last executing test programs: 1m10.968414223s ago: executing program 2 (id=822): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x800) r0 = syz_io_uring_setup(0x206c, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 1m10.968129463s ago: executing program 2 (id=823): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}, 0x28) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r1, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m10.890208605s ago: executing program 2 (id=826): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8042) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m10.782443466s ago: executing program 4 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 1m10.782234366s ago: executing program 4 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 1m10.771736117s ago: executing program 4 (id=831): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m10.755533397s ago: executing program 4 (id=832): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m10.268426234s ago: executing program 1 (id=850): prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='\x00=\xa8\xa89\xb3\x1aC=\xd4\x82}\x80Q\x98\xaa\'\xb2t\xad\x02\x96\x93 ^zT\xa5L\xac\x9e\x1a\xe7VD~\xd4\xd33\x13 \x00\x00\xce=\x06z\x9b\xae\x06\x9b\x06?\xbbX$-kS\xad\xebK\xedM\x84\x18.>\x10:\xa2\xa0\x83d|0K\x1d\xbc&\x80\x887\x83\xa6\xd9S\xe0p\xbf*\x19\x17\x1f\xef%\xd0\x81\x14ia\xec\xa8\x8c\xa3\xd0\xc7c\xed\x1cM\x16\x0e\xd3/\x80\x92\"M>I\x90.\xad*0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0xffffffffffffff01, 0x880, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m10.132024256s ago: executing program 1 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4083, 0xff3}], 0x1, 0x31, 0x0) 1m10.066123097s ago: executing program 1 (id=857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m10.039817718s ago: executing program 2 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsm_get_self_attr(0x69, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) 1m9.959680939s ago: executing program 2 (id=863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)="b1", 0x1}], 0x1}}], 0x1, 0x4004804) 1m9.959519629s ago: executing program 1 (id=864): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x302, 0x0, &(0x7f0000000380)='\x00', 0x0}, 0x48) 1m9.90766814s ago: executing program 4 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x9, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfbfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}}]}, 0x50}}, 0x0) 1m9.773309792s ago: executing program 32 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb0800450045ac00006000002f9078ac1e0001e00000010008655800189078040000000000001386dd"], 0xfdef) 1m9.722343503s ago: executing program 1 (id=868): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4040, 0x9, @empty, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m9.722084492s ago: executing program 33 (id=868): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4040, 0x9, @empty, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m9.719081132s ago: executing program 4 (id=870): syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) unshare(0x20000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f4}, 0x94) 1m9.712578343s ago: executing program 34 (id=870): syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) unshare(0x20000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f4}, 0x94) 1m9.692884773s ago: executing program 2 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 1m9.692552323s ago: executing program 35 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 36.491245921s ago: executing program 3 (id=2144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 36.424972103s ago: executing program 3 (id=2145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000001c0)={[{@grpid}, {@auto_da_alloc}, {@minixdf}, {@noinit_itable}, {@init_itable}]}, 0xff, 0x52e, &(0x7f0000000640)="$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") 36.155510237s ago: executing program 3 (id=2155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 36.001528369s ago: executing program 6 (id=2163): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x283, 0x1}) 35.91280078s ago: executing program 6 (id=2168): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000500)) 35.91221399s ago: executing program 6 (id=2169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getuid() 35.873425591s ago: executing program 6 (id=2170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 35.817617311s ago: executing program 6 (id=2174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 35.704967184s ago: executing program 6 (id=2179): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 35.701134174s ago: executing program 36 (id=2179): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 35.564696025s ago: executing program 3 (id=2185): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 35.437477437s ago: executing program 3 (id=2189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) 35.161508692s ago: executing program 3 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000011}, 0x0) 35.117464832s ago: executing program 37 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000011}, 0x0) 1.205371021s ago: executing program 9 (id=3689): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xab) 1.183944232s ago: executing program 9 (id=3692): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0xe, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 952.173135ms ago: executing program 0 (id=3702): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 827.582598ms ago: executing program 9 (id=3706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r1, 0x0, 0x6f4000) 827.364538ms ago: executing program 0 (id=3707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 786.513068ms ago: executing program 9 (id=3709): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 745.043779ms ago: executing program 0 (id=3714): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) 729.080459ms ago: executing program 9 (id=3715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x12c, 0x65, 0x0, 0x0, 0x1, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0xff, 0x7fffff7f]}]}}, @filter_kind_options=@f_route={{0xa}, {0x7c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x68, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}]}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x12c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={0x0, 0x74}}, 0x24040) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 686.52192ms ago: executing program 9 (id=3717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x3, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x18}}, 0x4) 686.10881ms ago: executing program 0 (id=3720): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 604.434721ms ago: executing program 0 (id=3727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) 561.433512ms ago: executing program 0 (id=3730): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 546.307142ms ago: executing program 8 (id=3732): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x12c, 0x65, 0x0, 0x0, 0x1, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0xff, 0x7fffff7f]}]}}, @filter_kind_options=@f_route={{0xa}, {0x7c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x68, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}]}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x12c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={0x0, 0x74}}, 0x24040) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 506.521362ms ago: executing program 7 (id=3733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) time(0x0) 502.589173ms ago: executing program 8 (id=3734): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 457.655463ms ago: executing program 7 (id=3736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 403.599824ms ago: executing program 8 (id=3738): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 403.486304ms ago: executing program 7 (id=3739): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 311.541885ms ago: executing program 5 (id=3742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0) 270.723196ms ago: executing program 8 (id=3743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x18) flistxattr(0xffffffffffffffff, 0x0, 0x0) 224.520107ms ago: executing program 7 (id=3744): unshare(0x2a020400) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x7}, 0xc4c, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x40030000000000}, 0x0) 224.122307ms ago: executing program 5 (id=3745): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x12c, 0x65, 0x0, 0x0, 0x1, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0xff, 0x7fffff7f]}]}}, @filter_kind_options=@f_route={{0xa}, {0x7c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x68, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}]}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x12c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={0x0, 0x74}}, 0x24040) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 215.096107ms ago: executing program 8 (id=3746): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001"], 0xe0}}, 0x880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 185.569827ms ago: executing program 8 (id=3747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 161.467007ms ago: executing program 5 (id=3748): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) 145.880368ms ago: executing program 5 (id=3749): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c200000050a245d5cde086dd61fbb2ea000033ff20010000000000000000000000000000ff020000000000000000000000000001"], 0x0) 96.831479ms ago: executing program 7 (id=3750): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 96.517628ms ago: executing program 5 (id=3751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 64.760099ms ago: executing program 5 (id=3752): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911034000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 7 (id=3753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x300, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x7fffffff, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x4000, 0x0, 0x0, 0x1, 0x0, 0x80000}, {}, {0xfffffff7, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x3}, {0x0, 0x4}, {0x0, 0x7fff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x100000}, {0x0, 0x4000}, {0xfffffffe}, {0x1}, {0xd5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1}, {0x2000000}, {}, {0x0, 0x1}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0xc0}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0xfffffffc, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2ed, 0x0, 0xff}, {0x0, 0x0, 0x4}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x400000}, {0x814, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x5, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {0x0, 0x0, 0x0, 0x100, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x8}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {0xfffffffe, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x1, 0x0, 0xd, 0xffffffff}], [{0x5}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) kernel console output (not intermixed with test programs): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.029993][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.386984][ T7146] vlan2: entered promiscuous mode [ 73.392176][ T7146] gretap0: entered promiscuous mode [ 73.534227][ T7160] loop8: detected capacity change from 0 to 164 [ 73.554325][ T7160] Unsupported NM flag settings (8) [ 73.625160][ T7167] macvtap0: entered promiscuous mode [ 73.651010][ T7167] macvtap0: left promiscuous mode [ 73.676296][ T7169] loop8: detected capacity change from 0 to 512 [ 73.686160][ T7169] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 73.761739][ T7173] netlink: 320 bytes leftover after parsing attributes in process `syz.6.1451'. [ 73.817283][ T7179] loop7: detected capacity change from 0 to 128 [ 74.036120][ T7196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7196 comm=syz.8.1461 [ 74.297855][ T7207] wireguard0: entered promiscuous mode [ 74.303556][ T7207] wireguard0: entered allmulticast mode [ 74.473131][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1471'. [ 74.480492][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 74.480510][ T29] audit: type=1400 audit(1751063931.137:1710): avc: denied { create } for pid=7219 comm="syz.3.