last executing test programs: 2m58.40819242s ago: executing program 3 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) chmod(&(0x7f0000000280)='./file0\x00', 0x40) 2m58.359821361s ago: executing program 4 (id=409): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d00)=ANY=[@ANYBLOB="140000005304"], 0x28}}, 0x0) 2m58.30373572s ago: executing program 4 (id=410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002e80)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2m58.27907739s ago: executing program 3 (id=413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xfffffffffdfffffd}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r1, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) 2m58.23878599s ago: executing program 4 (id=416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) listen(r0, 0x3) 2m58.20603723s ago: executing program 3 (id=419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000b05000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00001dd000/0x3000)=nil) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x9, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2m58.15342026s ago: executing program 4 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m58.10346433s ago: executing program 4 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x0, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m57.841470628s ago: executing program 4 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x50, 0x2}]}) 2m57.790169959s ago: executing program 32 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x50, 0x2}]}) 2m56.988952075s ago: executing program 3 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m56.911634795s ago: executing program 3 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f0000000440)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000001500)={0x0}, 0x1, 0x0, 0x0, 0x4004804}, 0x20044850) 2m56.146321902s ago: executing program 3 (id=472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) 2m56.139881622s ago: executing program 33 (id=472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) 1m47.02501873s ago: executing program 2 (id=2757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000d00feffffff00000000ff0200000000000000000000000000010000000000000000000000000004009300000000000600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1efd0100000000000000000000000000000000000000000000040000000000ff0300000000000000000000000000001c2500000000000003000000000000000000000000000000000000000000000005000000000000000000000000000000210000000000000000000000000000000000000000000000000000008000000002350000020001000000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 1m46.548671889s ago: executing program 2 (id=2769): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) 1m46.342114968s ago: executing program 2 (id=2771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x2a020400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) 1m46.275366728s ago: executing program 2 (id=2775): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) open(&(0x7f0000000300)='.\x00', 0x418601, 0x0) 1m45.995627967s ago: executing program 2 (id=2783): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x8, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m45.023594403s ago: executing program 2 (id=2801): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$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") 1m45.023463563s ago: executing program 34 (id=2801): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x26f, &(0x7f00000002c0)="$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") 1m38.269827148s ago: executing program 5 (id=2990): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) 1m38.216195608s ago: executing program 5 (id=2992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20048880) 1m38.067339847s ago: executing program 5 (id=2999): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m37.206292305s ago: executing program 5 (id=3040): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 1m36.992268094s ago: executing program 5 (id=3051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) 1m36.405454822s ago: executing program 5 (id=3071): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) inotify_init1(0x80800) 1m36.378798232s ago: executing program 35 (id=3071): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) inotify_init1(0x80800) 1.783326867s ago: executing program 7 (id=7168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1.732052956s ago: executing program 7 (id=7174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) 1.723430237s ago: executing program 1 (id=7175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.702395106s ago: executing program 6 (id=7177): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.537998136s ago: executing program 1 (id=7178): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8", 0x1}], 0x1, 0x81, 0x4, 0x1) 1.439898785s ago: executing program 1 (id=7179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) 1.439740456s ago: executing program 6 (id=7180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}]) 1.416987575s ago: executing program 1 (id=7181): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) socket$packet(0x11, 0x2, 0x300) 1.250788915s ago: executing program 6 (id=7192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.109827954s ago: executing program 8 (id=7186): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x200000, 0x0, 0x200000, 0xffffffff, 0x4}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffff01, 0x6, 0x6, 0x5}}]}]}}}]}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x2, 0x3, @empty, 0x101}, 0x1c) 1.013667364s ago: executing program 7 (id=7187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0xfffffefa}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) 1.013483984s ago: executing program 6 (id=7188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 958.039993ms ago: executing program 7 (id=7189): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f, {}, {}, @raw32={[0x2600]}}], 0xffc8) 764.666153ms ago: executing program 6 (id=7191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 748.846933ms ago: executing program 6 (id=7193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 634.853233ms ago: executing program 0 (id=7200): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 619.750153ms ago: executing program 0 (id=7201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x80, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x6, 0x0, 0x50000000}]}}}}}}}, 0x0) 605.276722ms ago: executing program 0 (id=7202): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 567.914272ms ago: executing program 1 (id=7203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0xfffffefa}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) 545.512502ms ago: executing program 1 (id=7204): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 207.591761ms ago: executing program 8 (id=7205): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 207.004761ms ago: executing program 0 (id=7206): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 169.317841ms ago: executing program 8 (id=7207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 165.710771ms ago: executing program 0 (id=7217): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) 83.61051ms ago: executing program 0 (id=7208): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x9}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 83.25675ms ago: executing program 7 (id=7209): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=""/9, 0x9}, 0x7ff}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 51.16746ms ago: executing program 8 (id=7210): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r0 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x3cf}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x54}, &(0x7f0000000300)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0x381b, 0x0, 0x0, 0x0, 0x0) 32.07082ms ago: executing program 8 (id=7211): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.5291ms ago: executing program 8 (id=7212): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c}}, {{}, 0x0, @in6=@private2}}, 0xe8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 7 (id=7213): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) kernel console output (not intermixed with test programs): 05 free clusters [ 166.733890][T14994] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 166.746229][T14994] EXT4-fs (loop0): This should not happen!! Data will be lost [ 166.746229][T14994] [ 166.755900][T14994] EXT4-fs (loop0): Total free blocks count 0 [ 166.761960][T14994] EXT4-fs (loop0): Free/Dirty block details [ 166.767930][T14994] EXT4-fs (loop0): free_blocks=68451041280 [ 166.773755][T14994] EXT4-fs (loop0): dirty_blocks=16 [ 166.778959][T14994] EXT4-fs (loop0): Block reservation details [ 166.784951][T14994] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 166.788554][T15018] loop1: detected capacity change from 0 to 2048 [ 166.819416][T15018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.842849][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.853572][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.879396][T15024] __nla_validate_parse: 14 callbacks suppressed [ 166.879409][T15024] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4844'. [ 166.972436][T15030] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4847'. [ 167.046079][T15040] loop1: detected capacity change from 0 to 256 [ 167.053710][T15040] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.073772][T15040] FAT-fs (loop1): Directory bread(block 64) failed [ 167.080986][T15040] FAT-fs (loop1): Directory bread(block 65) failed [ 167.088386][T15040] FAT-fs (loop1): Directory bread(block 66) failed [ 167.095116][T15040] FAT-fs (loop1): Directory bread(block 67) failed [ 167.102370][T15040] FAT-fs (loop1): Directory bread(block 68) failed [ 167.109531][T15040] FAT-fs (loop1): Directory bread(block 69) failed [ 167.116121][T15040] FAT-fs (loop1): Directory bread(block 70) failed [ 167.123803][T15040] FAT-fs (loop1): Directory bread(block 71) failed [ 167.131275][T15040] FAT-fs (loop1): Directory bread(block 72) failed [ 167.138607][T15040] FAT-fs (loop1): Directory bread(block 73) failed [ 167.332206][ T35] kernel write not supported for file /277/net/sockstat6 (pid: 35 comm: kworker/1:1) [ 167.402850][T15073] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4864'. [ 167.446198][T15081] loop7: detected capacity change from 0 to 2048 [ 167.479877][T15081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.497148][T15081] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 167.509448][T15081] EXT4-fs (loop7): This should not happen!! Data will be lost [ 167.509448][T15081] [ 167.519243][T15081] EXT4-fs (loop7): Total free blocks count 0 [ 167.525214][T15081] EXT4-fs (loop7): Free/Dirty block details [ 167.531242][T15081] EXT4-fs (loop7): free_blocks=0 [ 167.536211][T15081] EXT4-fs (loop7): dirty_blocks=0 [ 167.541275][T15081] EXT4-fs (loop7): Block reservation details [ 167.547252][T15081] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 167.630046][T15089] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 167.650041][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.723212][T15097] netlink: 'syz.6.4875': attribute type 1 has an invalid length. [ 167.731005][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4875'. [ 167.742515][T15100] loop1: detected capacity change from 0 to 256 [ 167.751849][T15100] vfat: Unknown parameter '˙˙˙˙˙˙˙' [ 167.818846][T15110] loop6: detected capacity change from 0 to 2048 [ 167.840252][T15110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.894244][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.959639][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 168.032893][T15144] loop6: detected capacity change from 0 to 256 [ 168.039751][T15144] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.058970][T15144] FAT-fs (loop6): Directory bread(block 64) failed [ 168.065533][T15144] FAT-fs (loop6): Directory bread(block 65) failed [ 168.072518][T15144] FAT-fs (loop6): Directory bread(block 66) failed [ 168.085835][T15144] FAT-fs (loop6): Directory bread(block 67) failed [ 168.092646][T15144] FAT-fs (loop6): Directory bread(block 68) failed [ 168.105294][T15144] FAT-fs (loop6): Directory bread(block 69) failed [ 168.111943][T15144] FAT-fs (loop6): Directory bread(block 70) failed [ 168.120409][T15144] FAT-fs (loop6): Directory bread(block 71) failed [ 168.127823][T15144] FAT-fs (loop6): Directory bread(block 72) failed [ 168.134570][T15144] FAT-fs (loop6): Directory bread(block 73) failed [ 168.158891][T15148] wireguard0: entered promiscuous mode [ 168.164403][T15148] wireguard0: entered allmulticast mode [ 168.397158][T15181] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.405707][T15181] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.414102][T15181] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.422525][T15181] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.434164][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.441724][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.449118][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.456601][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.463980][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.471369][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.478769][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.486145][ T3375] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 168.493568][ T3375] hid-generic 0000:0000:0000.000C: item fetching failed at offset 8/43 [ 168.501865][T15181] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.501992][ T3375] hid-generic 0000:0000:0000.000C: probe with driver hid-generic failed with error -22 [ 168.510311][T15181] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.528333][T15181] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.536743][T15181] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.642383][T15209] ip6gretap1: entered allmulticast mode [ 169.114374][T15259] loop7: detected capacity change from 0 to 256 [ 169.121177][T15259] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.164119][T15259] FAT-fs (loop7): Directory bread(block 64) failed [ 169.171861][T15259] FAT-fs (loop7): Directory bread(block 65) failed [ 169.186494][T15259] FAT-fs (loop7): Directory bread(block 66) failed [ 169.194411][T15259] FAT-fs (loop7): Directory bread(block 67) failed [ 169.202396][T15259] FAT-fs (loop7): Directory bread(block 68) failed [ 169.210957][T15259] FAT-fs (loop7): Directory bread(block 69) failed [ 169.217848][T15259] FAT-fs (loop7): Directory bread(block 70) failed [ 169.232133][T15259] FAT-fs (loop7): Directory bread(block 71) failed [ 169.251863][T15259] FAT-fs (loop7): Directory bread(block 72) failed [ 169.272914][T15259] FAT-fs (loop7): Directory bread(block 73) failed [ 169.325137][T15269] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4953'. [ 169.334100][T15269] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4953'. [ 169.370549][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4955'. [ 169.379558][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4955'. [ 169.478932][T15296] loop8: detected capacity change from 0 to 256 [ 169.485943][T15296] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.505734][T15296] FAT-fs (loop8): Directory bread(block 64) failed [ 169.512378][T15296] FAT-fs (loop8): Directory bread(block 65) failed [ 169.520595][T15296] FAT-fs (loop8): Directory bread(block 66) failed [ 169.527414][T15296] FAT-fs (loop8): Directory bread(block 67) failed [ 169.527865][T15303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15303 comm=syz.7.4969 [ 169.534366][T15296] FAT-fs (loop8): Directory bread(block 68) failed [ 169.546640][T15303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15303 comm=syz.7.4969 [ 169.558415][T15296] FAT-fs (loop8): Directory bread(block 69) failed [ 169.574222][T15296] FAT-fs (loop8): Directory bread(block 70) failed [ 169.580834][T15296] FAT-fs (loop8): Directory bread(block 71) failed [ 169.588962][T15296] FAT-fs (loop8): Directory bread(block 72) failed [ 169.600573][T15296] FAT-fs (loop8): Directory bread(block 73) failed [ 169.684040][T15316] loop0: detected capacity change from 0 to 1024 [ 169.701460][T15316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.724052][T15324] loop8: detected capacity change from 0 to 1024 [ 169.758111][T15324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.796167][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.061063][T15349] wireguard0: entered promiscuous mode [ 170.066562][T15349] wireguard0: entered allmulticast mode [ 170.089759][T14599] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 170.133217][T15324] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 170.145635][T15324] EXT4-fs (loop8): This should not happen!! Data will be lost [ 170.145635][T15324] [ 170.155434][T15324] EXT4-fs (loop8): Total free blocks count 0 [ 170.161542][T15324] EXT4-fs (loop8): Free/Dirty block details [ 170.167607][T15324] EXT4-fs (loop8): free_blocks=68451041280 [ 170.173419][T15324] EXT4-fs (loop8): dirty_blocks=16 [ 170.178605][T15324] EXT4-fs (loop8): Block reservation details [ 170.184650][T15324] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 170.341550][T10850] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.392840][T15369] 0ŞXą¦D: renamed from gretap0 (while UP) [ 170.401261][T15369] 0ŞXą¦D: entered allmulticast mode [ 170.407147][T15369] A link change request failed with some changes committed already. Interface 60ŞXą¦D may have been left with an inconsistent configuration, please check. [ 170.555706][T15389] siw: device registration error -23 [ 170.638182][T15395] ebt_among: dst integrity fail: 1ad [ 170.724856][T15399] loop8: detected capacity change from 0 to 1024 [ 170.783734][T15399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.910050][T10850] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.997012][T15417] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 171.015761][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 171.015777][ T29] audit: type=1400 audit(1738397366.280:5569): avc: denied { read write } for pid=15407 comm="syz.1.5017" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.045580][ T29] audit: type=1400 audit(1738397366.280:5570): avc: denied { open } for pid=15407 comm="syz.1.5017" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.069132][ T29] audit: type=1400 audit(1738397366.280:5571): avc: denied { ioctl } for pid=15407 comm="syz.1.5017" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.094188][ T29] audit: type=1400 audit(1738397366.290:5572): avc: denied { map_create } for pid=15423 comm="syz.6.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.113443][ T29] audit: type=1400 audit(1738397366.290:5573): avc: denied { map_read map_write } for pid=15423 comm="syz.6.5023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.172071][ T29] audit: type=1326 audit(1738397366.450:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 171.205676][ T29] audit: type=1326 audit(1738397366.470:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 171.229151][ T29] audit: type=1326 audit(1738397366.470:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 171.252710][ T29] audit: type=1326 audit(1738397366.470:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.6.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 171.312117][ T29] audit: type=1400 audit(1738397366.590:5578): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.322624][T15432] loop0: detected capacity change from 0 to 256 [ 171.344770][T15432] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.365321][T15432] FAT-fs (loop0): Directory bread(block 64) failed [ 171.373436][T15432] FAT-fs (loop0): Directory bread(block 65) failed [ 171.396334][T15432] FAT-fs (loop0): Directory bread(block 66) failed [ 171.404210][T15432] FAT-fs (loop0): Directory bread(block 67) failed [ 171.413217][T15432] FAT-fs (loop0): Directory bread(block 68) failed [ 171.427676][T15432] FAT-fs (loop0): Directory bread(block 69) failed [ 171.434251][T15432] FAT-fs (loop0): Directory bread(block 70) failed [ 171.444362][T15432] FAT-fs (loop0): Directory bread(block 71) failed [ 171.457997][T15432] FAT-fs (loop0): Directory bread(block 72) failed [ 171.465662][T15432] FAT-fs (loop0): Directory bread(block 73) failed [ 171.730380][T15483] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 171.919677][T15514] SELinux: policydb version 280 does not match my version range 15-34 [ 171.928694][T15514] SELinux: failed to load policy [ 171.999892][T15522] loop0: detected capacity change from 0 to 164 [ 172.013925][T15522] syz.0.5069: attempt to access beyond end of device [ 172.013925][T15522] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 172.042765][T15522] syz.0.5069: attempt to access beyond end of device [ 172.042765][T15522] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 172.111065][T15530] batadv1: entered promiscuous mode [ 172.121105][T15530] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.246451][T15540] loop7: detected capacity change from 0 to 512 [ 172.270887][T15540] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #17: comm syz.7.5076: iget: bogus i_mode (0) [ 172.282353][T15540] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5076: couldn't read orphan inode 17 (err -117) [ 172.294630][T15540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.313838][T15540] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5076: bg 0: block 7: invalid block bitmap [ 172.338049][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.477923][T15562] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.478092][T15562] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.522088][T15562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.532790][T15562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.553510][T15562] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.553601][T15562] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.553633][T15562] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.553659][T15562] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.792926][T15590] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.826749][T15594] siw: device registration error -23 [ 173.080845][T15613] netlink: 'syz.7.5108': attribute type 298 has an invalid length. [ 173.188832][T15622] loop7: detected capacity change from 0 to 164 [ 173.197130][T15622] syz.7.5112: attempt to access beyond end of device [ 173.197130][T15622] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 173.197240][T15622] syz.7.5112: attempt to access beyond end of device [ 173.197240][T15622] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 173.362044][T15638] loop1: detected capacity change from 0 to 4096 [ 173.372051][T15638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.409399][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.439659][T15651] __nla_validate_parse: 4 callbacks suppressed [ 173.439674][T15651] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5125'. [ 173.455678][T15651] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5125'. [ 173.469515][T15653] loop1: detected capacity change from 0 to 2048 [ 173.479628][T15653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.558666][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.627975][T15671] SELinux: syz.1.5134 (15671) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 173.765265][T15686] geneve2: entered promiscuous mode [ 173.770636][T15686] geneve2: entered allmulticast mode [ 174.202373][T15712] loop7: detected capacity change from 0 to 512 [ 174.220135][T15712] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.231826][T15712] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 174.242039][T15712] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5153: Corrupt directory, running e2fsck is recommended [ 174.257421][T15716] netlink: 'syz.1.5154': attribute type 13 has an invalid length. [ 174.265762][T15712] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 174.295001][T15712] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.5153: corrupted in-inode xattr: invalid ea_ino [ 174.329508][T15712] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.5153: couldn't read orphan inode 15 (err -117) [ 174.348867][T15712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.409207][T15712] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.420769][T15712] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 174.430910][T15712] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5153: Corrupt directory, running e2fsck is recommended [ 174.454003][T15712] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.459904][T15726] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.465611][T15712] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 174.477618][ T24] IPVS: starting estimator thread 0... [ 174.482636][T15712] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5153: Corrupt directory, running e2fsck is recommended [ 174.526486][T15712] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.538054][T15712] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 174.548162][T15712] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.5153: Corrupt directory, running e2fsck is recommended [ 174.587703][T15729] IPVS: using max 2208 ests per chain, 110400 per kthread [ 174.599067][T15712] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.622193][T15716] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.630720][T15716] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.639235][T15716] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.647658][T15716] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.659683][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.790043][T15758] SELinux: security policydb version 18 (MLS) not backwards compatible [ 174.803623][T15758] SELinux: failed to load policy [ 174.855868][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5173'. [ 174.879451][T15766] loop1: detected capacity change from 0 to 164 [ 174.905268][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5176'. [ 174.923247][T15768] bridge_slave_1: left allmulticast mode [ 174.929080][T15768] bridge_slave_1: left promiscuous mode [ 174.934785][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.945122][T15768] bridge_slave_0: left allmulticast mode [ 174.950836][T15768] bridge_slave_0: left promiscuous mode [ 174.956510][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.964025][T15766] syz.1.5175: attempt to access beyond end of device [ 174.964025][T15766] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 174.979260][T15766] syz.1.5175: attempt to access beyond end of device [ 174.979260][T15766] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 175.112387][T15781] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5181'. [ 175.132015][T15778] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5181'. [ 175.574266][T15819] loop6: detected capacity change from 0 to 512 [ 175.584829][T15819] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #17: comm syz.6.5200: iget: bogus i_mode (0) [ 175.596627][T15819] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5200: couldn't read orphan inode 17 (err -117) [ 175.609059][T15819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.623271][T15819] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.5200: bg 0: block 7: invalid block bitmap [ 175.649389][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.703531][T15830] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5205'. [ 176.064077][T15853] loop6: detected capacity change from 0 to 164 [ 176.073619][T15853] syz.6.5216: attempt to access beyond end of device [ 176.073619][T15853] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 176.088260][T15853] syz.6.5216: attempt to access beyond end of device [ 176.088260][T15853] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 176.139685][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 176.139769][ T29] audit: type=1400 audit(1738397371.420:5964): avc: denied { create } for pid=15857 comm="syz.8.