device loop0): write_blk: dquota write failed [ 101.864061][ T5653] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 101.874188][ T5653] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.349: Failed to acquire dquot type 1 [ 101.893664][ T5653] EXT4-fs (loop0): 1 truncate cleaned up [ 101.932655][ T5653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.984715][ T5653] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.349: deleted inode referenced: 12 [ 102.034728][ T29] audit: type=1400 audit(1751524260.552:803): avc: denied { read } for pid=5663 comm="syz.4.353" dev="nsfs" ino=4026532450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.055893][ T29] audit: type=1400 audit(1751524260.552:804): avc: denied { open } for pid=5663 comm="syz.4.353" path="net:[4026532450]" dev="nsfs" ino=4026532450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.127714][ T5666] loop3: detected capacity change from 0 to 1024 [ 102.176532][ T29] audit: type=1400 audit(1751524260.602:805): avc: denied { create } for pid=5663 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.271354][ T5666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.327411][ T5670] loop1: detected capacity change from 0 to 1024 [ 102.370532][ T5666] EXT4-fs (loop3): shut down requested (2) [ 102.379736][ T5666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 102.418193][ T5666] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 102.469066][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.836316][ T5678] loop1: detected capacity change from 0 to 1024 [ 102.912951][ T5678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.572429][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.659320][ T5690] loop4: detected capacity change from 0 to 512 [ 103.677135][ T5691] netlink: 60 bytes leftover after parsing attributes in process `syz.1.359'. [ 103.707015][ T5690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.746837][ T5690] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.770011][ T5690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.360: bg 0: block 248: padding at end of block bitmap is not set [ 103.851191][ T5690] Quota error (device loop4): write_blk: dquota write failed [ 103.858682][ T5690] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 103.868782][ T5690] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.360: Failed to acquire dquot type 1 [ 103.908722][ T5699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5699 comm=syz.3.363 [ 103.942115][ T5690] EXT4-fs (loop4): 1 truncate cleaned up [ 103.967779][ T5690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.047053][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.498445][ T5711] loop4: detected capacity change from 0 to 1024 [ 104.979915][ T5721] loop1: detected capacity change from 0 to 256 [ 105.242025][ T5721] FAT-fs (loop1): codepage cp1255 not found [ 105.246774][ T5727] loop2: detected capacity change from 0 to 1024 [ 105.281947][ T5725] loop4: detected capacity change from 0 to 1024 [ 105.298611][ T5727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.311476][ T5725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.327351][ T5727] EXT4-fs (loop2): shut down requested (2) [ 105.334462][ T5727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 105.343874][ T5727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 105.369078][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.460313][ T5735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.371'. [ 105.520906][ T5739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.538913][ T5739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.617741][ T5742] hub 6-0:1.0: USB hub found [ 105.622518][ T5742] hub 6-0:1.0: 8 ports detected [ 105.794807][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.797795][ C0] hrtimer: interrupt took 39244 ns [ 106.008194][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.083119][ T29] audit: type=1400 audit(1751524264.602:806): avc: denied { append } for pid=5783 comm="syz.4.377" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.109355][ T5784] program syz.4.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.133801][ T5784] loop4: detected capacity change from 0 to 1024 [ 106.290035][ T5784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.432579][ T5784] EXT4-fs (loop4): shut down requested (2) [ 106.460720][ T5784] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 106.469918][ T5784] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 106.591022][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.712424][ T5807] loop4: detected capacity change from 0 to 1024 [ 106.741868][ T5807] EXT4-fs: Ignoring removed nobh option [ 106.775801][ T5807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.792302][ T5798] syzkaller0: entered promiscuous mode [ 106.798048][ T5798] syzkaller0: entered allmulticast mode [ 106.815215][ T5817] loop1: detected capacity change from 0 to 512 [ 106.830559][ T5817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.842374][ T5807] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.380: Allocating blocks 385-513 which overlap fs metadata [ 106.859649][ T5817] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.874373][ T5817] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.381: bg 0: block 248: padding at end of block bitmap is not set [ 106.892080][ T5817] Quota error (device loop1): write_blk: dquota write failed [ 106.899685][ T5817] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 106.909863][ T5817] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.381: Failed to acquire dquot type 1 [ 106.951757][ T5826] EXT4-fs (loop4): pa ffff888106ad6620: logic 16, phys. 129, len 24 [ 106.959986][ T5826] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 106.988164][ T5817] EXT4-fs (loop1): 1 truncate cleaned up [ 106.996670][ T5817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.058275][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.206668][ T5850] loop1: detected capacity change from 0 to 256 [ 107.270441][ T5850] FAT-fs (loop1): codepage cp1255 not found [ 