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.507789][ T29] audit: type=1400 audit(1751063931.137:1711): avc: denied { setopt } for pid=7219 comm="syz.3.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.593744][ T7226] loop8: detected capacity change from 0 to 512 [ 74.610020][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'. [ 74.614209][ T29] audit: type=1400 audit(1751063931.217:1712): avc: denied { read write } for pid=7221 comm="syz.8.1473" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.619039][ T7230] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1477'. [ 74.619401][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'. [ 74.642555][ T29] audit: type=1400 audit(1751063931.217:1713): avc: denied { open } for pid=7221 comm="syz.8.1473" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.668012][ T7230] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1477'. [ 74.683829][ T29] audit: type=1400 audit(1751063931.257:1714): avc: denied { create } for pid=7227 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.683862][ T29] audit: type=1400 audit(1751063931.257:1715): avc: denied { setopt } for pid=7227 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.732094][ T7230] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1477'. [ 74.746977][ T7226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.762456][ T7226] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.770561][ T29] audit: type=1400 audit(1751063931.437:1716): avc: denied { mount } for pid=7225 comm="syz.8.1475" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.831151][ T29] audit: type=1400 audit(1751063931.487:1717): avc: denied { add_name } for pid=7225 comm="syz.8.1475" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.852199][ T29] audit: type=1400 audit(1751063931.487:1718): avc: denied { create } for pid=7225 comm="syz.8.1475" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 74.872643][ T29] audit: type=1400 audit(1751063931.497:1719): avc: denied { add_name } for pid=7225 comm="syz.8.1475" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 74.944239][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.065290][ T7246] sd 0:0:1:0: device reset [ 75.308949][ T7280] loop3: detected capacity change from 0 to 512 [ 75.316174][ T7280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.328955][ T7280] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 75.344015][ T7278] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 75.347379][ T7280] EXT4-fs (loop3): 1 truncate cleaned up [ 75.350636][ T7278] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 75.350906][ T7278] vhci_hcd vhci_hcd.0: Device attached [ 75.357775][ T7280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.389958][ T7289] __nla_validate_parse: 2 callbacks suppressed [ 75.390038][ T7289] netlink: 64859 bytes leftover after parsing attributes in process `syz.8.1503'. [ 75.405869][ T7284] vhci_hcd: connection closed [ 75.408650][ T579] vhci_hcd: stop threads [ 75.417821][ T579] vhci_hcd: release socket [ 75.422304][ T579] vhci_hcd: disconnect device [ 75.464309][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.502143][ T7305] netem: change failed [ 75.566521][ T7315] netlink: 'syz.5.1515': attribute type 1 has an invalid length. [ 75.576687][ T7316] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 75.595316][ T7316] SELinux: failed to load policy [ 76.027938][ T7373] loop3: detected capacity change from 0 to 256 [ 76.052020][ T7373] FAT-fs (loop3): Directory bread(block 64) failed [ 76.058846][ T7373] FAT-fs (loop3): Directory bread(block 65) failed [ 76.068496][ T7373] FAT-fs (loop3): Directory bread(block 66) failed [ 76.076142][ T7377] loop6: detected capacity change from 0 to 1024 [ 76.081629][ T7373] FAT-fs (loop3): Directory bread(block 67) failed [ 76.089413][ T7373] FAT-fs (loop3): Directory bread(block 68) failed [ 76.096272][ T7373] FAT-fs (loop3): Directory bread(block 69) failed [ 76.103858][ T7373] FAT-fs (loop3): Directory bread(block 70) failed [ 76.110666][ T7373] FAT-fs (loop3): Directory bread(block 71) failed [ 76.117412][ T7373] FAT-fs (loop3): Directory bread(block 72) failed [ 76.125853][ T7373] FAT-fs (loop3): Directory bread(block 73) failed [ 76.150121][ T7377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.185117][ T7373] syz.3.1543: attempt to access beyond end of device [ 76.185117][ T7373] loop3: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 76.185222][ T7373] syz.3.1543: attempt to access beyond end of device [ 76.185222][ T7373] loop3: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 76.250215][ T5709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.313842][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1554'. [ 76.361903][ T7402] loop5: detected capacity change from 0 to 512 [ 76.375647][ T7405] netlink: 'syz.7.1557': attribute type 13 has an invalid length. [ 76.391979][ T7402] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.409555][ T7402] EXT4-fs (loop5): mount failed [ 76.495806][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.503050][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.638493][ T7405] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.647719][ T7405] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.656958][ T7405] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.666028][ T7405] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.679854][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1569'. [ 76.855421][ T7462] netlink: 'syz.8.1582': attribute type 1 has an invalid length. [ 76.863365][ T7462] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1582'. [ 76.872433][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.881461][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.888606][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.922277][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 76.931358][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 76.970195][ T7484] loop6: detected capacity change from 0 to 256 [ 76.998323][ T7484] FAT-fs (loop6): Directory bread(block 64) failed [ 77.004990][ T7484] FAT-fs (loop6): Directory bread(block 65) failed [ 77.011907][ T7484] FAT-fs (loop6): Directory bread(block 66) failed [ 77.018631][ T7484] FAT-fs (loop6): Directory bread(block 67) failed [ 77.025453][ T7484] FAT-fs (loop6): Directory bread(block 68) failed [ 77.032110][ T7484] FAT-fs (loop6): Directory bread(block 69) failed [ 77.038804][ T7484] FAT-fs (loop6): Directory bread(block 70) failed [ 77.045467][ T7484] FAT-fs (loop6): Directory bread(block 71) failed [ 77.052414][ T7484] FAT-fs (loop6): Directory bread(block 72) failed [ 77.059030][ T7484] FAT-fs (loop6): Directory bread(block 73) failed [ 77.077709][ T7484] syz.6.1591: attempt to access beyond end of device [ 77.077709][ T7484] loop6: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 77.105927][ T7484] syz.6.1591: attempt to access beyond end of device [ 77.105927][ T7484] loop6: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 77.149573][ T7495] loop8: detected capacity change from 0 to 512 [ 77.185586][ T7495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.208672][ T7495] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.248972][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.264862][ T7507] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1602'. [ 77.310906][ T7513] loop6: detected capacity change from 0 to 4096 [ 77.317689][ T7513] EXT4-fs: inline encryption not supported [ 77.325626][ T7513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.343756][ T7513] EXT4-fs (loop6): shut down requested (2) [ 77.365671][ T5709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.375518][ T4937] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.406739][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1608'. [ 77.432162][ T7528] netlink: 'syz.8.1611': attribute type 3 has an invalid length. [ 77.554460][ T7545] Cannot find add_set index 3 as target [ 77.715785][ T7570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.775410][ T7570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.834471][ T7570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.864889][ T7587] netlink: 'syz.8.1638': attribute type 29 has an invalid length. [ 77.874028][ T7587] netlink: 'syz.8.1638': attribute type 29 has an invalid length. [ 77.883889][ T7587] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1638'. [ 77.894216][ T7570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.957593][ T7570] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.970200][ T7570] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.982917][ T7570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.995284][ T7570] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.127150][ T7603] loop8: detected capacity change from 0 to 256 [ 78.140684][ T7603] FAT-fs (loop8): Directory bread(block 64) failed [ 78.147473][ T7603] FAT-fs (loop8): Directory bread(block 65) failed [ 78.154356][ T7603] FAT-fs (loop8): Directory bread(block 66) failed [ 78.161239][ T7603] FAT-fs (loop8): Directory bread(block 67) failed [ 78.167924][ T7603] FAT-fs (loop8): Directory bread(block 68) failed [ 78.175903][ T7603] FAT-fs (loop8): Directory bread(block 69) failed [ 78.182801][ T7603] FAT-fs (loop8): Directory bread(block 70) failed [ 78.189500][ T7603] FAT-fs (loop8): Directory bread(block 71) failed [ 78.196446][ T7603] FAT-fs (loop8): Directory bread(block 72) failed [ 78.203193][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 78.212286][ T7603] FAT-fs (loop8): Directory bread(block 73) failed [ 78.233938][ T7603] syz.8.1645: attempt to access beyond end of device [ 78.233938][ T7603] loop8: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 78.247921][ T7603] syz.8.1645: attempt to access beyond end of device [ 78.247921][ T7603] loop8: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 78.434074][ T7622] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 78.442449][ T7622] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 78.533562][ T7634] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 78.776617][ T7661] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7661 comm=syz.7.1671 [ 78.797840][ T7663] netlink: 'syz.5.1670': attribute type 13 has an invalid length. [ 78.867982][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.875208][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.929842][ T7663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.940215][ T7663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.973414][ T7663] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.982600][ T7663] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.991641][ T7663] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.000754][ T7663] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.044549][ T7684] pim6reg: entered allmulticast mode [ 79.054616][ T7684] pim6reg: left allmulticast mode [ 79.106645][ T7694] openvswitch: netlink: Message has 6 unknown bytes. [ 79.160106][ T7703] hub 9-0:1.0: USB hub found [ 79.164956][ T7703] hub 9-0:1.0: 8 ports detected [ 79.171452][ T7705] netlink: 'syz.7.1689': attribute type 27 has an