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 176.212168][ T29] audit: type=1400 audit(1738397371.420:5965): avc: denied { sys_admin } for pid=15857 comm="syz.8.5218" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 176.233273][ T29] audit: type=1400 audit(1738397371.450:5966): avc: denied { checkpoint_restore } for pid=15857 comm="syz.8.5218" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.312244][ T29] audit: type=1326 audit(1738397371.590:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 176.336350][ T29] audit: type=1326 audit(1738397371.590:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 176.359952][ T29] audit: type=1326 audit(1738397371.590:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 176.383547][ T29] audit: type=1326 audit(1738397371.590:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 176.384932][T15864] Invalid logical block size (-1) [ 176.407130][ T29] audit: type=1326 audit(1738397371.590:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 176.462879][ T29] audit: type=1326 audit(1738397371.720:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 176.486481][ T29] audit: type=1326 audit(1738397371.720:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15865 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 176.653546][T15890] loop6: detected capacity change from 0 to 2048 [ 176.709986][T15890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.725023][T15904] netlink: 'syz.7.5239': attribute type 13 has an invalid length. [ 176.843802][T15913] xt_hashlimit: max too large, truncated to 1048576 [ 176.892464][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5245'. [ 176.901708][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5245'. [ 177.009692][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.033572][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5252'. [ 177.054464][T15934] sd 0:0:1:0: device reset [ 177.139638][T15953] loop7: detected capacity change from 0 to 2048 [ 177.153986][T15954] SELinux: security_context_str_to_sid () failed with errno=-22 [ 177.160599][T15953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.346511][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.437603][T15984] program syz.0.5273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.681480][T16027] vhci_hcd: invalid port number 15 [ 177.686644][T16027] vhci_hcd: invalid port number 15 [ 177.898265][T16051] Invalid logical block size (-1) [ 178.808681][T16093] loop8: detected capacity change from 0 to 2048 [ 178.820686][T16093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.833332][T16101] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.915892][T10850] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.929111][T16107] ebtables: ebtables: counters copy to user failed while replacing table [ 178.996813][T16113] bond1: entered promiscuous mode [ 179.001958][T16113] bond1: entered allmulticast mode [ 179.007757][T16116] loop7: detected capacity change from 0 to 2048 [ 179.014780][T16113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.031965][T16113] bond1 (unregistering): Released all slaves [ 179.039730][T16116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.070006][T16116] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.085653][T16116] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5334: bg 0: block 345: padding at end of block bitmap is not set [ 179.101825][T16116] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 179.140716][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.151957][T16129] Process accounting resumed [ 179.197809][T16135] __nla_validate_parse: 7 callbacks suppressed [ 179.197824][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5339'. [ 179.215631][T16137] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5342'. [ 179.232256][T16135] bridge0: port 3(batadv1) entered blocking state [ 179.238861][T16135] bridge0: port 3(batadv1) entered disabled state [ 179.253041][T16135] batadv1: entered allmulticast mode [ 179.259068][T16135] batadv1: entered promiscuous mode [ 179.366400][T16159] loop6: detected capacity change from 0 to 2048 [ 179.399951][T16159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.416648][T16159] ext4 filesystem being mounted at /979/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.433060][T16159] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5350: bg 0: block 345: padding at end of block bitmap is not set [ 179.451329][T16159] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 179.488417][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.605477][T16194] loop8: detected capacity change from 0 to 512 [ 179.615473][T16194] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #15: comm syz.8.5369: inline data xattr refers to an external xattr inode [ 179.638775][T16199] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 179.643521][T16194] EXT4-fs (loop8): Remounting filesystem read-only [ 179.655899][T16194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.668607][T16194] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 179.675534][T16194] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.738640][ T3389] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 179.747928][ T3389] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 179.802201][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5377'. [ 179.823220][T16213] IPVS: Error connecting to the multicast addr [ 179.876190][T16223] loop7: detected capacity change from 0 to 2048 [ 179.928032][T16223] loop7: p1 < > p4 [ 179.934072][T16223] loop7: p4 size 8388608 extends beyond EOD, truncated [ 180.013885][T16237] loop1: detected capacity change from 0 to 512 [ 180.045322][T16237] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.5388: inline data xattr refers to an external xattr inode [ 180.062836][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5389'. [ 180.085375][T16237] EXT4-fs (loop1): Remounting filesystem read-only [ 180.122957][T16237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.208054][T16237] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 180.216538][T16257] loop6: detected capacity change from 0 to 164 [ 180.227969][T16237] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.440172][T16288] xt_hashlimit: max too large, truncated to 1048576 [ 180.473906][T16292] loop6: detected capacity change from 0 to 512 [ 180.483163][T16292] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #15: comm syz.6.5415: inline data xattr refers to an external xattr inode [ 180.499656][T16292] EXT4-fs (loop6): Remounting filesystem read-only [ 180.506658][T16292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.521475][T16292] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 180.528807][T16292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.641575][T16318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16318 comm=syz.7.5423 [ 180.654184][T16318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16318 comm=syz.7.5423 [ 180.675066][T16309] loop8: detected capacity change from 0 to 2048 [ 180.689802][T16322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5425'. [ 180.698831][T16322] netlink: 'syz.1.5425': attribute type 7 has an invalid length. [ 180.706577][T16322] netlink: 'syz.1.5425': attribute type 8 has an invalid length. [ 180.714477][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5425'. [ 180.717286][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5429'. [ 180.736069][T16309] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.770240][T16309] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5420: bg 0: block 345: padding at end of block bitmap is not set [ 180.784953][T16309] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 180.788974][T16334] netlink: 'syz.1.5430': attribute type 1 has an invalid length. [ 180.806044][T16336] netlink: 'syz.6.5434': attribute type 10 has an invalid length. [ 180.822146][T16334] bond1: entered promiscuous mode [ 180.822336][T16334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.824919][T16336] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 180.825399][T16336] team0: Port device netdevsim1 added [ 180.860631][T16334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.861107][T16334] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 180.861190][T16334] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 180.863469][T16334] bond1: (slave ip6gre1): making interface the new active one [ 180.863483][T16334] ip6gre1: entered promiscuous mode [ 180.865058][T16334] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 180.945017][T16347] IPv6: Can't replace route, no match found [ 181.290554][T16379] loop1: detected capacity change from 0 to 2048 [ 181.318217][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 181.318230][ T29] audit: type=1400 audit(1738397376.600:6214): avc: denied { mounton } for pid=16378 comm="syz.1.5452" path="/1115/bus" dev="tmpfs" ino=5768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.411945][ T29] audit: type=1400 audit(1738397376.680:6215): avc: denied { create } for pid=16382 comm="syz.6.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.431769][ T29] audit: type=1400 audit(1738397376.680:6216): avc: denied { mount } for pid=16378 comm="syz.1.5452" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 181.453542][ T29] audit: type=1400 audit(1738397376.680:6217): avc: denied { write } for pid=16378 comm="syz.1.5452" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.475285][ T29] audit: type=1400 audit(1738397376.680:6218): avc: denied { add_name } for pid=16378 comm="syz.1.5452" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.497372][ T29] audit: type=1400 audit(1738397376.680:6219): avc: denied { create } for pid=16378 comm="syz.1.5452" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.519033][ T29] audit: type=1400 audit(1738397376.680:6220): avc: denied { read append open } for pid=16378 comm="syz.1.5452" path="/1115/bus/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.574343][ T29] audit: type=1400 audit(1738397376.780:6221): avc: denied { map } for pid=16378 comm="syz.1.5452" path="/1115/bus/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.598309][ T29] audit: type=1400 audit(1738397376.780:6222): avc: denied { write } for pid=16378 comm="syz.1.5452" path="/1115/bus/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.622477][ T29] audit: type=1400 audit(1738397376.840:6223): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 181.888079][T16402] loop1: detected capacity change from 0 to 8192 [ 181.895313][T16402] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.067139][T16433] netlink: 'syz.0.5474': attribute type 10 has an invalid length. [ 182.086925][T16431] loop7: detected capacity change from 0 to 256 [ 182.147158][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5478'. [ 182.376534][T16480] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 182.455929][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5502'. [ 182.516072][T16500] loop7: detected capacity change from 0 to 512 [ 182.537156][T16500] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:164: inode #15: comm syz.7.5504: inline data xattr refers to an external xattr inode [ 182.554608][T16500] EXT4-fs (loop7): Remounting filesystem read-only [ 182.561912][T16500] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 182.698098][T16511] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5510'. [ 182.770804][T16522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.779393][T16522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.972992][T16537] Cannot find del_set index 0 as target [ 183.034852][T16549] tipc: Failed to obtain node identity [ 183.040425][T16549] tipc: Enabling of bearer rejected, failed to enable media [ 183.174241][T16573] bond2: entered promiscuous mode [ 183.179331][T16573] bond2: entered allmulticast mode [ 183.186134][T16573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.200109][T16573] bond2 (unregistering): Released all slaves [ 183.524411][T16626] Dead loop on virtual device ip6_vti0, fix it urgently! [ 183.531894][T16626] Dead loop on virtual device ip6_vti0, fix it urgently! [ 183.539260][T16626] Dead loop on virtual device ip6_vti0, fix it urgently! [ 183.546525][T16626] Dead loop on virtual device ip6_vti0, fix it urgently! [ 183.553765][T16626] Dead loop on virtual device ip6_vti0, fix it urgently! [ 183.561134][T16626] Dead loop on virtual device ip6_vti0, fix it urgently! [ 183.958759][T16684] SELinux: syz.8.5593 (16684) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 184.076659][T16705] ip6tnl1: entered promiscuous mode [ 184.081918][T16705] ip6tnl1: entered allmulticast mode [ 184.199220][T16720] binfmt_misc: register: failed to install interpreter file ./file0 [ 184.219487][T16718] loop1: detected capacity change from 0 to 1024 [ 184.226460][T16718] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.250597][T16718] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 184.272277][T16718] EXT4-fs (loop1): orphan cleanup on readonly fs [ 184.283477][T16718] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 184.299087][T16718] EXT4-fs (loop1): Remounting filesystem read-only [ 184.306064][T16718] EXT4-fs (loop1): 1 