107.538799][ T5877] loop3: detected capacity change from 0 to 2048 [ 107.556027][ T29] audit: type=1400 audit(1751524266.072:807): avc: denied { mounton } for pid=5876 comm="syz.3.386" path="/89/file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.590842][ T5877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.608007][ T5877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.393985][ T5911] syz.1.389 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.407433][ T29] audit: type=1326 audit(1751524266.912:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 108.430784][ T29] audit: type=1326 audit(1751524266.912:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 108.454164][ T29] audit: type=1326 audit(1751524266.912:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 108.477762][ T29] audit: type=1326 audit(1751524266.912:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 108.501149][ T29] audit: type=1326 audit(1751524266.912:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 108.524683][ T29] audit: type=1326 audit(1751524266.912:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 108.548232][ T29] audit: type=1326 audit(1751524266.912:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 108.619244][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.649878][ T5920] loop2: detected capacity change from 0 to 512 [ 108.669214][ T5922] loop3: detected capacity change from 0 to 512 [ 108.678571][ T5919] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 108.704486][ T5919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.715583][ T5922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.755289][ T5920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.779634][ T5920] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.792004][ T5922] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.797716][ T5919] bond1: (slave dummy0): making interface the new active one [ 108.809017][ T5922] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.393: bg 0: block 248: padding at end of block bitmap is not set [ 108.823593][ T5922] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.393: Failed to acquire dquot type 1 [ 108.836652][ T5922] EXT4-fs (loop3): 1 truncate cleaned up [ 108.843844][ T5919] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 108.855768][ T5922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.940183][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.416838][ T5937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.395'. [ 109.533762][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.655636][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 109.690480][ T5947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5947 comm=syz.0.399 [ 109.711892][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 110.466333][ T5969] loop1: detected capacity change from 0 to 1024 [ 110.591073][ T5969] EXT4-fs: Ignoring removed nobh option [ 110.687772][ T5974] bridge_slave_0: left allmulticast mode [ 110.693494][ T5974] bridge_slave_0: left promiscuous mode [ 110.699274][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.725891][ T5969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.761408][ T5974] bridge_slave_1: left allmulticast mode [ 110.767236][ T5974] bridge_slave_1: left promiscuous mode [ 110.773206][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.798943][ T5969] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.404: Allocating blocks 385-513 which overlap fs metadata [ 110.832352][ T5974] bond0: (slave bond_slave_0): Releasing backup interface [ 110.850647][ T5974] bond0: (slave bond_slave_1): Releasing backup interface [ 110.885123][ T5980] EXT4-fs (loop1): pa ffff888106ad6690: logic 16, phys. 129, len 24 [ 110.893345][ T5980] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 110.920908][ T5974] team0: Port device team_slave_0 removed [ 110.931513][ T5974] team0: Port device team_slave_1 removed [ 110.938787][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.946295][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.957437][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.964909][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.054110][ T5993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.407'. [ 111.250576][ T6008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.410'. [ 111.927947][ T6060] loop3: detected capacity change from 0 to 512 [ 111.948824][ T6060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.993811][ T6060] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.019991][ T6060] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.413: bg 0: block 248: padding at end of block bitmap is not set [ 112.048862][ T6060] __quota_error: 198 callbacks suppressed [ 112.048882][ T6060] Quota error (device loop3): write_blk: dquota write failed [ 112.062156][ T6060] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 112.072172][ T6060] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.413: Failed to acquire dquot type 1 [ 112.158355][ T6060] EXT4-fs (loop3): 1 truncate cleaned up [ 112.205006][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.268740][ T6060] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.413: deleted inode referenced: 12 [ 112.889959][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.090133][ T6124] hub 6-0:1.0: USB hub found [ 113.097019][ T6124] hub 6-0:1.0: 8 ports detected [ 113.103643][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'. [ 113.479430][ T6163] loop2: detected capacity change from 0 to 256 [ 113.514478][ T6163] FAT-fs (loop2): codepage cp1255 not found [ 113.900749][ T6203] loop1: detected capacity change from 0 to 1024 [ 113.934953][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.974195][ T6203] EXT4-fs (loop1): shut down requested (2) [ 113.981452][ T6203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 113.991352][ T6203] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 114.020697][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.123618][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.419'. [ 114.378824][ T6239] bridge1: entered allmulticast mode [ 115.240745][ T6268] loop1: detected capacity change from 0 to 1024 [ 115.978254][ T6265] Set syz1 is full, maxelem 65536 reached [ 115.986801][ T6280] loop4: detected capacity change from 0 to 128 [ 116.004799][ T29] audit: type=1400 audit(1751524274.522:1011): avc: denied { mount } for pid=6279 comm="syz.4.424" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 116.006751][ T6280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 116.034846][ T6280] FAT-fs (loop4): Filesystem has been set read-only [ 116.082918][ T6280] syz.4.424: attempt to access beyond end of device [ 116.082918][ T6280] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 116.100254][ T6280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 116.108230][ T6280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 116.153431][ T6288] loop1: detected capacity change from 0 to 512 [ 116.164210][ T6286] hub 6-0:1.0: USB hub found [ 116.169189][ T6286] hub 6-0:1.0: 8 ports detected [ 116.178672][ T6285] syz.4.424: attempt to access beyond end of device [ 116.178672][ T6285] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.193072][ T6280] syz.4.424: attempt to access beyond end of device [ 116.193072][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.206718][ T6280] syz.4.424: attempt to access beyond end of device [ 116.206718][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.220304][ T6280] syz.4.424: attempt to access beyond end of device [ 116.220304][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.234578][ T6288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.241483][ T6280] syz.4.424: attempt to access beyond end of device [ 116.241483][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.266775][ T6288] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.278269][ T6289] loop0: detected capacity change from 0 to 1024 [ 116.284504][ T6288] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.427: bg 0: block 248: padding at end of block bitmap is not set [ 116.302007][ T6280] syz.4.424: attempt to access beyond end of device [ 116.302007][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.315299][ T6285] syz.4.424: attempt to access beyond end of device [ 116.315299][ T6285] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.335797][ T6280] syz.4.424: attempt to access beyond end of device [ 116.335797][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.344052][ T6288] Quota error (device loop1): write_blk: dquota write failed [ 116.356679][ T6288] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 116.366700][ T6288] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.427: Failed to acquire dquot type 1 [ 116.367958][ T6280] syz.4.424: attempt to access beyond end of device [ 116.367958][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.389744][ T6288] EXT4-fs (loop1): 1 truncate cleaned up [ 116.392126][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.407164][ T6289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.407917][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.515845][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.690478][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.428'. [ 117.045759][ T29] audit: type=1400 audit(1751524275.562:1012): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 117.162544][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.432'. [ 117.202332][ T29] audit: type=1326 audit(1751524275.652:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.225844][ T29] audit: type=1326 audit(1751524275.652:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.249318][ T29] audit: type=1326 audit(1751524275.652:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.272699][ T29] audit: type=1326 audit(1751524275.652:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.296073][ T29] audit: type=1326 audit(1751524275.662:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.319571][ T29] audit: type=1326 audit(1751524275.662:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.342909][ T29] audit: type=1326 audit(1751524275.662:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.366252][ T29] audit: type=1326 audit(1751524275.662:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.389668][ T29] audit: type=1326 audit(1751524275.662:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.413046][ T29] audit: type=1326 audit(1751524275.662:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 117.626238][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.703842][ T6321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'. [ 117.883190][ T6325] loop0: detected capacity change from 0 to 4096 [ 118.705753][ T6335] loop3: detected capacity change from 0 to 256 [ 118.755632][ T6335] FAT-fs (loop3): codepage cp857 not found [ 119.670422][ T6397] loop2: detected capacity change from 0 to 512 [ 119.735610][ T6397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.757125][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 119.777722][ T6398] syzkaller0: entered promiscuous mode [ 119.783360][ T6398] syzkaller0: entered allmulticast mode [ 119.790533][ T6397] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.831385][ T6397] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.438: bg 0: block 248: padding at end of block bitmap is not set [ 119.862215][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 119.987417][ T6397] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.438: Failed to acquire dquot type 1 [ 120.080795][ T6397] EXT4-fs (loop2): 1 truncate cleaned up [ 120.088459][ T6406] loop1: detected capacity change from 0 to 1024 [ 120.135371][ T6406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.148630][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.162360][ T6397] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.438: deleted inode referenced: 12 [ 120.163597][ T6406] EXT4-fs (loop1): shut down requested (2) [ 120.236884][ T6413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 120.254259][ T6413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 