invalid length. [ 79.228093][ T7713] loop7: detected capacity change from 0 to 256 [ 79.248682][ T7713] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.258945][ T7713] FAT-fs (loop7): Filesystem has been set read-only [ 79.267415][ T7713] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.280858][ T7713] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.294778][ T7713] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.305124][ T7713] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 79.384114][ T7722] tap0: tun_chr_ioctl cmd 1074025678 [ 79.389480][ T7722] tap0: group set to 0 [ 79.394640][ T7722] tap0: tun_chr_ioctl cmd 1074025677 [ 79.400337][ T7722] tap0: linktype set to 821 [ 79.426924][ T7726] loop5: detected capacity change from 0 to 256 [ 79.440390][ T7726] FAT-fs (loop5): Directory bread(block 64) failed [ 79.447191][ T7726] FAT-fs (loop5): Directory bread(block 65) failed [ 79.454077][ T7726] FAT-fs (loop5): Directory bread(block 66) failed [ 79.462130][ T7726] FAT-fs (loop5): Directory bread(block 67) failed [ 79.468947][ T7726] FAT-fs (loop5): Directory bread(block 68) failed [ 79.475567][ T7726] FAT-fs (loop5): Directory bread(block 69) failed [ 79.482265][ T7726] FAT-fs (loop5): Directory bread(block 70) failed [ 79.488935][ T7726] FAT-fs (loop5): Directory bread(block 71) failed [ 79.495530][ T7726] FAT-fs (loop5): Directory bread(block 72) failed [ 79.502252][ T7726] FAT-fs (loop5): Directory bread(block 73) failed [ 79.518548][ T7726] syz.5.1700: attempt to access beyond end of device [ 79.518548][ T7726] loop5: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 79.532697][ T7726] syz.5.1700: attempt to access beyond end of device [ 79.532697][ T7726] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 79.580465][ T7737] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.587910][ T7737] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.666839][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 79.666856][ T29] audit: type=1400 audit(1751063936.337:1926): avc: denied { write } for pid=7744 comm="syz.5.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.707536][ T29] audit: type=1400 audit(1751063936.377:1927): avc: denied { setopt } for pid=7746 comm="syz.5.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.729171][ T29] audit: type=1400 audit(1751063936.377:1928): avc: denied { connect } for pid=7746 comm="syz.5.1709" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.756667][ T7749] netlink: 'syz.5.1710': attribute type 29 has an invalid length. [ 79.765595][ T7749] netlink: 'syz.5.1710': attribute type 29 has an invalid length. [ 79.807330][ T7755] loop8: detected capacity change from 0 to 1024 [ 79.815058][ T7755] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.826104][ T7755] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.836842][ T7755] JBD2: no valid journal superblock found [ 79.842717][ T7755] EXT4-fs (loop8): Could not load journal inode [ 79.912369][ T7765] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 79.941807][ T29] audit: type=1400 audit(1751063936.617:1929): avc: denied { write } for pid=7768 comm="syz.5.1721" path="socket:[18740]" dev="sockfs" ino=18740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.985796][ T7775] SELinux: policydb version 0 does not match my version range 15-34 [ 79.994996][ T7775] SELinux: failed to load policy [ 80.037681][ T29] audit: type=1400 audit(1751063936.707:1930): avc: denied { create } for pid=7782 comm="syz.8.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.057324][ T29] audit: type=1400 audit(1751063936.707:1931): avc: denied { write } for pid=7782 comm="syz.8.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.120281][ T7789] hub 9-0:1.0: USB hub found [ 80.125293][ T7789] hub 9-0:1.0: 8 ports detected [ 80.158902][ T7792] loop6: detected capacity change from 0 to 1024 [ 80.188985][ T7792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.201939][ T7792] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.215076][ T7801] random: crng reseeded on system resumption [ 80.221157][ T29] audit: type=1400 audit(1751063936.887:1932): avc: denied { append } for pid=7800 comm="syz.8.1734" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.244549][ T29] audit: type=1400 audit(1751063936.887:1933): avc: denied { open } for pid=7800 comm="syz.8.1734" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.270868][ T29] audit: type=1400 audit(1751063936.897:1934): avc: denied { firmware_load } for pid=4937 comm="kworker/u8:16" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 80.357482][ T29] audit: type=1400 audit(1751063937.027:1935): avc: denied { write } for pid=7814 comm="syz.5.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.382682][ T5709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.392966][ T7817] program syz.7.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.619076][ T7845] SELinux: failed to load policy [ 80.628626][ T7852] netlink: 'syz.5.1757': attribute type 27 has an invalid length. [ 80.642772][ T7852] bond0: left promiscuous mode [ 80.647688][ T7852] bond1: left promiscuous mode [ 80.655457][ T7853] __nla_validate_parse: 4 callbacks suppressed [ 80.655475][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1760'. [ 80.693496][ T7853] macvlan0: entered promiscuous mode [ 80.701042][ T7853] batadv_slave_1: entered promiscuous mode [ 80.721431][ T7853] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 80.731694][ T7853] Cannot create hsr debugfs directory [ 80.737301][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1763'. [ 80.841355][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1775'. [ 80.851809][ T7884] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1775'. [ 80.882451][ T7890] loop7: detected capacity change from 0 to 512 [ 80.883008][ T7892] binfmt_misc: register: failed to install interpreter file ./file2 [ 80.907519][ T7890] EXT4-fs (loop7): too many log groups per flexible block group [ 80.915364][ T7890] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 80.922767][ T7890] EXT4-fs (loop7): mount failed [ 81.007956][ T7906] loop8: detected capacity change from 0 to 2048 [ 81.015317][ T7906] ext4: Unknown parameter 'appraise' [ 81.285735][ T7947] loop8: detected capacity change from 0 to 256 [ 81.351508][ T7951] loop8: detected capacity change from 0 to 1024 [ 81.358417][ T7951] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.369434][ T7951] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.380962][ T7951] JBD2: no valid journal superblock found [ 81.386796][ T7951] EXT4-fs (loop8): Could not load journal inode [ 81.397917][ T7951] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 81.588028][ T7960] loop3: detected capacity change from 0 to 1024 [ 81.614300][ T7960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.627326][ T7960] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.631436][ T7967] program syz.8.1812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.695468][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.733461][ T7978] random: crng reseeded on system resumption [ 81.907899][ T8012] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 81.907899][ T8012] program syz.6.1832 not setting count and/or reply_len properly [ 81.938509][ T8017] program syz.3.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.968922][ T8017] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 82.169535][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1851'. [ 82.254552][ T8074] loop7: detected capacity change from 0 to 512 [ 82.273718][ T8074] EXT4-fs error (device loop7): __ext4_iget:5379: inode #4: block 193290: comm syz.7.1861: invalid block [ 82.296514][ T8074] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.1861: Bad quota inode: 4, type: 1 [ 82.310306][ T8074] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.318218][ T8083] loop6: detected capacity change from 0 to 8192 [ 82.326693][ T8074] EXT4-fs (loop7): mount failed [ 82.346539][ T8085] loop5: detected capacity change from 0 to 512 [ 82.354122][ T8085] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.366731][ T8085] EXT4-fs (loop5): 1 truncate cleaned up [ 82.373149][ T8085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.416101][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.426466][ T8092] sd 0:0:1:0: device reset [ 82.448891][ T8094] netlink: 'syz.6.1868': attribute type 27 has an invalid length. [ 82.491435][ T8100] loop5: detected capacity change from 0 to 1024 [ 82.508630][ T8100] EXT4-fs: Ignoring removed nobh option [ 82.514430][ T8100] EXT4-fs: Ignoring removed bh option [ 82.522725][ T8106] loop7: detected capacity change from 0 to 1024 [ 82.525990][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.536436][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.547747][ T8106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.562034][ T8100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.566688][ T8106] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.609653][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.630803][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.641123][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.667498][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.676715][ T8116] program syz.5.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.688893][ T8116] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 82.701620][ T8094] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.710606][ T8094] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.719636][ T8094] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.728680][ T8094] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.750931][ T8094] vlan2: left promiscuous mode [ 82.755823][ T8094] gretap0: left promiscuous mode [ 82.844234][ T8135] loop3: detected capacity change from 0 to 512 [ 82.858213][ T8135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.876890][ T8135] EXT4-fs (loop3): 1 truncate cleaned up [ 82.907984][ T8135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.972935][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.034197][ T8168] netlink: 'syz.3.1899': attribute type 27 has an invalid length. [ 83.066450][ T8168] bridge0: port 3(batadv0) entered disabled state [ 83.073227][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.080583][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.132694][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.143523][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.176137][ T8168] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.184636][ T8168] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.193272][ T8168] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.201883][ T8168] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.211406][ T8168] gretap1: left promiscuous mode [ 83.216458][ T8168] gretap1: left allmulticast mode [ 83.222684][ T8168] hsr1: left allmulticast mode [ 83.227578][ T8168] bridge0: left allmulticast mode [ 83.233713][ T8168] bond0: left promiscuous mode [ 83.238542][ T8168] bond1: left promiscuous mode [ 83.245522][ T3413] syz1: Port: 1 Link DOWN [ 83.349313][ T8203] program syz.3.1915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.428915][ T8215] SELinux: failed to load policy [ 83.500974][ T8229] loop6: detected capacity change from 0 to 1024 [ 83.510906][ T8229] EXT4-fs: Ignoring removed nobh option [ 83.516512][ T8229] EXT4-fs: Ignoring removed bh option [ 83.531849][ T8225] SELinux: failed to load policy [ 83.550560][ T8229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.617756][ T8245] loop5: detected capacity change from 0 to 1024 [ 83.628736][ T5709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.639108][ T8245] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 83.650262][ T8245] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.678418][ T8245] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #32: comm syz.5.1936: iget: special inode unallocated [ 83.722084][ T8245] EXT4-fs (loop5): no journal found [ 83.727376][ T8245] EXT4-fs (loop5): can't get journal size [ 83.750394][ T8245] EXT4-fs error (device loop5): ext4_protect_reserved_inode:160: inode #32: comm syz.5.1936: iget: special inode unallocated [ 83.772440][ T8245] EXT4-fs (loop5): failed to initialize system zone (-117) [ 83.797424][ T8245] EXT4-fs (loop5): mount failed [ 83.805450][ T8270] loop8: detected capacity change from 0 to 1024 [ 83.820990][ T8270] EXT4-fs: Ignoring removed nobh option [ 83.826704][ T8270] EXT4-fs: Ignoring removed bh option [ 83.846142][ T8270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.862622][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1950'. [ 83.871735][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'. [ 83.889622][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.973859][ T8293] loop5: detected capacity change from 0 to 2048 [ 83.987472][ T8297] program syz.3.1959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.999296][ T8293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.015147][ T8293] EXT4-fs (loop5): shut down requested (0) [ 84.034318][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.061514][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1963'. [ 84.070771][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1963'. [ 84.165162][ T8328] Invalid ELF header magic: != ELF [ 84.234024][ T8340] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1978'. [ 84.370750][ T8362] SELinux: failed to load policy [ 84.411335][ T8367] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 84.685336][ T8397] veth0: entered promiscuous mode [ 84.692508][ T8396] veth0: left promiscuous mode [ 84.717335][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 84.717351][ T29] audit: type=1400 audit(1751063941.387:2170): avc: denied { write } for pid=8398 comm="syz.7.2004" name="packet" dev="proc" ino=4026533341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.769978][ T29] audit: type=1400 audit(1751063941.437:2171): avc: denied { block_suspend } for pid=8401 comm="syz.7.2005" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.829820][ T8406] $H: renamed from bond0 [ 84.838314][ T8406] $H: entered promiscuous mode [ 84.843534][ T8406] bond_slave_0: entered promiscuous mode [ 84.849338][ T8406] bond_slave_1: entered promiscuous mode [ 84.874675][ T29] audit: type=1326 audit(1751063941.547:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 84.898195][ T29] audit: type=1326 audit(1751063941.547:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 84.954406][ T8412] loop5: detected capacity change from 0 to 512 [ 84.965574][ T29] audit: type=1326 audit(1751063941.607:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 84.968302][ T8412] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 84.989098][ T29] audit: type=1326 audit(1751063941.607:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 84.989153][ T29] audit: type=1326 audit(1751063941.607:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 84.989186][ T29] audit: type=1326 audit(1751063941.607:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 84.989256][ T29] audit: type=1326 audit(1751063941.607:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 85.091686][ T29] audit: type=1326 audit(1751063941.607:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.5.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 85.294143][ T8445] ipvlan2: entered promiscuous mode [ 85.299655][ T8445] ipvlan2: entered allmulticast mode [ 85.305128][ T8445] dummy0: entered allmulticast mode [ 85.612474][ T8483] netlink: 'syz.3.2046': attribute type 1 has an invalid length. [ 85.741004][ T8499] __nla_validate_parse: 4 callbacks suppressed [ 85.741021][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2052'. [ 85.805629][ T8504] loop3: detected capacity change from 0 to 164 [ 86.009012][ T8536] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.049677][ T8539] loop8: detected capacity change from 0 to 2048 [ 86.069964][ T8541] loop7: detected capacity change from 0 to 164 [ 86.109888][ T8539] Alternate GPT is invalid, using primary GPT. [ 86.116307][ T8539] loop8: p2 p3 p7 [ 86.674267][ T8562] loop6: detected capacity change from 0 to 512 [ 86.681092][ T8562] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.687866][ T8562] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 86.698835][ T8562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 86.706995][ T8562] System zones: 1-12 [ 86.711826][ T8562] EXT4-fs (loop6): 1 truncate cleaned up [ 86.717977][ T8562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.742645][ T5709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.090127][ T8587] loop8: detected capacity change from 0 to 512 [ 87.102075][ T8587] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 87.119201][ T8587] System zones: 0-2, 18-18, 34-35 [ 87.132485][ T8587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.148649][ T8587] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.193438][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.532522][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2115'. [ 87.557061][ T8651] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8651 comm=syz.3.2118 [ 87.934985][ T8690] loop5: detected capacity change from 0 to 2048 [ 87.993032][ T8690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.026586][ T8702] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 88.087871][ T5757] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 88.127073][ T5757] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 88.156598][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.193507][ T8710] loop3: detected capacity change from 0 to 512 [ 88.234161][ T8710] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2145: Failed to acquire dquot type 1 [ 88.259530][ T8716] loop6: detected capacity change from 0 to 2048 [ 88.276821][ T8710] EXT4-fs (loop3): 1 truncate cleaned up [ 88.299959][ T8710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.322184][ T8716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.332825][ T8710] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.355721][ T8716] EXT4-fs (loop6): shut down requested (0) [ 88.397867][ T5709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.422845][ T8733] SELinux: syz.5.2154 (8733) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 88.442310][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.602187][ T8760] random: crng reseeded on system resumption [ 88.707236][ T8772] loop6: detected capacity change from 0 to 1024 [ 88.714725][ T8772] EXT4-fs: Ignoring removed oldalloc option [ 88.720714][ T8772] EXT4-fs: Ignoring removed bh option [ 88.732224][ T8772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.769564][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2172'. [ 88.779539][ T8778] tipc: Started in network mode [ 88.784505][ T8778] tipc: Node identity 7, cluster identity 4711 [ 88.790809][ T8778] tipc: Node number set to 7 [ 88.838741][ T8786] loop5: detected capacity change from 0 to 512 [ 88.852609][ T5709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.853773][ T8786] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 88.869888][ T8786] System zones: 0-2, 18-18, 34-35 [ 88.877086][ T8786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.893891][ T8786] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.936069][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.038363][ T8811] loop3: detected capacity change from 0 to 1024 [ 89.047840][ T8811] EXT4-fs: Ignoring removed oldalloc option [ 89.053943][ T8811] EXT4-fs: Ignoring removed bh option [ 89.077188][ T4929] bridge_slave_1: left allmulticast mode [ 89.082943][ T4929] bridge_slave_1: left promiscuous mode [ 89.088882][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.114673][ T8811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.130109][ T4929] bridge_slave_0: left promiscuous mode [ 89.135867][ T4929] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.188707][ T4645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.312331][ T4929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.321877][ T4929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.330930][ T4929] bond0 (unregistering): Released all slaves [ 89.405116][ T8795] chnl_net:caif_netlink_parms(): no params data found [ 89.455001][ T4929] hsr_slave_0: left promiscuous mode [ 89.469831][ T4929] hsr_slave_1: left promiscuous mode [ 89.478600][ T4929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.487790][ T4929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.566244][ T4929] team0 (unregistering): Port device team_slave_1 removed [ 89.582883][ T4929] team0 (unregistering): Port device team_slave_0 removed [ 89.661744][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.668835][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.677885][ T8795] bridge_slave_0: entered allmulticast mode [ 89.686155][ T8795] bridge_slave_0: entered promiscuous mode [ 89.697706][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.704879][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.729974][ T8795] bridge_slave_1: entered allmulticast mode [ 89.743777][ T8795] bridge_slave_1: entered promiscuous mode [ 89.790036][ T8795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.826279][ T8795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.840130][ T8854] loop7: detected capacity change from 0 to 2048 [ 89.872087][ T8795] team0: Port device team_slave_0 added [ 89.893154][ T8854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.909933][ T8795] team0: Port device team_slave_1 added [ 89.962050][ T5710] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 89.977603][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.984671][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.010804][ T8795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.023792][ T5710] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 90.042143][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.060596][ T8860] netlink: 'syz.5.2202': attribute type 3 has an invalid length. [ 90.063632][ T8862] program syz.7.2203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.098583][ T8864] loop5: detected capacity change from 0 to 512 [ 90.106578][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.113727][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.139783][ T8795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.154070][ T8864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 90.166738][ T8864] EXT4-fs (loop5): 1 truncate cleaned up [ 90.173163][ T8864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.211104][ T8864] EXT4-fs (loop5): shut down requested (1) [ 90.217349][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 90.217360][ T29] audit: type=1400 audit(1751063946.887:2333): avc: denied { read } for pid=8863 comm="syz.5.2204" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.275990][ T29] audit: type=1400 audit(1751063946.927:2334): avc: denied { ioctl } for pid=8863 comm="syz.5.2204" path="/264/bus/file1" dev="loop5" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.300672][ T29] audit: type=1400 audit(1751063946.947:2335): avc: denied { write } for pid=8866 comm="syz.7.2205" name="mdstat" dev="proc" ino=4026532011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 90.324515][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.336207][ T29] audit: type=1326 audit(1751063947.007:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.8.