orphan inode deleted [ 184.341602][T16718] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 184.516468][T16759] loop7: detected capacity change from 0 to 128 [ 184.557815][T16764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16764 comm=syz.1.5628 [ 184.593248][T16766] 9pnet: Could not find request transport: 0xffffffffffffffff [ 184.612130][T16771] __nla_validate_parse: 15 callbacks suppressed [ 184.612141][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5632'. [ 184.694509][T16779] xt_hashlimit: max too large, truncated to 1048576 [ 184.714461][T16779] No such timeout policy "syz1" [ 184.769127][T16789] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5641'. [ 184.873685][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5660'. [ 184.883973][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5660'. [ 184.929073][T16811] bond1: entered promiscuous mode [ 184.934205][T16811] bond1: entered allmulticast mode [ 184.941400][T16811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.951486][T16811] bond1 (unregistering): Released all slaves [ 185.135195][T16839] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.143530][T16839] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.151915][T16839] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.160238][T16839] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.177704][T16839] geneve2: entered promiscuous mode [ 185.182939][T16839] geneve2: entered allmulticast mode [ 185.224657][T16839] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.233066][T16839] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.241563][T16839] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.249942][T16839] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.363143][T16857] sd 0:0:1:0: device reset [ 185.371313][T16866] loop1: detected capacity change from 0 to 512 [ 185.401895][T16866] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5674: bg 0: block 248: padding at end of block bitmap is not set [ 185.426892][T16866] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.5674: Failed to acquire dquot type 1 [ 185.445732][T16866] EXT4-fs (loop1): 1 truncate cleaned up [ 185.451977][T16866] ext4 filesystem being mounted at /1161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.689788][T16908] wireguard0: entered promiscuous mode [ 185.695293][T16908] wireguard0: entered allmulticast mode [ 185.915979][T16939] SELinux: syz.7.5706 (16939) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 186.007121][T16954] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 186.189314][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5730'. [ 186.220905][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5730'. [ 186.344382][T16994] loop1: detected capacity change from 0 to 8192 [ 186.358956][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 186.358970][ T29] audit: type=1400 audit(1738397381.640:6645): avc: denied { mount } for pid=16993 comm="syz.1.5732" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 186.397015][ T29] audit: type=1400 audit(1738397381.670:6646): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 186.481683][ T29] audit: type=1400 audit(1738397381.760:6647): avc: denied { ioctl } for pid=17016 comm="syz.1.5743" path="socket:[49460]" dev="sockfs" ino=49460 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.521038][T17019] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.544699][ T29] audit: type=1326 audit(1738397381.810:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c5cdcda9 code=0x7ffc0000 [ 186.556078][T17015] loop7: detected capacity change from 0 to 256 [ 186.568629][ T29] audit: type=1326 audit(1738397381.810:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f90c5cdcda9 code=0x7ffc0000 [ 186.575651][T17015] FAT-fs (loop7): bogus number of FAT sectors [ 186.598327][ T29] audit: type=1326 audit(1738397381.810:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.1.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c5cdcda9 code=0x7ffc0000 [ 186.628559][T17015] FAT-fs (loop7): Can't find a valid FAT filesystem [ 186.667920][ T29] audit: type=1400 audit(1738397381.940:6651): avc: denied { create } for pid=17029 comm="syz.8.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.687729][ T29] audit: type=1400 audit(1738397381.940:6652): avc: denied { ioctl } for pid=17029 comm="syz.8.5748" path="socket:[49078]" dev="sockfs" ino=49078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.712741][ T29] audit: type=1400 audit(1738397381.940:6653): avc: denied { setopt } for pid=17029 comm="syz.8.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.732637][ T29] audit: type=1400 audit(1738397381.940:6654): avc: denied { write } for pid=17029 comm="syz.8.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.804278][T17042] netlink: 'syz.1.5753': attribute type 1 has an invalid length. [ 186.812165][T17042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5753'. [ 186.848541][T17045] loop1: detected capacity change from 0 to 512 [ 186.857882][T17045] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.870646][T17045] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 186.886896][T17045] EXT4-fs (loop1): 1 truncate cleaned up [ 186.960816][T17063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5761'. [ 186.989993][T17068] loop7: detected capacity change from 0 to 128 [ 186.997163][T17063] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 187.005672][T17068] FAT-fs (loop7): Invalid FSINFO signature: 0x41045252, 0x00067272 (sector = 1) [ 187.007763][T17063] bond2: (slave vti0): Error -95 calling set_mac_address [ 187.081012][T17072] loop6: detected capacity change from 0 to 512 [ 187.112319][T17072] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5763: bg 0: block 248: padding at end of block bitmap is not set [ 187.151222][T17072] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.5763: Failed to acquire dquot type 1 [ 187.170171][T17072] EXT4-fs (loop6): 1 truncate cleaned up [ 187.177887][T17072] ext4 filesystem being mounted at /1037/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.198384][T17086] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.207171][T17086] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.215931][T17086] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.224753][T17086] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.239194][T17086] geneve2: entered promiscuous mode [ 187.244445][T17086] geneve2: entered allmulticast mode [ 187.263959][T17086] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.272941][T17086] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.282066][T17086] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.290960][T17086] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.446438][T17110] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.501229][T17125] lo: entered promiscuous mode [ 187.506044][T17125] lo: entered allmulticast mode [ 187.530384][T17127] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5790'. [ 187.539499][T17127] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5790'. [ 187.760531][T17155] ip6gretap0 speed is unknown, defaulting to 1000 [ 188.005474][T17176] netlink: 'syz.6.5812': attribute type 7 has an invalid length. [ 188.069056][T17185] random: crng reseeded on system resumption [ 188.268105][T17209] ip6gretap0 speed is unknown, defaulting to 1000 [ 188.358354][T17222] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 188.383597][T17224] loop6: detected capacity change from 0 to 2048 [ 188.414411][T17231] serio: Serial port ttyS3 [ 188.541845][T17247] tipc: Started in network mode [ 188.546786][T17247] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 188.555835][T17247] tipc: Enabling of bearer rejected, failed to enable media [ 188.660267][T17259] 9p: Unknown Cache mode or invalid value m [ 188.672339][T17262] geneve2: entered promiscuous mode [ 188.677620][T17262] geneve2: entered allmulticast mode [ 188.729332][T17271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.739214][T17270] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.749390][T17271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.767639][T17273] wireguard0: entered promiscuous mode [ 188.773169][T17273] wireguard0: entered allmulticast mode [ 188.810216][T17270] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.880540][T17270] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.922280][T17285] loop6: detected capacity change from 0 to 4096 [ 188.929266][T17285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.980595][T17270] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.029118][T17300] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 189.034219][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.043698][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.051289][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.060541][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.068048][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.071347][T17270] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.075453][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.091006][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.096716][T17270] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.098412][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.110251][T17270] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.113920][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.128629][T17270] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.129509][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.145330][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.152739][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.160141][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.167595][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.177704][T17306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.211031][T17309] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 189.218745][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.235056][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.242639][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.250143][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.257576][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.264971][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.272371][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.279865][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.287271][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.294740][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.302302][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.309770][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.317176][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.324656][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.332065][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.339473][ T3373] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 189.347700][T17309] SELinux: failed to load policy [ 189.366204][ T3373] hid-generic 0000:0000:0000.000D: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 189.407395][T17315] can0: slcan on ptm0. [ 189.437739][T17314] can0 (unregistered): slcan off ptm0. [ 189.536355][T17352] tipc: Started in network mode [ 189.541402][T17352] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 189.550355][T17352] tipc: Enabling of bearer rejected, failed to enable media [ 189.583694][T17356] loop0: detected capacity change from 0 to 736 [ 189.664457][T17370] __nla_validate_parse: 5 callbacks suppressed [ 189.664471][T17370] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5901'. [ 189.694888][T17370] netlink: 'syz.6.5901': attribute type 9 has an invalid length. [ 189.744887][T17375] random: crng reseeded on system resumption [ 189.796340][T17380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.822418][T17382] Cannot find add_set index 0 as target [ 189.946934][T17403] loop6: detected capacity change from 0 to 2048 [ 189.962195][T17403] EXT4-fs mount: 18 callbacks suppressed [ 189.962245][T17403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.993167][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.021007][T17418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.029777][T17418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.325073][T17435] loop6: detected capacity change from 0 to 2048 [ 190.339111][T17435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.354620][T17435] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.380998][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.394426][T17440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5933'. [ 190.496592][ T24] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz1 [ 190.532714][T17466] loop7: detected capacity change from 0 to 512 [ 190.560309][T17466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.573479][T17466] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.606049][T17474] serio: Serial port ttyS3 [ 190.612842][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.678446][T17485] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.687191][T17485] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.695945][T17485] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.704789][T17485] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.714464][T17485] geneve2: entered promiscuous mode [ 190.719735][T17485] geneve2: entered allmulticast mode [ 190.726307][T17485] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.735244][T17485] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.744184][T17485] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.753318][T17485] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.819018][T17492] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5955'. [ 190.829778][T17492] 0ŞXą¦Ŕ: renamed from caif0 [ 