120.334277][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.401948][ T6419] loop3: detected capacity change from 0 to 256 [ 120.513030][ T6419] FAT-fs (loop3): codepage cp1255 not found [ 120.535188][ T6425] loop4: detected capacity change from 0 to 128 [ 120.682172][ T6425] FAT-fs (loop4): Directory bread(block 32) failed [ 120.695438][ T6425] FAT-fs (loop4): Directory bread(block 33) failed [ 120.802924][ T6425] FAT-fs (loop4): Directory bread(block 34) failed [ 121.081282][ T6425] FAT-fs (loop4): Directory bread(block 35) failed [ 121.112534][ T6425] FAT-fs (loop4): Directory bread(block 36) failed [ 121.119134][ T6425] FAT-fs (loop4): Directory bread(block 37) failed [ 121.125762][ T6425] FAT-fs (loop4): Directory bread(block 38) failed [ 121.132387][ T6425] FAT-fs (loop4): Directory bread(block 39) failed [ 121.138981][ T6425] FAT-fs (loop4): Directory bread(block 40) failed [ 121.145605][ T6425] FAT-fs (loop4): Directory bread(block 41) failed [ 121.249685][ T6421] bio_check_eod: 6366 callbacks suppressed [ 121.249707][ T6421] syz.4.446: attempt to access beyond end of device [ 121.249707][ T6421] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 121.297374][ T6421] FAT-fs (loop4): Filesystem has been set read-only [ 121.308585][ T6421] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 121.506762][ T6436] loop1: detected capacity change from 0 to 1024 [ 121.530591][ T6438] loop0: detected capacity change from 0 to 1024 [ 121.543585][ T6436] EXT4-fs: Ignoring removed nobh option [ 121.553161][ T6438] EXT4-fs: Ignoring removed bh option [ 121.558673][ T6438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.621724][ T6436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.686055][ T6443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.448'. [ 121.813309][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.861630][ T6436] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.450: Allocating blocks 385-513 which overlap fs metadata [ 121.960350][ T6436] EXT4-fs (loop1): pa ffff888106ad6690: logic 16, phys. 129, len 24 [ 121.968510][ T6436] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 122.003335][ T6438] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.451: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 122.111440][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.121678][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.173820][ T6446] loop1: detected capacity change from 0 to 1024 [ 122.292684][ T6451] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 122.500966][ T6451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.756153][ T6456] bond2: (slave veth3): Enslaving as an active interface with a down link [ 122.965403][ T6463] loop4: detected capacity change from 0 to 1024 [ 122.971941][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 122.971955][ T29] audit: type=1326 audit(1751524281.472:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.001497][ T29] audit: type=1326 audit(1751524281.472:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.024916][ T29] audit: type=1326 audit(1751524281.472:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.048266][ T29] audit: type=1326 audit(1751524281.472:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.071701][ T29] audit: type=1326 audit(1751524281.472:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.095065][ T29] audit: type=1326 audit(1751524281.472:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.118362][ T29] audit: type=1326 audit(1751524281.472:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.141791][ T29] audit: type=1326 audit(1751524281.472:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.165157][ T29] audit: type=1326 audit(1751524281.472:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.188499][ T29] audit: type=1326 audit(1751524281.472:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea5d9e929 code=0x7ffc0000 [ 123.266670][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.308452][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.836093][ T6476] loop4: detected capacity change from 0 to 1024 [ 123.884931][ T6480] loop0: detected capacity change from 0 to 1024 [ 123.891994][ T6476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.908309][ T6476] EXT4-fs (loop4): shut down requested (2) [ 123.925046][ T6480] EXT4-fs: Ignoring removed bh option [ 123.930546][ T6480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.939590][ T6476] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 123.983786][ T6476] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 124.008836][ T6480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.047784][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.077418][ T6480] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.462: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 124.095351][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.163764][ T6484] loop2: detected capacity change from 0 to 1024 [ 124.173483][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.193839][ T6484] EXT4-fs: Ignoring removed nobh option [ 124.258452][ T6484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.277231][ T6489] hub 6-0:1.0: USB hub found [ 124.282277][ T6489] hub 6-0:1.0: 8 ports detected [ 124.303549][ T6484] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.463: Allocating blocks 385-513 which overlap fs metadata [ 124.400024][ T6501] EXT4-fs (loop2): pa ffff888106ad6690: logic 16, phys. 129, len 24 [ 124.408158][ T6501] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 124.662517][ T6514] loop1: detected capacity change from 0 to 128 [ 124.682926][ T6514] FAT-fs (loop1): Directory bread(block 32) failed [ 124.695516][ T6514] FAT-fs (loop1): Directory bread(block 33) failed [ 124.702823][ T6514] FAT-fs (loop1): Directory bread(block 34) failed [ 124.710923][ T6514] FAT-fs (loop1): Directory bread(block 35) failed [ 124.718580][ T6514] FAT-fs (loop1): Directory bread(block 36) failed [ 124.725719][ T6514] FAT-fs (loop1): Directory bread(block 37) failed [ 124.734215][ T6514] FAT-fs (loop1): Directory bread(block 38) failed [ 124.740968][ T6514] FAT-fs (loop1): Directory bread(block 39) failed [ 124.748843][ T6514] FAT-fs (loop1): Directory bread(block 40) failed [ 124.756254][ T6514] FAT-fs (loop1): Directory bread(block 41) failed [ 124.797725][ T6514] syz.1.467: attempt to access beyond end of device [ 124.797725][ T6514] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 124.815214][ T6514] FAT-fs (loop1): Filesystem has been set read-only [ 124.822481][ T6514] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 124.882007][ T6533] bridge1: entered allmulticast mode [ 125.124971][ T6563] bridge1: entered allmulticast mode [ 125.652605][ T6575] loop3: detected capacity change from 0 to 512 [ 125.660936][ T6575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.670364][ T6575] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.687644][ T6575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.475: bg 0: block 248: padding at end of block bitmap is not set [ 125.702225][ T6575] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.475: Failed to acquire dquot type 1 [ 125.714457][ T6575] EXT4-fs (loop3): 1 truncate cleaned up [ 125.720864][ T6575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.754836][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.788875][ T6586] loop3: detected capacity change from 0 to 1024 [ 125.797592][ T6586] EXT4-fs: Ignoring removed bh option [ 125.803103][ T6586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.903294][ T6586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.967636][ T6586] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.476: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 126.728482][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.034771][ T6641] wg2: entered promiscuous mode [ 127.041489][ T6641] wg2: entered allmulticast mode [ 127.065915][ T6642] loop4: detected capacity change from 0 to 1024 [ 127.079102][ T6642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.269851][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.377134][ T6668] loop2: detected capacity change from 0 to 1024 [ 127.411886][ T6668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.498062][ T6674] loop1: detected capacity change from 0 to 256 [ 127.575580][ T6668] EXT4-fs (loop2): shut down requested (2) [ 127.588892][ T6674] FAT-fs (loop1): codepage cp1255 not found [ 127.595948][ T6668] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 127.647899][ T6668] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 127.691593][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.781424][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.051461][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.488'. [ 128.094348][ T6688] loop2: detected capacity change from 0 to 1024 [ 128.116675][ T6688] EXT4-fs: Ignoring removed bh option [ 128.122209][ T6688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.155485][ T6688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.181691][ T6688] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.489: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 128.842620][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 129.053032][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.123705][ T6706] loop3: detected capacity change from 0 to 256 [ 129.140681][ T6706] msdos: Unknown parameter 'dLts' [ 129.653892][ T6708] bridge2: entered allmulticast mode [ 129.891145][ T6714] loop0: detected capacity change from 0 to 1024 [ 130.214572][ T6714] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.331826][ T6719] loop4: detected capacity change from 0 to 1024 [ 130.411800][ T6714] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.496: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.465049][ T6714] __quota_error: 83 callbacks suppressed [ 130.465071][ T6714] Quota error (device loop0): write_blk: dquota write failed [ 130.478412][ T6714] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 130.555488][ T6714] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.496: Failed to acquire dquot type 0 [ 130.620026][ T6714] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.496: Freeing blocks not in datazone - block = 0, count = 4096 [ 130.699211][ T6714] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.496: Invalid inode bitmap blk 0 in block_group 0 [ 130.724193][ T6714] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 130.755397][ T6714] EXT4-fs (loop0): 1 orphan inode deleted [ 130.770188][ T6714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.841431][ T6714] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.496: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 130.897578][ T5288] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.983941][ T5288] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 130.992474][ T5288] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 131.025168][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.098761][ T6724] loop0: detected capacity change from 0 to 1024 [ 131.278009][ T6727] loop3: detected capacity change from 0 to 1024 [ 131.325504][ T6724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.342116][ T6727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.358429][ T6724] EXT4-fs (loop0): shut down requested (2) [ 131.362440][ T6716] Set syz1 is full, maxelem 65536 reached [ 131.373536][ T6724] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 131.390432][ T6724] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 131.406606][ T6727] EXT4-fs (loop3): shut down requested (2) [ 131.417015][ T6735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.502'. [ 131.417458][ T6727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 131.448400][ T6727] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 131.468478][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.478470][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.515851][ T6743] loop4: detected capacity change from 0 to 256 [ 131.530708][ T6742] Zero length message leads to an empty skb [ 131.671304][ T6743] FAT-fs (loop4): codepage cp1255 not found [ 