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc9c8e929 code=0x7ffc0000 [ 90.337339][ T8795] hsr_slave_0: entered promiscuous mode [ 90.359678][ T29] audit: type=1326 audit(1751063947.007:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.8.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc9c8e929 code=0x7ffc0000 [ 90.391179][ T8795] hsr_slave_1: entered promiscuous mode [ 90.397380][ T8795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.405590][ T8795] Cannot create hsr debugfs directory [ 90.416782][ T29] audit: type=1326 audit(1751063947.057:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.8.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9fc9c8e929 code=0x7ffc0000 [ 90.420360][ T8873] loop8: detected capacity change from 0 to 256 [ 90.440336][ T29] audit: type=1326 audit(1751063947.057:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.8.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc9c8e929 code=0x7ffc0000 [ 90.470187][ T29] audit: type=1326 audit(1751063947.057:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.8.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc9c8e929 code=0x7ffc0000 [ 90.493651][ T29] audit: type=1326 audit(1751063947.057:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.8.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9fc9c8e929 code=0x7ffc0000 [ 90.517128][ T29] audit: type=1326 audit(1751063947.057:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8868 comm="syz.8.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc9c8e929 code=0x7ffc0000 [ 90.551974][ T8875] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2206'. [ 90.585572][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 90.666246][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.673547][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.680975][ T8835] bridge_slave_0: entered allmulticast mode [ 90.687779][ T8835] bridge_slave_0: entered promiscuous mode [ 90.695133][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.702402][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.710144][ T8835] bridge_slave_1: entered allmulticast mode [ 90.716692][ T8835] bridge_slave_1: entered promiscuous mode [ 90.751752][ T8888] IPv6: sit1: Disabled Multicast RS [ 90.757788][ T8888] sit1: entered allmulticast mode [ 90.765081][ T4929] batadv0: left allmulticast mode [ 90.770130][ T4929] batadv0: left promiscuous mode [ 90.775217][ T4929] bridge0: port 3(batadv0) entered disabled state [ 90.782753][ T4929] bridge_slave_1: left allmulticast mode [ 90.788425][ T4929] bridge_slave_1: left promiscuous mode [ 90.794222][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.802120][ T4929] bridge_slave_0: left allmulticast mode [ 90.807872][ T4929] bridge_slave_0: left promiscuous mode [ 90.813558][ T4929] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.838192][ T4929] bridge0 (unregistering): left promiscuous mode [ 90.962168][ T4929] bond0 (unregistering): (slave bond1): Releasing backup interface [ 90.970699][ T4929] bond0 (unregistering): Released all slaves [ 90.978828][ T4929] bond1 (unregistering): Released all slaves [ 90.990868][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.004452][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.013647][ T8795] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 91.028678][ T8795] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 91.046851][ T8835] team0: Port device team_slave_0 added [ 91.056429][ T8795] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 91.077176][ T8835] team0: Port device team_slave_1 added [ 91.088784][ T8795] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 91.148186][ T4929] hsr_slave_0: left promiscuous mode [ 91.155086][ T4929] hsr_slave_1: left promiscuous mode [ 91.164238][ T4929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.176541][ T4929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.265246][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.272292][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.298292][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.309715][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.316767][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.342877][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.432084][ T8835] hsr_slave_0: entered promiscuous mode [ 91.438282][ T8835] hsr_slave_1: entered promiscuous mode [ 91.454287][ T8835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.470583][ T8835] Cannot create hsr debugfs directory [ 91.523719][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.542267][ T8795] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.566934][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.574105][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.600674][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.607790][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.647841][ T8964] bond3: entered promiscuous mode [ 91.653049][ T8964] bond3: entered allmulticast mode [ 91.658573][ T8964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.668630][ T8964] bond3 (unregistering): Released all slaves [ 91.719585][ T8969] loop5: detected capacity change from 0 to 4096 [ 91.728293][ T8969] ext4: Unknown parameter 'pcr' [ 91.793902][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.806421][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2249'. [ 91.944171][ T8835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.972410][ T8835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.982106][ T8835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.994757][ T8835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.016543][ T9009] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 92.016543][ T9009] program syz.7.2255 not setting count and/or reply_len properly [ 92.029460][ T8795] veth0_vlan: entered promiscuous mode [ 92.061742][ T8795] veth1_vlan: entered promiscuous mode [ 92.101457][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.117104][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.136888][ T8795] veth0_macvtap: entered promiscuous mode [ 92.147918][ T8795] veth1_macvtap: entered promiscuous mode [ 92.157322][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.169940][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.185660][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.197641][ T8835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.207253][ T4929] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.214358][ T4929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.223269][ T8795] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232093][ T8795] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.241025][ T8795] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.249755][ T8795] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.260289][ T9033] netlink: 'syz.7.2263': attribute type 3 has an invalid length. [ 92.270784][ T4929] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.277885][ T4929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.303769][ T8835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.381181][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.411655][ T9049] lo speed is unknown, defaulting to 1000 [ 92.417483][ T9049] lo speed is unknown, defaulting to 1000 [ 92.424406][ T9049] lo speed is unknown, defaulting to 1000 [ 92.431302][ T9049] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 92.442636][ T9049] lo speed is unknown, defaulting to 1000 [ 92.448840][ T9049] lo speed is unknown, defaulting to 1000 [ 92.455157][ T9049] lo speed is unknown, defaulting to 1000 [ 92.466159][ T9049] lo speed is unknown, defaulting to 1000 [ 92.470316][ T8835] veth0_vlan: entered promiscuous mode [ 92.479074][ T9049] lo speed is unknown, defaulting to 1000 [ 92.482089][ T8835] veth1_vlan: entered promiscuous mode [ 92.504761][ T8835] veth0_macvtap: entered promiscuous mode [ 92.513981][ T8835] veth1_macvtap: entered promiscuous mode [ 92.534438][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.553673][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.563083][ T8835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.571950][ T8835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.580760][ T8835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.589479][ T8835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.608731][ T9065] usb usb1: usbfs: process 9065 (syz.7.2272) did not claim interface 0 before use [ 92.999231][ T9112] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2291'. [ 93.133885][ T9125] loop8: detected capacity change from 0 to 512 [ 93.151053][ T9125] EXT4-fs: Ignoring removed orlov option [ 93.170115][ T9125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.187694][ T9116] lo speed is unknown, defaulting to 1000 [ 93.195933][ T9125] EXT4-fs (loop8): orphan cleanup on readonly fs [ 93.214303][ T9125] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2298: bg 0: block 248: padding at end of block bitmap is not set [ 93.236458][ T9125] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2298: Failed to acquire dquot type 1 [ 93.249304][ T9125] EXT4-fs (loop8): 1 truncate cleaned up [ 93.276706][ T9125] syz.8.2298 (9125) used greatest stack depth: 9304 bytes left [ 93.298053][ T9146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9146 comm=syz.8.2307 [ 93.310715][ T9146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9146 comm=syz.8.2307 [ 93.560278][ T9186] hub 5-0:1.0: USB hub found [ 93.570790][ T9186] hub 5-0:1.0: 8 ports detected [ 93.577698][ T9179] mmap: syz.9.2320 (9179) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.636031][ T9190] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.644980][ T9190] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.654027][ T9190] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.663015][ T9190] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.673985][ T9190] geneve2: entered promiscuous mode [ 93.679284][ T9190] geneve2: entered allmulticast mode [ 93.687771][ T9190] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.696944][ T9190] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.706079][ T9190] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.715155][ T9190] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.797943][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2339'. [ 93.809538][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2340'. [ 94.062171][ T9256] loop5: detected capacity change from 0 to 1024 [ 94.160670][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2367'. [ 94.404498][ T9317] lo speed is unknown, defaulting to 1000 [ 94.760330][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2408'. [ 94.830562][ T9381] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2411'. [ 94.898379][ T9390] 9pnet_fd: Insufficient options for proto=fd [ 95.016660][ T9403] loop7: detected capacity change from 0 to 128 [ 95.017177][ T9403] EXT4-fs: Ignoring removed nobh option [ 95.038495][ T9403] ext4 filesystem being mounted at /328/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.055194][ T9407] loop5: detected capacity change from 0 to 1024 [ 95.089003][ T9407] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.091139][ T9407] EXT4-fs (loop5): shut down requested (1) [ 95.102114][ T9407] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 95.102145][ T9407] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 95.200059][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 95.200120][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 95.200160][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.200186][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.200214][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.238967][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.238997][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239023][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239047][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239144][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239170][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239274][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239299][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239324][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239348][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.239425][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 95.251177][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 95.251193][ T29] audit: type=1400 audit(1751063951.917:2583): avc: denied { shutdown } for pid=9425 comm="syz.7.