190.836170][T17492] 0ŞXą¦Ŕ: entered allmulticast mode [ 190.841420][T17492] A link change request failed with some changes committed already. Interface 60ŞXą¦Ŕ may have been left with an inconsistent configuration, please check. [ 191.042835][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5962'. [ 191.279042][T17531] loop7: detected capacity change from 0 to 8192 [ 191.394716][T17537] serio: Serial port ptm0 [ 191.404980][T17546] loop7: detected capacity change from 0 to 512 [ 191.429929][T17546] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 191.444930][T17546] EXT4-fs (loop7): mount failed [ 191.532462][ T29] kauditd_printk_skb: 1195 callbacks suppressed [ 191.532475][ T29] audit: type=1400 audit(1738397386.810:7848): avc: denied { read } for pid=17567 comm="syz.0.5990" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 191.562099][ T29] audit: type=1400 audit(1738397386.810:7849): avc: denied { open } for pid=17567 comm="syz.0.5990" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 191.591266][ T29] audit: type=1400 audit(1738397386.870:7850): avc: denied { ioctl } for pid=17567 comm="syz.0.5990" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 191.789757][T17572] loop7: detected capacity change from 0 to 32768 [ 191.801306][T17581] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 191.838852][T17572] loop7: p1 p2 p3 < p5 p6 > [ 191.843610][T17572] loop7: p1 size 242222080 extends beyond EOD, truncated [ 191.847169][ T29] audit: type=1400 audit(1738397387.120:7851): avc: denied { read write } for pid=4568 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.874930][ T29] audit: type=1400 audit(1738397387.120:7852): avc: denied { open } for pid=4568 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.899225][ T29] audit: type=1400 audit(1738397387.120:7853): avc: denied { ioctl } for pid=4568 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.921041][T17572] loop7: p2 start 4294967295 is beyond EOD, truncated [ 191.934155][ T29] audit: type=1400 audit(1738397387.180:7854): avc: denied { prog_load } for pid=17570 comm="syz.7.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.953471][ T29] audit: type=1400 audit(1738397387.180:7855): avc: denied { bpf } for pid=17570 comm="syz.7.5992" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.974138][ T29] audit: type=1400 audit(1738397387.180:7856): avc: denied { perfmon } for pid=17570 comm="syz.7.5992" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.995156][ T29] audit: type=1400 audit(1738397387.180:7857): avc: denied { prog_run } for pid=17570 comm="syz.7.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.084892][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.104933][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.210562][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6003'. [ 192.242324][T17601] netlink: 172 bytes leftover after parsing attributes in process `syz.7.6004'. [ 192.252355][T17601] netlink: 'syz.7.6004': attribute type 9 has an invalid length. [ 192.269297][T17603] xt_hashlimit: max too large, truncated to 1048576 [ 192.288062][T17603] Cannot find set identified by id 0 to match [ 192.313767][T17605] loop0: detected capacity change from 0 to 512 [ 192.340646][T17609] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.340951][T17605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.348944][T17609] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.363545][T17605] ext4 filesystem being mounted at /1318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.369554][T17609] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.387464][T17605] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.6006: corrupted inode contents [ 192.388269][T17609] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.402089][T17605] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.6006: mark_inode_dirty error [ 192.408365][T17609] geneve2: entered promiscuous mode [ 192.424661][T17609] geneve2: entered allmulticast mode [ 192.431119][T17605] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.6006: corrupted inode contents [ 192.442996][T17609] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.443093][T17605] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.6006: mark_inode_dirty error [ 192.451396][T17609] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.470895][T17609] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.479327][T17609] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.544021][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.559298][T17616] loop7: detected capacity change from 0 to 8192 [ 192.577253][T17616] syz.7.6010: attempt to access beyond end of device [ 192.577253][T17616] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 192.649126][T17628] loop6: detected capacity change from 0 to 128 [ 192.655910][T17616] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 192.663889][T17616] FAT-fs (loop7): Filesystem has been set read-only [ 192.694901][T17616] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 192.716951][ T9801] kworker/u8:12: attempt to access beyond end of device [ 192.716951][ T9801] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 192.740535][T17616] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 192.909767][T17648] xt_bpf: check failed: parse error [ 193.016386][T17665] netlink: 'syz.7.6035': attribute type 3 has an invalid length. [ 193.024374][T17665] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6035'. [ 193.139438][T17687] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6043'. [ 193.186447][T17687] netlink: 'syz.1.6043': attribute type 9 has an invalid length. [ 193.222169][T17695] loop6: detected capacity change from 0 to 8192 [ 193.239385][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6048'. [ 193.308235][T17705] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 193.316988][T17705] SELinux: failed to load policy [ 193.375679][T17720] xt_hashlimit: max too large, truncated to 1048576 [ 193.439381][T17731] program syz.7.6065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.603065][T17757] syzkaller1: entered promiscuous mode [ 193.608828][T17757] syzkaller1: entered allmulticast mode [ 193.630845][T17761] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 193.630845][T17761] program +}[@ not setting count and/or reply_len properly [ 193.744359][T17769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.752813][T17769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.045448][T17792] loop0: detected capacity change from 0 to 512 [ 194.055797][T17792] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.6090: iget: bogus i_mode (0) [ 194.056430][T17791] SELinux: Context system_u:object_r:auditd_initrc_exec_t:s0 is not valid (left unmapped). [ 194.067299][T17792] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.6090: couldn't read orphan inode 17 (err -117) [ 194.090197][T17792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.112557][T17792] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6090: bg 0: block 7: invalid block bitmap [ 194.139638][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.252756][T17817] loop0: detected capacity change from 0 to 1024 [ 194.259992][T17817] EXT4-fs: Ignoring removed nobh option [ 194.260357][T17819] 9p: Unknown Cache mode or invalid value m [ 194.265644][T17817] EXT4-fs: Ignoring removed bh option [ 194.278752][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6104'. [ 194.291093][T17820] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.299907][T17820] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.308679][T17820] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.317500][T17820] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.326276][T17820] vxlan0: entered promiscuous mode [ 194.340835][T17817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.373581][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.405906][T17830] netlink: 'syz.8.6111': attribute type 1 has an invalid length. [ 194.457913][T17842] random: crng reseeded on system resumption [ 194.744268][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6125'. [ 194.773968][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6126'. [ 194.825164][T17866] ip6gretap0 speed is unknown, defaulting to 1000 [ 194.992116][T17874] wireguard0: entered promiscuous mode [ 194.997680][T17874] wireguard0: entered allmulticast mode [ 195.118299][T17881] xt_connbytes: Forcing CT accounting to be enabled [ 195.127437][T17881] Cannot find add_set index 0 as target [ 195.247280][T17887] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6137'. [ 195.256358][T17887] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6137'. [ 195.577268][T17917] netlink: 'syz.6.6152': attribute type 1 has an invalid length. [ 195.585091][T17917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6152'. [ 195.610395][T17909] loop0: detected capacity change from 0 to 8192 [ 195.619354][T17909] syz.0.6149: attempt to access beyond end of device [ 195.619354][T17909] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 195.653894][T17909] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 195.661752][T17909] FAT-fs (loop0): Filesystem has been set read-only [ 195.678621][T17909] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 195.706024][T17909] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 196.017602][T17972] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6176'. [ 196.026899][T17972] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6176'. [ 196.075624][T17983] cgroup: fork rejected by pids controller in /syz1 [ 196.133618][T17993] msdos: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙01777777777777777777777˙0xffffffffffffffff18446744073709551615˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙' [ 196.165806][T17995] netlink: 'syz.8.6187': attribute type 1 has an invalid length. [ 196.173628][T17995] netlink: 16179 bytes leftover after parsing attributes in process `syz.8.6187'. [ 196.456597][T18016] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6197'. [ 196.484584][T18018] loop0: detected capacity change from 0 to 1024 [ 196.525538][T18024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.535171][T18018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.544808][T18024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.560621][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 196.560634][ T29] audit: type=1400 audit(1738397391.840:8166): avc: denied { link } for pid=18017 comm="syz.0.6198" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.589361][T18018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6198: bg 0: block 260: invalid block bitmap [ 196.656371][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.757017][T18031] SELinux: policydb version 0 does not match my version range 15-34 [ 196.787314][T18031] SELinux: failed to load policy [ 196.834096][ T29] audit: type=1400 audit(1738397392.110:8167): avc: denied { mounton } for pid=18036 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 196.982857][T18036] ip6gretap0 speed is unknown, defaulting to 1000 [ 196.999745][ T29] audit: type=1326 audit(1738397392.280:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.7.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77757ccda9 code=0x7ffc0000 [ 197.023357][ T29] audit: type=1326 audit(1738397392.280:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.7.6210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77757ccda9 code=0x7ffc0000 [ 197.109484][T18065] loop7: detected capacity change from 0 to 512 [ 197.119835][T18065] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 197.182576][T18065] EXT4-fs (loop7): 1 truncate cleaned up [ 197.189091][T18065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.211914][T18036] chnl_net:caif_netlink_parms(): no params data found [ 197.282595][ T29] audit: type=1400 audit(1738397392.560:8170): avc: denied { setattr } for pid=18064 comm="syz.7.6214" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 197.305695][ T29] audit: type=1400 audit(1738397392.560:8171): avc: denied { read write } for pid=18064 comm="syz.7.6214" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 197.328664][ T29] audit: type=1400 audit(1738397392.560:8172): avc: denied { open } for pid=18064 comm="syz.7.6214" path="/429/file2/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 197.350940][T18078] ALSA: seq fatal error: cannot create timer (-19) [ 197.375201][T18036] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.382284][T18036] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.393612][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.421096][T18036] bridge_slave_0: entered allmulticast mode [ 197.427518][T18036] bridge_slave_0: entered promiscuous mode [ 197.429588][ T29] audit: type=1400 audit(1738397392.690:8173): avc: denied { mount } for pid=18083 comm="syz.8.6221" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 197.456528][T18036] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.463753][T18036] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.480138][T18036] bridge_slave_1: entered allmulticast mode [ 197.498627][ T29] audit: type=1400 audit(1738397392.710:8174): avc: denied { unmount } for pid=10850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 197.518933][ T29] audit: type=1326 audit(1738397392.760:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18085 comm="syz.0.