131.688088][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 131.729693][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 132.076525][ T6754] loop0: detected capacity change from 0 to 128 [ 132.117125][ T6754] FAT-fs (loop0): Directory bread(block 32) failed [ 132.136100][ T6754] FAT-fs (loop0): Directory bread(block 33) failed [ 132.158351][ T6754] FAT-fs (loop0): Directory bread(block 34) failed [ 132.173511][ T6754] FAT-fs (loop0): Directory bread(block 35) failed [ 132.187432][ T6754] FAT-fs (loop0): Directory bread(block 36) failed [ 132.198602][ T6754] FAT-fs (loop0): Directory bread(block 37) failed [ 132.212001][ T6754] FAT-fs (loop0): Directory bread(block 38) failed [ 132.218625][ T6754] FAT-fs (loop0): Directory bread(block 39) failed [ 132.225252][ T6754] FAT-fs (loop0): Directory bread(block 40) failed [ 132.231995][ T6754] FAT-fs (loop0): Directory bread(block 41) failed [ 132.288894][ T6752] syz.0.508: attempt to access beyond end of device [ 132.288894][ T6752] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 132.302412][ T6752] FAT-fs (loop0): Filesystem has been set read-only [ 132.317184][ T29] audit: type=1400 audit(1751524290.832:1151): avc: denied { watch } for pid=6744 comm="syz.3.505" path="/116" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.427298][ T6752] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.941943][ T6763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 133.180426][ T6767] loop0: detected capacity change from 0 to 512 [ 133.225481][ T6767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.260604][ T6767] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.279260][ T6767] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.511: bg 0: block 248: padding at end of block bitmap is not set [ 133.382775][ T6767] Quota error (device loop0): write_blk: dquota write failed [ 133.390273][ T6767] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 133.401049][ T6767] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.511: Failed to acquire dquot type 1 [ 133.545621][ T6779] loop4: detected capacity change from 0 to 1024 [ 133.561576][ T6779] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.578056][ T6767] EXT4-fs (loop0): 1 truncate cleaned up [ 133.719023][ T6779] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.515: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.765030][ T6779] Quota error (device loop4): write_blk: dquota write failed [ 133.772509][ T6779] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 133.814719][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 133.840408][ T29] audit: type=1326 audit(1751524292.312:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 133.863808][ T29] audit: type=1326 audit(1751524292.312:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 133.951114][ T6779] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.515: Failed to acquire dquot type 0 [ 133.974506][ T6785] loop1: detected capacity change from 0 to 1024 [ 133.997495][ T6779] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.515: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.011612][ T6779] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.515: Invalid inode bitmap blk 0 in block_group 0 [ 134.037283][ T3834] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.038853][ T6767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.084121][ T6779] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 134.095694][ T3834] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 134.111873][ T6779] EXT4-fs (loop4): 1 orphan inode deleted [ 134.121360][ T6779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.143942][ T6779] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.515: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 134.517567][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.829204][ T6801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6801 comm=syz.1.522 [ 135.152959][ T6806] loop1: detected capacity change from 0 to 1024 [ 135.767514][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 135.767533][ T29] audit: type=1326 audit(1751524294.282:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.1.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 135.797167][ T29] audit: type=1326 audit(1751524294.282:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.1.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 135.884657][ T29] audit: type=1326 audit(1751524294.392:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6805 comm="syz.1.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7aa4fe929 code=0x7ffc0000 [ 136.232715][ T6831] loop4: detected capacity change from 0 to 512 [ 136.261327][ T29] audit: type=1400 audit(1751524294.782:1307): avc: denied { create } for pid=6826 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.303567][ T6831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.316359][ T6828] loop2: detected capacity change from 0 to 128 [ 136.336828][ T6831] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.357147][ T6828] FAT-fs (loop2): Directory bread(block 32) failed [ 136.370694][ T6828] FAT-fs (loop2): Directory bread(block 33) failed [ 136.386289][ T6828] FAT-fs (loop2): Directory bread(block 34) failed [ 136.404835][ T6828] FAT-fs (loop2): Directory bread(block 35) failed [ 136.422478][ T6828] FAT-fs (loop2): Directory bread(block 36) failed [ 136.446859][ T6828] FAT-fs (loop2): Directory bread(block 37) failed [ 136.464636][ T6828] FAT-fs (loop2): Directory bread(block 38) failed [ 136.481615][ T6828] FAT-fs (loop2): Directory bread(block 39) failed [ 136.494844][ T6828] FAT-fs (loop2): Directory bread(block 40) failed [ 136.501445][ T6828] FAT-fs (loop2): Directory bread(block 41) failed [ 136.726184][ T6828] syz.2.530: attempt to access beyond end of device [ 136.726184][ T6828] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 136.884703][ T6828] FAT-fs (loop2): Filesystem has been set read-only [ 136.895717][ T6828] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 136.983275][ T29] audit: type=1326 audit(1751524295.502:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 137.023777][ T6842] loop2: detected capacity change from 0 to 1024 [ 137.030652][ T29] audit: type=1326 audit(1751524295.532:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 137.053973][ T29] audit: type=1326 audit(1751524295.532:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 137.077444][ T29] audit: type=1326 audit(1751524295.532:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 137.100787][ T29] audit: type=1326 audit(1751524295.532:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 137.124154][ T29] audit: type=1326 audit(1751524295.532:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.2.