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.251309][ T29] audit: type=1400 audit(1751063951.917:2584): avc: denied { connect } for pid=9425 comm="syz.7.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.251338][ T29] audit: type=1400 audit(1751063951.917:2585): avc: denied { name_connect } for pid=9425 comm="syz.7.2430" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.266241][ T9] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.466344][ T29] audit: type=1400 audit(1751063952.137:2586): avc: denied { ioctl } for pid=9435 comm="syz.7.2435" path="socket:[24395]" dev="sockfs" ino=24395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.568430][ T29] audit: type=1400 audit(1751063952.237:2587): avc: denied { create } for pid=9448 comm="syz.8.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.592508][ T29] audit: type=1400 audit(1751063952.267:2588): avc: denied { setopt } for pid=9448 comm="syz.8.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.612397][ T29] audit: type=1400 audit(1751063952.267:2589): avc: denied { read } for pid=9448 comm="syz.8.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.650499][ T29] audit: type=1400 audit(1751063952.317:2590): avc: denied { write } for pid=9448 comm="syz.8.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.734677][ T29] audit: type=1326 audit(1751063952.347:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262aa6e929 code=0x7ffc0000 [ 95.758407][ T29] audit: type=1326 audit(1751063952.347:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.9.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262aa6e929 code=0x7ffc0000 [ 95.795766][ T9462] loop8: detected capacity change from 0 to 2048 [ 95.863802][ T9481] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2455'. [ 95.881706][ T9462] Alternate GPT is invalid, using primary GPT. [ 95.888069][ T9462] loop8: p1 p2 p3 [ 95.965463][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2461'. [ 95.979106][ T9497] atomic_op ffff888103c5b128 conn xmit_atomic 0000000000000000 [ 96.137406][ T9518] sctp: [Deprecated]: syz.9.2472 (pid 9518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.137406][ T9518] Use struct sctp_sack_info instead [ 96.163411][ T9520] loop8: detected capacity change from 0 to 128 [ 96.187778][ T9520] EXT4-fs: Ignoring removed nobh option [ 96.204539][ T9520] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.213186][ T9524] syzkaller1: entered promiscuous mode [ 96.220373][ T9524] syzkaller1: entered allmulticast mode [ 96.234726][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2477'. [ 96.344508][ T9538] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000003 [ 96.718053][ T9592] loop5: detected capacity change from 0 to 512 [ 96.734777][ T9592] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.816152][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2515'. [ 96.896707][ T9623] loop8: detected capacity change from 0 to 512 [ 96.908381][ T9623] EXT4-fs (loop8): orphan cleanup on readonly fs [ 96.919768][ T9623] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2522: bg 0: block 248: padding at end of block bitmap is not set [ 96.950485][ T9623] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2522: Failed to acquire dquot type 1 [ 96.981251][ T9623] EXT4-fs (loop8): 1 truncate cleaned up [ 97.004347][ T9623] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.2522: deleted inode referenced: 12 [ 97.095229][ T9641] loop7: detected capacity change from 0 to 164 [ 97.112332][ T9641] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.128076][ T9641] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.138285][ T9641] rock: directory entry would overflow storage [ 97.144560][ T9641] rock: sig=0x4f50, size=4, remaining=3 [ 97.150157][ T9641] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.196055][ T9655] loop8: detected capacity change from 0 to 512 [ 97.205166][ T9655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.223666][ T9655] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.387117][ T9678] loop7: detected capacity change from 0 to 8192 [ 97.567177][ T9695] vhci_hcd: invalid port number 255 [ 97.572485][ T9695] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 97.626905][ T9700] loop8: detected capacity change from 0 to 164 [ 97.634121][ T9700] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.643691][ T9700] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.654270][ T9700] rock: directory entry would overflow storage [ 97.660676][ T9700] rock: sig=0x4f50, size=4, remaining=3 [ 97.666294][ T9700] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.899117][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'. [ 97.924633][ T9747] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 98.092826][ T9779] program syz.9.2595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.138588][ T9783] loop8: detected capacity change from 0 to 1024 [ 98.175790][ T9783] EXT4-fs warning (device loop8): empty_inline_dir:1775: bad inline directory (dir #12) - no `..' [ 98.232874][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2601'. [ 98.256352][ T9802] vhci_hcd: invalid port number 255 [ 98.261754][ T9802] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 98.341335][ T9812] loop8: detected capacity change from 0 to 128 [ 98.352025][ T9812] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.367661][ T9812] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.397181][ T4197] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.447234][ T9826] netlink: 'syz.9.2617': attribute type 280 has an invalid length. [ 98.552993][ T9833] loop9: detected capacity change from 0 to 2048 [ 98.592720][ T9837] loop7: detected capacity change from 0 to 1024 [ 98.601472][ T9833] Alternate GPT is invalid, using primary GPT. [ 98.607982][ T9833] loop9: p1 p2 p3 [ 98.628418][ T9837] EXT4-fs warning (device loop7): empty_inline_dir:1775: bad inline directory (dir #12) - no `..' [ 98.709071][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 99.254358][ T9872] loop5: detected capacity change from 0 to 1024 [ 99.267453][ T9872] EXT4-fs warning (device loop5): empty_inline_dir:1775: bad inline directory (dir #12) - no `..' [ 99.612395][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'. [ 99.621369][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'. [ 99.640705][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'. [ 99.660883][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'. [ 99.669805][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'. [ 99.682764][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2645'. [ 99.901988][ T9920] loop9: detected capacity change from 0 to 128 [ 99.908804][ T9920] EXT4-fs: Ignoring removed nobh option [ 99.919943][ T9920] EXT4-fs mount: 22 callbacks suppressed [ 99.919957][ T9920] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.940521][ T9920] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.983444][ T8795] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.022091][ T9930] random: crng reseeded on system resumption [ 100.037500][ T9883] syz.0.2642 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 100.052050][ T9883] CPU: 1 UID: 0 PID: 9883 Comm: syz.0.2642 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 100.052089][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.052226][ T9883] Call Trace: [ 100.052234][ T9883] [ 100.052243][ T9883] __dump_stack+0x1d/0x30 [ 100.052271][ T9883] dump_stack_lvl+0xe8/0x140 [ 100.052296][ T9883] dump_stack+0x15/0x1b [ 100.052393][ T9883] dump_header+0x81/0x220 [ 100.052467][ T9883] oom_kill_process+0x334/0x3f0 [ 100.052503][ T9883] out_of_memory+0x979/0xb80 [ 100.052534][ T9883] try_charge_memcg+0x5e6/0x9e0 [ 100.052602][ T9883] obj_cgroup_charge_pages+0xa6/0x150 [ 100.052745][ T9883] __memcg_kmem_charge_page+0x9f/0x170 [ 100.052852][ T9883] __alloc_frozen_pages_noprof+0x188/0x360 [ 100.052908][ T9883] alloc_pages_mpol+0xb3/0x250 [ 100.052941][ T9883] alloc_pages_noprof+0x90/0x130 [ 100.052973][ T9883] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 100.053073][ T9883] __kvmalloc_node_noprof+0x30f/0x4e0 [ 100.053108][ T9883] ? ip_set_alloc+0x1f/0x30 [ 100.053199][ T9883] ? ip_set_alloc+0x1f/0x30 [ 100.053295][ T9883] ? __kmalloc_cache_noprof+0x189/0x320 [ 100.053368][ T9883] ip_set_alloc+0x1f/0x30 [ 100.053398][ T9883] hash_netiface_create+0x282/0x740 [ 100.053464][ T9883] ? __pfx_hash_netiface_create+0x10/0x10 [ 100.053498][ T9883] ip_set_create+0x3c9/0x960 [ 100.053543][ T9883] ? __nla_parse+0x40/0x60 [ 100.053563][ T9883] nfnetlink_rcv_msg+0x4c6/0x590 [ 100.053647][ T9883] ? selinux_capable+0x1f9/0x270 [ 100.053680][ T9883] netlink_rcv_skb+0x120/0x220 [ 100.053715][ T9883] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.053765][ T9883] nfnetlink_rcv+0x16b/0x1690 [ 100.053826][ T9883] ? __kfree_skb+0x109/0x150 [ 100.053865][ T9883] ? nlmon_xmit+0x4f/0x60 [ 100.053887][ T9883] ? consume_skb+0x49/0x150 [ 100.053997][ T9883] ? nlmon_xmit+0x4f/0x60 [ 100.054019][ T9883] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 100.054057][ T9883] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 100.054126][ T9883] ? __dev_queue_xmit+0x182/0x1fb0 [ 100.054163][ T9883] ? ref_tracker_free+0x37d/0x3e0 [ 100.054202][ T9883] ? __netlink_deliver_tap+0x4dc/0x500 [ 100.054251][ T9883] netlink_unicast+0x5a1/0x670 [ 100.054285][ T9883] netlink_sendmsg+0x58b/0x6b0 [ 100.054307][ T9883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.054327][ T9883] __sock_sendmsg+0x142/0x180 [ 100.054470][ T9883] ____sys_sendmsg+0x31e/0x4e0 [ 100.054509][ T9883] ___sys_sendmsg+0x17b/0x1d0 [ 100.054569][ T9883] __x64_sys_sendmsg+0xd4/0x160 [ 100.054617][ T9883] x64_sys_call+0x2999/0x2fb0 [ 100.054637][ T9883] do_syscall_64+0xd2/0x200 [ 100.054654][ T9883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.054678][ T9883] ? clear_bhb_loop+0x40/0x90 [ 100.054732][ T9883] ? clear_bhb_loop+0x40/0x90 [ 100.054758][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.054778][ T9883] RIP: 0033:0x7f649722e929 [ 100.054853][ T9883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.054870][ T9883] RSP: 002b:00007f6495897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.054887][ T9883] RAX: ffffffffffffffda RBX: 00007f6497455fa0 RCX: 00007f649722e929 [ 100.054898][ T9883] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 100.054987][ T9883] RBP: 00007f64972b0b39 R08: 0000000000000000 R09: 0000000000000000 [ 100.054998][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.055009][ T9883] R13: 0000000000000000 R14: 00007f6497455fa0 R15: 00007fffb096d4c8 [ 100.055027][ T9883] [ 100.055035][ T9883] memory: usage 307200kB, limit 307200kB, failcnt 97 [ 100.408163][ T9883] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 100.416080][ T9883] kmem: usage 306896kB, limit 9007199254740988kB, failcnt 0 [ 100.423433][ T9883] Memory cgroup stats for /syz0: [ 100.424002][ T9883] cache 86016 [ 100.432345][ T9883] rss 208896 [ 100.435565][ T9883] shmem 0 [ 100.438531][ T9883] mapped_file 86016 [ 100.442386][ T9883] dirty 8192 [ 100.445601][ T9883] writeback 0 [ 100.448893][ T9883] workingset_refault_anon 9 [ 100.453506][ T9883] workingset_refault_file 0 [ 100.458024][ T9883] swap 0 [ 100.460968][ T9883] swapcached 0 [ 100.464358][ T9883] pgpgin 47147 [ 100.467754][ T9883] pgpgout 47075 [ 100.471253][ T9883] pgfault 50926 [ 100.474748][ T9883] pgmajfault 6 [ 100.478195][ T9883] inactive_anon 110592 [ 100.482327][ T9883] active_anon 98304 [ 100.486156][ T9883] inactive_file 0 [ 100.489868][ T9883] active_file 86016 [ 100.493700][ T9883] unevictable 0 [ 100.497159][ T9883] hierarchical_memory_limit 314572800 [ 100.502545][ T9883] hierarchical_memsw_limit 9223372036854771712 [ 100.508782][ T9883] total_cache 86016 [ 100.512618][ T9883] total_rss 208896 [ 100.516334][ T9883] total_shmem 0 [ 100.519910][ T9883] total_mapped_file 86016 [ 100.524345][ T9883] total_dirty 8192 [ 100.528120][ T9883] total_writeback 0 [ 100.531981][ T9883] total_workingset_refault_anon 9 [ 100.537087][ T9883] total_workingset_refault_file 0 [ 100.542136][ T9883] total_swap 0 [ 100.545519][ T9883] total_swapcached 0 [ 100.549411][ T9883] total_pgpgin 47147 [ 100.553350][ T9883] total_pgpgout 47075 [ 100.557332][ T9883] total_pgfault 50926 [ 100.561327][ T9883] total_pgmajfault 6 [ 100.565222][ T9883] total_inactive_anon 110592 [ 100.569833][ T9883] total_active_anon 98304 [ 100.574199][ T9883] total_inactive_file 0 [ 100.578411][ T9883] total_active_file 86016 [ 100.582820][ T9883] total_unevictable 0 [ 100.586797][ T9883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2642,pid=9882,uid=0 [ 100.601610][ T9883] Memory cgroup out of memory: Killed process 9883 (syz.0.2642) total-vm:95668kB, anon-rss:976kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 100.624877][ T9945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9945 comm=syz.7.2669 [ 100.637607][ T9945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9945 comm=syz.7.2669 [ 100.691176][ T9949] netlink: 'syz.9.2672': attribute type 1 has an invalid length. [ 100.754319][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 100.754349][ T29] audit: type=1400 audit(1751063957.427:2803): avc: denied { create } for pid=9954 comm="syz.9.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 100.833138][ T29] audit: type=1400 audit(1751063957.437:2804): avc: denied { sys_admin } for pid=9954 comm="syz.9.2675" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 100.854202][ T29] audit: type=1326 audit(1751063957.477:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 100.877658][ T29] audit: type=1326 audit(1751063957.477:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 100.901161][ T29] audit: type=1326 audit(1751063957.487:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 100.914000][ T9883] syz.0.2642 (9883) used greatest stack depth: 7856 bytes left [ 100.924607][ T29] audit: type=1326 audit(1751063957.487:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 100.955688][ T29] audit: type=1326 audit(1751063957.487:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 100.957846][ T9955] lo speed is unknown, defaulting to 1000 [ 100.979099][ T29] audit: type=1326 audit(1751063957.487:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 101.008261][ T29] audit: type=1326 audit(1751063957.487:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 101.031756][ T29] audit: type=1326 audit(1751063957.487:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 101.396588][T10019] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.619153][T10047] program syz.7.2717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.178814][T10121] netlink: 'syz.5.2752': attribute type 1 has an invalid length. [ 102.227560][T10127] xt_hashlimit: max too large, truncated to 1048576 [ 102.284371][T10131] 9pnet_fd: Insufficient options for proto=fd [ 102.445883][T10155] dummy0: entered promiscuous mode [ 102.464854][T10155] macsec1: entered promiscuous mode [ 102.472332][T10155] macsec1: entered allmulticast mode [ 102.477789][T10155] dummy0: entered allmulticast mode [ 102.484843][T10155] dummy0: left allmulticast mode [ 102.490084][T10155] dummy0: left promiscuous mode [ 102.790079][T10206] __nla_validate_parse: 3 callbacks suppressed [ 102.790097][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2776'. [ 102.814423][T10210] netlink: 'syz.0.2778': attribute type 21 has an invalid length. [ 102.837618][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2776'. [ 102.861629][T10212] bond1: entered promiscuous mode [ 102.866790][T10212] bond1: entered allmulticast mode [ 102.873832][T10212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.885799][T10212] bond1 (unregistering): Released all slaves [ 102.933181][T10230] batadv_slave_1: entered promiscuous mode [ 102.954296][T10229] batadv_slave_1: left promiscuous mode [ 103.236303][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2796'. [ 103.294026][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2798'. [ 103.303109][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2798'. [ 103.696259][T10300] lo speed is unknown, defaulting to 1000 [ 103.896980][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 103.931762][T10357] atomic_op ffff888106262128 conn xmit_atomic 0000000000000000 [ 104.253940][T10407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10407 comm=syz.0.2830 [ 104.427020][T10435] netlink: 'syz.9.2842': attribute type 1 has an invalid length. [ 104.434867][T10435] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2842'. [ 104.489671][T10438] Cannot find del_set index 0 as target [ 104.567607][T10447] loop9: detected capacity change from 0 to 2048 [ 104.582194][T10447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.597555][T10447] EXT4-fs (loop9): shut down requested (0) [ 104.604707][T10447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.613654][T10447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.624050][T10447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.633045][T10447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.643849][T10447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.653733][T10447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.663849][T10447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 104.685351][ T8795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.225348][T10509] loop5: detected capacity change from 0 to 512 [ 105.259078][T10509] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2876: casefold flag without casefold feature [ 105.273180][T10509] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2876: couldn't read orphan inode 15 (err -117) [ 105.285954][T10509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.320397][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.463272][T10529] loop5: detected capacity change from 0 to 128 [ 105.655405][T10540] xt_hashlimit: max too large, truncated to 1048576 [ 105.729551][T10550] loop7: detected capacity change from 0 to 1024 [ 105.737666][T10552] loop5: detected capacity change from 0 to 256 [ 105.746910][T10550] EXT4-fs: Ignoring removed oldalloc option [ 105.753786][T10552] FAT-fs (loop5): bogus number of FAT sectors [ 105.759906][T10552] FAT-fs (loop5): Can't find a valid FAT filesystem [ 105.776721][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 105.776750][ T29] audit: type=1400 audit(1751063962.447:2968): avc: denied { search } for pid=10555 comm="syz.9.2897" name="/" dev="configfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.805207][ T29] audit: type=1400 audit(1751063962.447:2969): avc: denied { search } for pid=10555 comm="syz.9.2897" name="/" dev="configfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.827464][ T29] audit: type=1400 audit(1751063962.447:2970): avc: denied { search } for pid=10555 comm="syz.9.2897" name="/" dev="configfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.849830][ T29] audit: type=1400 audit(1751063962.447:2971): avc: denied { search } for pid=10555 comm="syz.9.2897" name="/" dev="configfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.892527][T10565] debugfs: Invalid uid '0x00000000ffffffff' [ 105.896085][T10550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.911241][T10560] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2898'. [ 105.912294][ T29] audit: type=1400 audit(1751063962.567:2972): avc: denied { mount } for pid=10564 comm="syz.9.2900" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.928695][T10560] batadv1: entered promiscuous mode [ 105.943104][ T29] audit: type=1400 audit(1751063962.567:2973): avc: denied { remount } for pid=10564 comm="syz.9.2900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.969337][T10560] batadv1: entered allmulticast mode [ 105.998139][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.007705][ T29] audit: type=1400 audit(1751063962.667:2974): avc: denied { unmount } for pid=8795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.100607][ T29] audit: type=1400 audit(1751063962.767:2975): avc: denied { map } for pid=10577 comm="syz.0.2906" path="socket:[28003]" dev="sockfs" ino=28003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.124141][ T29] audit: type=1400 audit(1751063962.767:2976): avc: denied { read } for pid=10577 comm="syz.0.2906" path="socket:[28003]" dev="sockfs" ino=28003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.228956][ T29] audit: type=1400 audit(1751063962.857:2977): avc: denied { shutdown } for pid=10581 comm="syz.7.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.359312][T10608] loop9: detected capacity change from 0 to 256 [ 106.373849][T10609] program syz.0.2921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.451628][T10622] loop9: detected capacity change from 0 to 2048 [ 106.480294][T10622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.523481][ T8795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.589337][T10640] x_tables: duplicate underflow at hook 2 [ 106.629433][T10646] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2937'. [ 106.638557][T10646] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2937'. [ 106.786823][T10664] loop9: detected capacity change from 0 to 2048 [ 106.788080][T10666] syzkaller1: entered promiscuous mode [ 106.798873][T10666] syzkaller1: entered allmulticast mode [ 106.813527][T10664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.838758][T10664] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 106.854876][T10664] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 106.867211][T10664] EXT4-fs (loop9): This should not happen!! Data will be lost [ 106.867211][T10664] [ 106.876945][T10664] EXT4-fs (loop9): Total free blocks count 0 [ 106.882975][T10664] EXT4-fs (loop9): Free/Dirty block details [ 106.888898][T10664] EXT4-fs (loop9): free_blocks=2415919504 [ 106.894708][T10664] EXT4-fs (loop9): dirty_blocks=48 [ 106.899844][T10664] EXT4-fs (loop9): Block reservation details [ 106.905977][T10664] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 106.918447][T10663] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 107.095095][T10702] team0: Device gre1 is of different type [ 107.342512][T10731] loop7: detected capacity change from 0 to 1024 [ 107.365406][T10731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.382997][T10731] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 107.414686][T10731] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 107.423901][T10731] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 107.436999][T10731] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 107.446455][T10731] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 107.459906][T10731] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 107.469090][T10731] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 107.484100][T10731] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 107.522222][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.669071][T10769] syzkaller1: entered promiscuous mode [ 