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6848cda9 code=0x7ffc0000 [ 197.524096][T18094] loop0: detected capacity change from 0 to 256 [ 197.551481][T18036] bridge_slave_1: entered promiscuous mode [ 197.581883][T18094] FAT-fs (loop0): bogus number of FAT sectors [ 197.588091][T18094] FAT-fs (loop0): Can't find a valid FAT filesystem [ 197.609507][T18036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.638733][T18036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.680356][T18036] team0: Port device team_slave_0 added [ 197.687069][T18036] team0: Port device team_slave_1 added [ 197.747625][T18036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.754612][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.780875][T18036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.802203][T18036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.809184][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.835203][T18036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.882003][T18036] hsr_slave_0: entered promiscuous mode [ 197.890263][T18036] hsr_slave_1: entered promiscuous mode [ 197.896338][T18036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.904268][T18036] Cannot create hsr debugfs directory [ 197.914129][T18119] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6236'. [ 197.964166][T18128] netlink: 'syz.0.6240': attribute type 3 has an invalid length. [ 198.232995][T18036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.251182][T18036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.262915][T18036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.273949][T18036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.335633][T18036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.354659][T18036] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.363904][T10431] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.371019][T10431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.391474][T18036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.401860][T18036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.417792][T10431] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.424885][T10431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.509115][T18188] loop6: detected capacity change from 0 to 4096 [ 198.511225][T18036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.524994][T18188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.627283][T18036] veth0_vlan: entered promiscuous mode [ 198.635360][T18036] veth1_vlan: entered promiscuous mode [ 198.651163][T18036] veth0_macvtap: entered promiscuous mode [ 198.668677][T18036] veth1_macvtap: entered promiscuous mode [ 198.746348][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.760949][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.771473][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.825973][T18036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.843115][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.853672][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.879924][T18036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.889711][T18036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.898542][T18036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.907278][T18036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.916025][T18036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.996792][T18224] loop7: detected capacity change from 0 to 256 [ 199.047065][T18228] loop0: detected capacity change from 0 to 512 [ 199.060769][T18228] EXT4-fs: Ignoring removed oldalloc option [ 199.068704][T18228] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.100476][T18228] EXT4-fs (loop0): 1 truncate cleaned up [ 199.106501][T18228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.146934][T18246] ip6gretap0 speed is unknown, defaulting to 1000 [ 199.177827][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.205134][T18255] random: crng reseeded on system resumption [ 199.276498][T18260] SELinux: failed to load policy [ 199.420987][T18283] loop6: detected capacity change from 0 to 512 [ 199.430677][T18284] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.438301][T18284] vhci_hcd: invalid port number 23 [ 199.468844][T18283] EXT4-fs: Ignoring removed oldalloc option [ 199.485182][T18283] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.519373][T18283] EXT4-fs (loop6): 1 truncate cleaned up [ 199.526747][T18283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.584088][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.655536][T18309] ref_ctr_offset mismatch. inode: 0x17cc offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 199.683355][T18314] loop1: detected capacity change from 0 to 128 [ 199.695603][T18314] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.713800][T18314] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.832155][T18328] loop1: detected capacity change from 0 to 512 [ 199.846418][T18328] EXT4-fs: Ignoring removed oldalloc option [ 199.855089][T18328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.870155][T18328] EXT4-fs (loop1): 1 truncate cleaned up [ 199.876191][T18328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.906309][T18036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.977069][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6318'. [ 200.070242][T18369] loop1: detected capacity change from 0 to 512 [ 200.080392][T18369] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.6329: iget: bogus i_mode (0) [ 200.091778][T18369] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.6329: couldn't read orphan inode 17 (err -117) [ 200.105595][T18369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.131437][T18036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.249520][T18382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.258466][T18382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.644294][ T7942] kernel read not supported for file /2541/status (pid: 7942 comm: kworker/1:5) [ 200.808323][T18421] loop6: detected capacity change from 0 to 512 [ 200.815867][T18421] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.825052][T18421] EXT4-fs (loop6): Couldn't mount because of unsupported optional features (800) [ 201.032502][T18451] netlink: 'syz.8.6365': attribute type 3 has an invalid length. [ 201.088719][T18462] rdma_rxe: rxe_newlink: failed to add tunl0 [ 201.134732][T18464] syzkaller0: entered promiscuous mode [ 201.140281][T18464] syzkaller0: entered allmulticast mode [ 201.572925][T18481] loop0: detected capacity change from 0 to 512 [ 201.580031][T18481] EXT4-fs: Ignoring removed oldalloc option [ 201.587500][T18481] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.6380: Parent and EA inode have the same ino 15 [ 201.600144][T18481] EXT4-fs (loop0): Remounting filesystem read-only [ 201.606758][T18481] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 201.616833][T18481] EXT4-fs (loop0): 1 orphan inode deleted [ 201.622914][T18481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.635002][T18481] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 201.641968][T18481] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.719349][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 201.719365][ T29] audit: type=1400 audit(1738397397.000:8460): avc: denied { write } for pid=18490 comm="syz.7.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.728159][T18493] loop0: detected capacity change from 0 to 128 [ 201.745767][ T29] audit: type=1400 audit(1738397397.000:8461): avc: denied { nlmsg_write } for pid=18490 comm="syz.7.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.773238][T18493] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.787453][T18493] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.820531][T18497] macvlan2: entered promiscuous mode [ 201.825869][T18497] bridge0: entered promiscuous mode [ 201.833053][T18497] bridge0: port 4(macvlan2) entered blocking state [ 201.839609][T18497] bridge0: port 4(macvlan2) entered disabled state [ 201.846270][T18497] macvlan2: entered allmulticast mode [ 201.851896][T18497] bridge0: entered allmulticast mode [ 201.859322][T18497] macvlan2: left allmulticast mode [ 201.864491][T18497] bridge0: left allmulticast mode [ 201.869964][T18497] bridge0: left promiscuous mode [ 201.928403][ T29] audit: type=1326 audit(1738397397.210:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18504 comm="syz.6.6391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x0 [ 201.991051][T18514] Non-string source [ 202.002331][ T29] audit: type=1400 audit(1738397397.280:8463): avc: denied { ioctl } for pid=18517 comm="syz.7.6397" path="socket:[54704]" dev="sockfs" ino=54704 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.040116][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6399'. [ 202.051493][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6399'. [ 202.221968][T18546] SELinux: security_context_str_to_sid () failed with errno=-22 [ 202.254172][T18553] xt_hashlimit: max too large, truncated to 1048576 [ 202.270142][T18553] No such timeout policy "syz1" [ 202.383986][T18565] netlink: 'syz.8.6415': attribute type 3 has an invalid length. [ 202.430749][ T29] audit: type=1326 audit(1738397397.710:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.8.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe112cda9 code=0x7ffc0000 [ 202.454464][ T29] audit: type=1326 audit(1738397397.710:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.8.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe112cda9 code=0x7ffc0000 [ 202.478141][ T29] audit: type=1326 audit(1738397397.710:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.8.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbe112cda9 code=0x7ffc0000 [ 202.501794][ T29] audit: type=1326 audit(1738397397.710:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.8.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe112cda9 code=0x7ffc0000 [ 202.525744][ T29] audit: type=1326 audit(1738397397.710:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.8.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbe112cda9 code=0x7ffc0000 [ 202.549426][ T29] audit: type=1326 audit(1738397397.710:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.8.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe112cda9 code=0x7ffc0000 [ 202.826853][T18600] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 202.861758][T18611] bond_slave_1: entered promiscuous mode [ 202.868407][T18611] bond_slave_1: left promiscuous mode [ 202.883320][T18615] loop7: detected capacity change from 0 to 128 [ 202.891636][T18615] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.904398][T18615] ext4 filesystem being mounted at /478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.971531][T13292] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.151511][T18647] pim6reg: entered allmulticast mode [ 203.158792][T18647] pim6reg: left allmulticast mode [ 203.545828][T18707] pim6reg: entered allmulticast mode [ 203.553109][T18707] macvlan0: entered allmulticast mode [ 203.558663][T18707] veth1_vlan: entered allmulticast mode [ 203.565592][T18707] veth1_vlan: left allmulticast mode [ 203.573018][T18707] macvlan0 (unregistering): left allmulticast mode [ 203.791168][T18733] 9pnet: p9_errstr2errno: server reported unknown error [ 203.958305][T18758] bond_slave_1: entered promiscuous mode [ 203.975062][T18758] bond_slave_1: left promiscuous mode [ 204.243702][T18798] loop1: detected capacity change from 0 to 256 [ 204.261732][T18800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.271239][T18800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.404689][T18806] loop1: detected capacity change from 0 to 1024 [ 204.440669][T18806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.486115][T18036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.595159][T18816] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 204.634657][T18818] loop1: detected capacity change from 0 to 2048 [ 204.643156][T18818] EXT4-fs: Ignoring removed bh option [ 204.648685][T18818] EXT4-fs: Ignoring removed bh option [ 204.680452][T18818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.787417][T18036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.809472][T18824] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6534'. [ 204.852996][T18831] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 204.862743][T18830] IPVS: stopping master sync thread 18831 ... [ 205.188651][ T8] kernel read not supported for file /vcs (pid: 8 comm: kworker/0:0) [ 205.193062][T18872] vhci_hcd: invalid port number 0 [ 205.222350][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6557'. [ 205.231372][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6557'. [ 205.339653][T18899] loop7: detected capacity change from 0 to 512 [ 205.346563][T18899] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 205.366452][T18899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 205.375008][T18899] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.6568: corrupted in-inode xattr: e_value size too large [ 205.391225][T18899] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.6568: couldn't read orphan inode 15 (err -117) [ 205.404411][T18899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.433694][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.629786][T18928] hub 5-0:1.0: USB hub found [ 205.634472][T18928] hub 5-0:1.0: 8 ports detected [ 205.690445][T18935] atomic_op ffff88811992cd28 conn xmit_atomic 0000000000000000 [ 205.705682][T18937] Cannot find add_set index 0 as target [ 205.754374][T18942] loop7: detected capacity change from 0 to 512 [ 205.771640][T18942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.793464][T18942] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.829127][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.844856][T18952] loop1: detected capacity change from 0 to 1024 [ 205.864783][T18956] loop7: detected capacity change from 0 to 512 [ 205.872080][T18952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.879582][T18956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.885679][T18952] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6589: bg 0: block 260: invalid block bitmap [ 