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 137.283974][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.326864][ T6849] loop3: detected capacity change from 0 to 256 [ 137.381179][ T6849] FAT-fs (loop3): codepage cp857 not found [ 137.428303][ T6854] loop4: detected capacity change from 0 to 128 [ 137.468867][ T6854] FAT-fs (loop4): Directory bread(block 32) failed [ 137.507428][ T6854] FAT-fs (loop4): Directory bread(block 33) failed [ 137.514015][ T6854] FAT-fs (loop4): Directory bread(block 34) failed [ 137.575363][ T6854] FAT-fs (loop4): Directory bread(block 35) failed [ 137.605860][ T6854] FAT-fs (loop4): Directory bread(block 36) failed [ 137.626222][ T6854] FAT-fs (loop4): Directory bread(block 37) failed [ 137.747364][ T6854] FAT-fs (loop4): Directory bread(block 38) failed [ 137.757365][ T6854] FAT-fs (loop4): Directory bread(block 39) failed [ 137.767423][ T6854] FAT-fs (loop4): Directory bread(block 40) failed [ 137.773985][ T6854] FAT-fs (loop4): Directory bread(block 41) failed [ 137.811278][ T6860] loop1: detected capacity change from 0 to 256 [ 137.848438][ T6860] msdos: Unknown parameter 'dLts' [ 137.959454][ T6851] syz.4.534: attempt to access beyond end of device [ 137.959454][ T6851] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 138.013640][ T6851] FAT-fs (loop4): Filesystem has been set read-only [ 138.024799][ T6851] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 138.157137][ T6862] loop1: detected capacity change from 0 to 128 [ 138.164434][ T6862] EXT4-fs: test_dummy_encryption option not supported [ 139.072797][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.761387][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.542'. [ 140.573847][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.582413][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.594152][ T6887] loop2: detected capacity change from 0 to 512 [ 140.601490][ T6887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.612446][ T6887] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.620657][ T6887] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.544: bg 0: block 248: padding at end of block bitmap is not set [ 140.635230][ T6887] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.544: Failed to acquire dquot type 1 [ 140.647847][ T6887] EXT4-fs (loop2): 1 truncate cleaned up [ 140.654198][ T6887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.812786][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 140.812857][ T29] audit: type=1400 audit(1751524299.332:1373): avc: denied { create } for pid=6889 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.878135][ T29] audit: type=1400 audit(1751524299.372:1374): avc: denied { setopt } for pid=6889 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.130231][ T6894] loop4: detected capacity change from 0 to 128 [ 141.178540][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.330788][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.330788][ T6378] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 141.345992][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.549'. [ 141.356546][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.356546][ T6378] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 141.371275][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.371275][ T6378] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 141.387161][ T6900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.549'. [ 141.398641][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.398641][ T6378] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 141.422433][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.422433][ T6378] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 141.456101][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.456101][ T6378] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 141.475024][ T6904] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 141.490225][ T6904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.527459][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.527459][ T6378] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 141.541084][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.541084][ T6378] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 141.556206][ T6378] kworker/u8:17: attempt to access beyond end of device [ 141.556206][ T6378] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 141.575054][ T6904] bond1: (slave veth3): Enslaving as an active interface with a down link [ 141.628252][ T6910] loop4: detected capacity change from 0 to 1024 [ 141.654403][ T29] audit: type=1326 audit(1751524300.172:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.688258][ T6910] EXT4-fs: Ignoring removed bh option [ 141.693920][ T6910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.707373][ T29] audit: type=1326 audit(1751524300.202:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.730776][ T29] audit: type=1326 audit(1751524300.202:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.733448][ T6910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.754439][ T29] audit: type=1326 audit(1751524300.212:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.754477][ T29] audit: type=1326 audit(1751524300.212:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.813841][ T29] audit: type=1326 audit(1751524300.212:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.819987][ T6917] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6917 