205.896632][T18956] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.914091][T18952] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 205.932394][T18952] EXT4-fs error (device loop1): __ext4_new_inode:1277: comm syz.1.6589: failed to insert inode 13: doubly allocated? [ 205.947128][T13292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.958841][T18036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.007096][T18968] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6595'. [ 206.016251][T18968] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6595'. [ 206.025395][T18968] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6595'. [ 206.054654][T18972] netlink: 'syz.0.6597': attribute type 1 has an invalid length. [ 206.062420][T18972] netlink: 'syz.0.6597': attribute type 2 has an invalid length. [ 206.074064][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6597'. [ 206.166416][T18990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6606'. [ 206.178602][T18990] vlan2: entered promiscuous mode [ 206.183665][T18990] gretap0: entered promiscuous mode [ 206.189885][T18990] gretap0: left promiscuous mode [ 206.223243][T18998] hsr_slave_0: left promiscuous mode [ 206.230629][T18998] hsr_slave_1: left promiscuous mode [ 206.236661][T19000] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 206.266950][T19002] loop0: detected capacity change from 0 to 512 [ 206.278689][T19002] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 206.318144][T19002] EXT4-fs (loop0): mount failed [ 206.335550][T19010] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6615'. [ 206.371607][T19010] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 206.562290][T19031] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.571199][T19031] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.580142][T19031] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.588873][T19031] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.598140][T19031] vxlan0: entered promiscuous mode [ 206.603267][T19031] vxlan0: entered allmulticast mode [ 206.610209][T19031] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.619305][T19031] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.628273][T19031] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.637140][T19031] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.754721][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 206.754736][ T29] audit: type=1400 audit(1738397402.030:8656): avc: denied { append } for pid=19050 comm="syz.8.6633" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.922430][T19078] rdma_op ffff88811749b180 conn xmit_rdma 0000000000000000 [ 206.974227][T19082] pim6reg: entered allmulticast mode [ 206.982436][T19084] loop7: detected capacity change from 0 to 256 [ 206.986719][T19082] macvlan0: entered allmulticast mode [ 206.994222][T19082] veth1_vlan: entered allmulticast mode [ 207.001930][T19082] veth1_vlan: left allmulticast mode [ 207.025711][T19082] macvlan0 (unregistering): left allmulticast mode [ 207.103724][ T29] audit: type=1400 audit(1738397402.380:8657): avc: denied { getopt } for pid=19093 comm="syz.0.6653" lport=37085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.103823][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6653'. [ 207.154580][ T29] audit: type=1326 audit(1738397402.430:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.181803][ T29] audit: type=1326 audit(1738397402.430:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.205393][ T29] audit: type=1326 audit(1738397402.430:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.228966][ T29] audit: type=1326 audit(1738397402.430:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.252650][ T29] audit: type=1326 audit(1738397402.430:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.276203][ T29] audit: type=1326 audit(1738397402.430:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.299865][ T29] audit: type=1326 audit(1738397402.430:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.323514][ T29] audit: type=1326 audit(1738397402.430:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19101 comm="syz.6.6656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 207.351996][T19106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6657'. [ 207.435853][T19123] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 207.448283][T19121] IPVS: stopping master sync thread 19123 ... [ 207.611198][T19143] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 207.644139][T19151] hub 5-0:1.0: USB hub found [ 207.649418][T19151] hub 5-0:1.0: 8 ports detected [ 207.706592][T19160] ip6gretap0 speed is unknown, defaulting to 1000 [ 207.780381][T19172] netlink: 'syz.7.6686': attribute type 3 has an invalid length. [ 207.827433][T19179] bond1: entered promiscuous mode [ 207.832631][T19179] bond1: entered allmulticast mode [ 207.838679][T19179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.851301][T19179] bond1 (unregistering): Released all slaves [ 207.949851][T19189] netlink: 'syz.7.6694': attribute type 1 has an invalid length. [ 207.988126][T19195] loop7: detected capacity change from 0 to 256 [ 208.114092][T19216] xt_connbytes: Forcing CT accounting to be enabled [ 208.133048][T19216] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 208.323381][T19251] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 208.360612][T19255] ip6gretap0 speed is unknown, defaulting to 1000 [ 208.646346][T19285] loop6: detected capacity change from 0 to 1024 [ 208.668381][T19289] hsr_slave_1 (unregistering): left promiscuous mode [ 208.677125][T19285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.692453][T19285] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.6737: bg 0: block 260: invalid block bitmap [ 208.706079][T19285] EXT4-fs error (device loop6): __ext4_new_inode:1277: comm syz.6.6737: failed to insert inode 13: doubly allocated? [ 208.731299][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.780150][T19299] loop0: detected capacity change from 0 to 1024 [ 208.788963][T19299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.803026][T19299] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6751: bg 0: block 260: invalid block bitmap [ 208.816602][T19299] EXT4-fs error (device loop0): __ext4_new_inode:1277: comm syz.0.6751: failed to insert inode 13: doubly allocated? [ 208.839933][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.126641][T19304] loop6: detected capacity change from 0 to 512 [ 209.149051][T19304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.161808][T19304] ext4 filesystem being mounted at /1252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.177746][T19307] Falling back ldisc for ttyS3. [ 209.194134][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.335368][T19331] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.395589][T19337] loop1: detected capacity change from 0 to 512 [ 209.429630][T19337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.450954][T19337] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.483388][T19348] dvmrp1: entered allmulticast mode [ 209.489431][T19348] dvmrp1: left allmulticast mode [ 209.504357][T18036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.582544][T19358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.593388][T19358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.136617][T19414] vhci_hcd: default hub control req: 2006 v0f00 i0002 l0 [ 210.213896][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x1 [ 210.221427][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.229008][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.236387][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.243812][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.251244][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.259049][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.266497][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x2 [ 210.273964][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.281401][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.288824][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.296216][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.303624][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.311032][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.318440][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.325882][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.333288][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.340765][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.348167][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.355559][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.362962][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.370365][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.377820][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.385230][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.385354][T19426] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.392617][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.392639][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.415529][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.422999][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.430437][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.437874][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.445393][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.452858][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.460268][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.467706][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.475114][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.482589][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.490051][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.497491][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.504897][ T8] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 210.513323][ T8] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 210.574557][T19437] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 210.729081][T19455] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 210.738206][T19455] SELinux: failed to load policy [ 210.786353][T19458] loop1: detected capacity change from 0 to 2048 [ 210.800351][T19458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.940294][T19474] __nla_validate_parse: 5 callbacks suppressed [ 210.940308][T19474] netlink: 268 bytes leftover after parsing attributes in process `syz.6.6820'. [ 210.979617][T19476] +}[@: attempt to access beyond end of device [ 210.979617][T19476] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 211.017517][T19458] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.049852][T19458] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 211.062324][T19458] EXT4-fs (loop1): This should not happen!! Data will be lost [ 211.062324][T19458] [ 211.072051][T19458] EXT4-fs (loop1): Total free blocks count 0 [ 211.078296][T19458] EXT4-fs (loop1): Free/Dirty block details [ 211.084366][T19458] EXT4-fs (loop1): free_blocks=2415919104 [ 211.090217][T19458] EXT4-fs (loop1): dirty_blocks=8192 [ 211.095599][T19458] EXT4-fs (loop1): Block reservation details [ 211.101800][T19458] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 211.212839][ T9801] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 211.321275][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6839'. [ 211.519860][T19537] loop1: detected capacity change from 0 to 128 [ 211.545272][T19537] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.600922][T19537] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.692435][T19537] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.1.6848: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 211.714350][T19537] EXT4-fs (loop1): Remounting filesystem read-only [ 211.733501][T18036] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.759768][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 211.759783][ T29] audit: type=1326 audit(1738397407.040:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.800050][ T29] audit: type=1326 audit(1738397407.040:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.823641][ T29] audit: type=1326 audit(1738397407.040:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.847184][ T29] audit: type=1326 audit(1738397407.040:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.870726][ T29] audit: type=1326 audit(1738397407.040:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.894249][ T29] audit: type=1326 audit(1738397407.040:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.917820][ T29] audit: type=1326 audit(1738397407.040:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.941339][ T29] audit: type=1326 audit(1738397407.040:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.965056][ T29] audit: type=1326 audit(1738397407.040:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 211.988574][ T29] audit: type=1326 audit(1738397407.040:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.6.6855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62cf21cda9 code=0x7ffc0000 [ 212.016018][T19557] loop7: detected capacity change from 0 to 128 [ 212.025226][T19557] FAT-fs (loop7): Directory bread(block 162) failed [ 212.034050][T19557] FAT-fs (loop7): Directory bread(block 163) failed [ 212.042703][T19557] FAT-fs (loop7): Directory bread(block 164) failed [ 212.051390][T19557] FAT-fs (loop7): Directory bread(block 165) failed [ 212.059782][T19557] FAT-fs (loop7): Directory bread(block 166) failed [ 212.066392][T19557] FAT-fs (loop7): Directory bread(block 167) failed [ 212.073253][T19557] FAT-fs (loop7): Directory bread(block 168) failed [ 212.085968][T19557] FAT-fs (loop7): Directory bread(block 169) failed [ 212.094198][T19559] tmpfs: Unknown parameter '' [ 212.101365][T19557] vhci_hcd: invalid port number 61 [ 212.106572][T19557] vhci_hcd: default hub control req: d374 v3866 i003d l25388 [ 212.209440][T19583] netlink: 'syz.0.6871': attribute type 5 has an invalid length. [ 212.250769][T19588] SELinux: syz.1.6873 (19588) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 212.267043][T19594] loop6: detected capacity change from 0 to 512 [ 212.299614][ T3348] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 212.307192][ T3348] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 212.316959][T19594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.330925][T19594] ext4 filesystem being mounted at /1280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.341944][ T3348] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 212.363826][T19594] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 212.416830][T19594] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 212.447040][T19620] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 212.453585][T19620] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.461082][T19620] vhci_hcd vhci_hcd.0: Device attached [ 212.468147][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.469450][T19620] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 212.483660][T19620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.491296][T19620] vhci_hcd vhci_hcd.0: Device attached [ 212.508559][T19620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.529401][T19620] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 212.535982][T19620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.543659][T19620] vhci_hcd vhci_hcd.0: Device attached [ 212.555371][T19620] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 212.562127][T19620] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.569729][T19620] vhci_hcd vhci_hcd.0: Device attached [ 212.586571][T19620] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(13) [ 212.593254][T19620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 212.600968][T19620] vhci_hcd vhci_hcd.0: Device attached [ 212.612046][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6893'. [ 212.612859][T19639] vhci_hcd: connection closed [ 212.621560][T19625] vhci_hcd: connection closed [ 212.626451][T19622] vhci_hcd: connection closed [ 212.627594][T19629] vhci_hcd: connection closed [ 212.636089][ T56] vhci_hcd: stop threads [ 212.636159][T19635] vhci_hcd: connection closed [ 212.640816][ T56] vhci_hcd: release socket [ 212.640832][ T56] vhci_hcd: disconnect device [ 212.641158][ T56] vhci_hcd: stop threads [ 212.663654][ T56] vhci_hcd: release socket [ 212.668109][ T56] vhci_hcd: disconnect device [ 212.673051][ T3375] vhci_hcd: vhci_device speed not set [ 212.679596][ T56] vhci_hcd: stop threads [ 212.684038][ T56] vhci_hcd: release socket [ 212.688487][ T56] vhci_hcd: disconnect device [ 212.693382][ T56] vhci_hcd: stop threads [ 212.697718][ T56] vhci_hcd: release socket [ 212.702191][ T56] vhci_hcd: disconnect device [ 212.707352][ T56] vhci_hcd: stop threads [ 212.711648][ T56] vhci_hcd: release socket [ 212.716108][ T56] vhci_hcd: disconnect device [ 212.737592][ T3375] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 212.745156][ T3375] usb 15-1: enqueue for inactive port 0 [ 212.750872][ T3375] usb 15-1: enqueue for inactive port 0 [ 212.767690][ T3375] usb 15-1: enqueue for inactive port 0 [ 212.783925][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6900'. [ 212.793597][T19656] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6900'. [ 212.847616][ T3375] vhci_hcd: vhci_device speed not set [ 212.864546][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6905'. [ 213.003377][T19683] loop6: detected capacity change from 0 to 512 [ 213.019760][T19683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.035320][T19683] ext4 filesystem being mounted at /1286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.060192][T19683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.163788][T19701] binfmt_misc: register: failed to install interpreter file ./file0 [ 213.366787][T19737] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 213.374523][T19737] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 213.423474][T19739] infiniband syz0: set down [ 213.428062][T19739] infiniband syz0: added ipvlan1 [ 213.437795][T19739] RDS/IB: syz0: added [ 213.441870][T19739] smc: adding ib device syz0 with port count 1 [ 213.448182][T19739] smc: ib device syz0 port 1 has pnetid [ 213.895784][T19769] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 214.078823][T19787] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 214.259649][T19814] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 214.359469][T19829] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 214.422210][T19839] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 214.454521][T19843] vlan2: entered allmulticast mode [ 214.459716][T19843] bridge_slave_0: entered allmulticast mode [ 214.469568][T19843] bridge_slave_0: left allmulticast mode [ 214.484052][T19847] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 214.832202][T19873] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.845275][T19873] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 214.933913][T19887] veth1_to_team: entered promiscuous mode [ 214.942525][T19886] veth1_to_team: left promiscuous mode [ 214.981476][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7008'. [ 214.990539][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7008'. [ 215.162656][T19924] program syz.8.7024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.172763][T19924] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.252858][T19938] loop6: detected capacity change from 0 to 256 [ 215.427137][T19972] loop6: detected capacity change from 0 to 512 [ 215.435634][T19972] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 215.456486][T19972] EXT4-fs (loop6): 1 truncate cleaned up [ 215.464518][T19972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.480856][T19972] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7044: bg 0: block 400: padding at end of block bitmap is not set [ 215.507255][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.621711][T19993] bond3: entered promiscuous mode [ 215.626939][T19993] bond3: entered allmulticast mode [ 215.632772][T19993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.641883][T19993] bond3 (unregistering): Released all slaves [ 215.872287][T20032] SELinux: syz.0.7072 (20032) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 216.036514][T20050] netlink: 'syz.6.7081': attribute type 4 has an invalid length. [ 216.134389][T20061] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 216.284656][T20074] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7092'. [ 216.317667][T20074] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (192) [ 216.554175][T20085] loop1: detected capacity change from 0 to 512 [ 216.564285][T20086] loop6: detected capacity change from 0 to 512 [ 216.594781][T20088] binfmt_misc: register: failed to install interpreter file ./file2 [ 216.660138][T20093] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 216.701184][T20085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.715948][T20086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.731557][T20085] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.763254][T20086] ext4 filesystem being mounted at /1363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.778824][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 216.778837][ T29] audit: type=1400 audit(2000000002.550:9037): avc: denied { create } for pid=20102 comm="syz.8.7103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.814524][ T29] audit: type=1400 audit(2000000002.550:9038): avc: denied { connect } for pid=20102 comm="syz.8.7103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.834342][ T29] audit: type=1400 audit(2000000002.550:9039): avc: denied { shutdown } for pid=20102 comm="syz.8.7103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.854235][ T29] audit: type=1400 audit(2000000002.550:9040): avc: denied { write } for pid=20102 comm="syz.8.7103" path="socket:[60023]" dev="sockfs" ino=60023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.877972][ T29] audit: type=1400 audit(2000000002.580:9041): avc: denied { watch watch_reads } for pid=20083 comm="syz.1.7096" path="/174/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.901570][ T29] audit: type=1400 audit(2000000002.580:9042): avc: denied { write } for pid=20082 comm="syz.6.7097" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.923314][ T29] audit: type=1400 audit(2000000002.580:9043): avc: denied { add_name } for pid=20082 comm="syz.6.7097" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.944018][ T29] audit: type=1400 audit(2000000002.580:9044): avc: denied { create } for pid=20082 comm="syz.6.7097" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 216.964323][ T29] audit: type=1400 audit(2000000002.580:9045): avc: denied { read write open } for pid=20082 comm="syz.6.7097" path="/1363/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 216.987961][ T29] audit: type=1400 audit(2000000002.580:9046): avc: denied { unmount } for pid=18036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 217.008279][T18036] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.020304][ T4568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.084469][T20113] netlink: 165 bytes leftover after parsing attributes in process `syz.8.7108'. [ 217.157351][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7114'. [ 217.235796][T20134] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 217.304743][T20146] loop0: detected capacity change from 0 to 164 [ 217.311747][T20146] ISOFS: unable to read i-node block [ 217.317071][T20146] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 217.431877][T20169] netlink: 'syz.1.7135': attribute type 3 has an invalid length. [ 217.574620][T20179] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 217.587078][T20184] netlink: 'syz.8.7140': attribute type 3 has an invalid length. [ 217.633699][T20193] loop6: detected capacity change from 0 to 128 [ 217.658272][T20193] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.675304][T20197] netlink: 'syz.0.7148': attribute type 3 has an invalid length. [ 217.731274][T20205] loop7: detected capacity change from 0 to 2048 [ 217.772918][T20205] EXT4-fs error (device loop7): ext4_ext_precache:631: inode #2: comm syz.7.7153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 217.818704][T20220] ip6gretap0 speed is unknown, defaulting to 1000 [ 217.829930][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7161'. [ 217.899427][T20233] IPVS: Error connecting to the multicast addr [ 217.919733][T20235] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 217.947264][T20239] sd 0:0:1:0: device reset [ 218.014979][T20251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7173'. [ 218.024008][T20251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7173'. [ 218.079210][T20256] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.088167][T20256] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.096935][T20256] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.105796][T20256] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.115356][T20256] vxlan0: entered promiscuous mode [ 218.120554][T20256] vxlan0: entered allmulticast mode [ 218.133915][T20256] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.142907][T20256] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.151838][T20256] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.160751][T20256] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.261668][T20265] loop1: detected capacity change from 0 to 1024 [ 218.294684][T20265] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.7178: missing EA_INODE flag [ 218.306876][T20265] EXT4-fs (loop1): Remounting filesystem read-only [ 218.555979][T20277] ip6gretap0 speed is unknown, defaulting to 1000 [ 218.760012][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7187'. [ 218.769013][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7187'. [ 219.056642][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7196'. [ 219.065950][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7196'. [ 219.783257][T20350] ================================================================== [ 219.791367][T20350] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 219.799285][T20350] [ 219.801610][T20350] write to 0xffff888116c58880 of 8 bytes by task 20351 on cpu 0: [ 219.809338][T20350] cpu_map_kthread_run+0x4a1/0x11e0 [ 219.814549][T20350] kthread+0x4ae/0x520 [ 219.818663][T20350] ret_from_fork+0x4b/0x60 [ 219.823092][T20350] ret_from_fork_asm+0x1a/0x30 [ 219.827889][T20350] [ 219.830211][T20350] read to 0xffff888116c58880 of 8 bytes by task 20350 on cpu 1: [ 219.837833][T20350] bq_flush_to_queue+0x125/0x360 [ 219.842780][T20350] cpu_map_enqueue+0x19e/0x1b0 [ 219.847557][T20350] xdp_do_redirect_frame+0x2a4/0x6b0 [ 219.852872][T20350] bpf_test_run_xdp_live+0x8c6/0x1040 [ 219.858268][T20350] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 219.863580][T20350] bpf_prog_test_run+0x20f/0x3a0 [ 219.868554][T20350] __sys_bpf+0x400/0x7a0 [ 219.872833][T20350] __x64_sys_bpf+0x43/0x50 [ 219.877262][T20350] x64_sys_call+0x2914/0x2dc0 [ 219.881952][T20350] do_syscall_64+0xc9/0x1c0 [ 219.886480][T20350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.892476][T20350] [ 219.894795][T20350] value changed: 0xffff88813b5db070 -> 0x0000000000000000 [ 219.901915][T20350] [ 219.904243][T20350] Reported by Kernel Concurrency Sanitizer on: [ 219.910392][T20350] CPU: 1 UID: 0 PID: 20350 Comm: syz.7.7213 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0 [ 219.920815][T20350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 219.930867][T20350] ==================================================================