comm=syz.2.555 [ 141.837197][ T29] audit: type=1326 audit(1751524300.212:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.873012][ T29] audit: type=1326 audit(1751524300.212:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6906 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fe18f75e929 code=0x7ffc0000 [ 141.898069][ T6918] loop0: detected capacity change from 0 to 256 [ 141.975561][ T6918] FAT-fs (loop0): codepage cp857 not found [ 141.989171][ T6919] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.550: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 142.118719][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.660491][ T6929] loop4: detected capacity change from 0 to 512 [ 142.714011][ T6929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.760092][ T6929] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.778796][ T6931] loop1: detected capacity change from 0 to 512 [ 142.810430][ T6929] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.556: bg 0: block 248: padding at end of block bitmap is not set [ 142.839317][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'. [ 142.878563][ T6931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.902304][ T6931] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.906835][ T6929] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.556: Failed to acquire dquot type 1 [ 143.014570][ T6929] EXT4-fs (loop4): 1 truncate cleaned up [ 143.036393][ T6929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.439794][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.527525][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 144.536547][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.562'. [ 144.677782][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.564'. [ 144.772295][ T6956] loop2: detected capacity change from 0 to 128 [ 144.800569][ T6956] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.808536][ T6956] FAT-fs (loop2): Filesystem has been set read-only [ 144.835282][ T6956] bio_check_eod: 103 callbacks suppressed [ 144.835302][ T6956] syz.2.565: attempt to access beyond end of device [ 144.835302][ T6956] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 144.861747][ T6959] loop1: detected capacity change from 0 to 1024 [ 144.907315][ T6956] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.915210][ T6956] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 144.927641][ T6959] EXT4-fs: Ignoring removed bh option [ 144.933122][ T6959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.956409][ T6956] syz.2.565: attempt to access beyond end of device [ 144.956409][ T6956] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.995214][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.998315][ T6960] syz.2.565: attempt to access beyond end of device [ 144.998315][ T6960] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.048725][ T6956] syz.2.565: attempt to access beyond end of device [ 145.048725][ T6956] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.070337][ T6959] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.566: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 145.138893][ T6956] syz.2.565: attempt to access beyond end of device [ 145.138893][ T6956] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.177316][ T6956] syz.2.565: attempt to access beyond end of device [ 145.177316][ T6956] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.231109][ T6956] syz.2.565: attempt to access beyond end of device [ 145.231109][ T6956] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.289658][ T6960] syz.2.565: attempt to access beyond end of device [ 145.289658][ T6960] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.346600][ T6960] syz.2.565: attempt to access beyond end of device [ 145.346600][ T6960] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.359843][ T6956] syz.2.565: attempt to access beyond end of device [ 145.359843][ T6956] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 145.581694][ T6962] ================================================================== [ 145.589856][ T6962] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 145.598172][ T6962] [ 145.600518][ T6962] write to 0xffff88810a14e468 of 8 bytes by task 6959 on cpu 1: [ 145.608196][ T6962] filemap_splice_read+0x47e/0x6b0 [ 145.613459][ T6962] ext4_file_splice_read+0x8f/0xb0 [ 145.618620][ T6962] splice_direct_to_actor+0x26f/0x680 [ 145.624047][ T6962] do_splice_direct+0xda/0x150 [ 145.628868][ T6962] do_sendfile+0x380/0x650 [ 145.633330][ T6962] __x64_sys_sendfile64+0x105/0x150 [ 145.638571][ T6962] x64_sys_call+0xb39/0x2fb0 [ 145.643208][ T6962] do_syscall_64+0xd2/0x200 [ 145.647735][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.653665][ T6962] [ 145.656014][ T6962] write to 0xffff88810a14e468 of 8 bytes by task 6962 on cpu 0: [ 145.663665][ T6962] filemap_splice_read+0x47e/0x6b0 [ 145.668842][ T6962] ext4_file_splice_read+0x8f/0xb0 [ 145.673996][ T6962] splice_direct_to_actor+0x26f/0x680 [ 145.679421][ T6962] do_splice_direct+0xda/0x150 [ 145.684236][ T6962] do_sendfile+0x380/0x650 [ 145.688691][ T6962] __x64_sys_sendfile64+0x105/0x150 [ 145.693924][ T6962] x64_sys_call+0xb39/0x2fb0 [ 145.698555][ T6962] do_syscall_64+0xd2/0x200 [ 145.703093][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.709028][ T6962] [ 145.711370][ T6962] value changed: 0x0000000000000792 -> 0x0000000000000793 [ 145.718497][ T6962] [ 145.720838][ T6962] Reported by Kernel Concurrency Sanitizer on: [ 145.723450][ T6966] loop3: detected capacity change from 0 to 4096 [ 145.727010][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.1.566 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 145.745686][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.755768][ T6962] ================================================================== [ 145.865635][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.108784][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.187145][ T6968] syzkaller0: entered promiscuous mode [ 146.192779][ T6968] syzkaller0: entered allmulticast mode