107.674855][T10769] syzkaller1: entered allmulticast mode [ 107.681802][T10771] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 107.828128][T10790] loop7: detected capacity change from 0 to 2048 [ 107.845274][T10790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.884038][T10790] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 107.899080][T10790] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 107.911526][T10790] EXT4-fs (loop7): This should not happen!! Data will be lost [ 107.911526][T10790] [ 107.921286][T10790] EXT4-fs (loop7): Total free blocks count 0 [ 107.927375][T10790] EXT4-fs (loop7): Free/Dirty block details [ 107.933379][T10790] EXT4-fs (loop7): free_blocks=2415919504 [ 107.939221][T10790] EXT4-fs (loop7): dirty_blocks=48 [ 107.944397][T10790] EXT4-fs (loop7): Block reservation details [ 107.950450][T10790] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 107.973839][T10789] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 108.003003][T10811] syzkaller1: entered promiscuous mode [ 108.008569][T10811] syzkaller1: entered allmulticast mode [ 108.024389][T10814] netlink: 'syz.9.2997': attribute type 10 has an invalid length. [ 108.044204][T10814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.059246][T10814] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 108.074706][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.082240][T10814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.099559][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.107097][T10814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.125415][T10814] bond0: (slave batadv0): Releasing backup interface [ 108.157249][T10832] loop0: detected capacity change from 0 to 256 [ 108.177894][T10832] syz.0.3000: attempt to access beyond end of device [ 108.177894][T10832] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 108.701555][T10965] SELinux: syz.7.3021 (10965) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 108.876355][T10988] loop9: detected capacity change from 0 to 1024 [ 108.892712][T10988] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.907282][T10988] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 108.929846][T10988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 108.945232][T10988] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 108.958475][T10988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 108.967724][T10988] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 108.980987][T10988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 108.990123][T10988] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #12: comm +}[@: corrupted xattr block 255: invalid header [ 109.004282][T10988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 109.048627][T11004] xt_cgroup: xt_cgroup: no path or classid specified [ 109.063550][ T8795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.124114][T11016] __nla_validate_parse: 11 callbacks suppressed [ 109.124127][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.139479][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.148909][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.166049][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.175101][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.184341][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.197745][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3046'. [ 109.206821][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3046'. [ 109.237172][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.238330][T11024] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11024 comm=syz.0.3047 [ 109.246212][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3045'. [ 109.258741][T11024] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11024 comm=syz.0.3047 [ 109.334214][T11036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=11036 comm=syz.8.3053 [ 109.411349][T11047] syzkaller1: entered promiscuous mode [ 109.416883][T11047] syzkaller1: entered allmulticast mode [ 109.455464][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.464165][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.481317][T11057] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 110.026667][T11082] gre0: Master is either lo or non-ether device [ 110.135638][T11100] loop0: detected capacity change from 0 to 512 [ 110.142751][T11100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.153386][T11100] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.3081: bad orphan inode 11 [ 110.165638][T11100] ext4_test_bit(bit=10, block=4) = 1 [ 110.170998][T11100] is_bad_inode(inode)=0 [ 110.175319][T11100] NEXT_ORPHAN(inode)=2080374784 [ 110.180237][T11100] max_ino=32 [ 110.183510][T11100] i_nlink=0 [ 110.191348][T11100] EXT4-fs (loop0): 1 truncate cleaned up [ 110.198674][T11108] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 110.204118][T11100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.205213][T11108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.225296][T11108] vhci_hcd vhci_hcd.0: Device attached [ 110.239117][T11109] vhci_hcd: connection closed [ 110.239606][ T4197] vhci_hcd: stop threads [ 110.248681][ T4197] vhci_hcd: release socket [ 110.253153][ T4197] vhci_hcd: disconnect device [ 110.264365][ T8835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.311976][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.320735][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.381327][T11126] loop8: detected capacity change from 0 to 512 [ 110.389756][T11126] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.409618][T11124] lo speed is unknown, defaulting to 1000 [ 110.422109][T11126] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.447645][ T5760] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 110.530663][T11138] loop5: detected capacity change from 0 to 1024 [ 110.546879][T11138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.560616][T11138] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.584564][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.680065][T11160] program syz.5.3106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.783014][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 110.783030][ T29] audit: type=1400 audit(1751063967.457:3332): avc: denied { watch watch_reads } for pid=11172 comm="syz.9.3112" path="/166" dev="tmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.832665][ T29] audit: type=1400 audit(1751063967.507:3333): avc: denied { create } for pid=11174 comm="syz.9.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.869857][ T29] audit: type=1400 audit(1751063967.527:3334): avc: denied { connect } for pid=11174 comm="syz.9.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.894790][ T29] audit: type=1404 audit(1751063967.567:3335): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 110.921480][ T29] audit: type=1400 audit(1751063967.587:3336): avc: denied { read write } for pid=8835 comm="syz-executor" name="loop0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 110.948314][ T29] audit: type=1404 audit(1751063967.617:3337): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 110.974954][T11179] loop0: detected capacity change from 0 to 512 [ 110.981118][ T29] audit: type=1400 audit(1751063967.647:3338): avc: denied { read write } for pid=5757 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.005603][ T29] audit: type=1400 audit(1751063967.647:3339): avc: denied { open } for pid=5757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.012065][T11179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.029756][ T29] audit: type=1400 audit(1751063967.647:3340): avc: denied { ioctl } for pid=5757 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.029785][ T29] audit: type=1400 audit(1751063967.647:3341): avc: denied { read write } for pid=11178 comm="syz.0.3115" name="loop0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.182379][T11179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.195702][T11179] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.283423][T11198] xt_hashlimit: max too large, truncated to 1048576 [ 111.294951][ T8835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.483117][T11228] loop8: detected capacity change from 0 to 512 [ 111.497172][T11228] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 111.530321][T11228] EXT4-fs (loop8): 1 truncate cleaned up [ 111.548663][T11228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.912553][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.005635][T11270] loop8: detected capacity change from 0 to 512 [ 112.023144][T11270] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3153: Failed to acquire dquot type 1 [ 112.042488][T11270] EXT4-fs (loop8): 1 truncate cleaned up [ 112.048748][T11270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.069267][T11270] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.129778][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.281031][T11321] binfmt_misc: register: failed to install interpreter file ./file0 [ 112.370116][T11337] ipvlan2: entered promiscuous mode [ 112.508938][T11359] program syz.7.3175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.577240][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.590893][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.739646][T11391] netlink: 'syz.9.3182': attribute type 1 has an invalid length. [ 112.881668][T11413] xt_CT: No such helper "pptp" [ 113.732516][T11563] binfmt_misc: register: failed to install interpreter file ./file2 [ 113.773837][T11570] loop7: detected capacity change from 0 to 512 [ 113.798424][T11572] vhci_hcd: invalid port number 65 [ 113.809507][T11570] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.836395][T11570] EXT4-fs (loop7): orphan cleanup on readonly fs [ 113.844851][T11570] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3237: iget: bad i_size value: 360287970189639680 [ 113.861042][T11570] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3237: couldn't read orphan inode 15 (err -117) [ 113.884613][T11570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.963656][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.061329][T11599] sctp: [Deprecated]: syz.7.3251 (pid 11599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.061329][T11599] Use struct sctp_sack_info instead [ 114.138452][T11605] loop5: detected capacity change from 0 to 1024 [ 114.145745][T11605] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.156806][T11605] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.170336][T11605] JBD2: no valid journal superblock found [ 114.176144][T11605] EXT4-fs (loop5): Could not load journal inode [ 114.213177][T11605] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 114.261214][T11621] netlink: 'syz.0.3260': attribute type 1 has an invalid length. [ 114.269000][T11621] __nla_validate_parse: 22 callbacks suppressed [ 114.269016][T11621] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3260'. [ 114.284639][T11624] ALSA: seq fatal error: cannot create timer (-19) [ 114.306342][T11629] netlink: 268 bytes leftover after parsing attributes in process `syz.8.3264'. [ 114.416999][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3274'. [ 114.429071][T11654] program syz.8.3277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.438644][T11652] IPVS: Error joining to the multicast group [ 114.555252][T11677] netlink: 'syz.8.3285': attribute type 7 has an invalid length. [ 114.563086][T11677] netlink: 198000 bytes leftover after parsing attributes in process `syz.8.3285'. [ 115.111514][T11741] xt_hashlimit: max too large, truncated to 1048576 [ 115.286378][T11764] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3324'. [ 115.307697][T11718] loop8: detected capacity change from 0 to 256 [ 115.369552][T11773] syzkaller1: entered promiscuous mode [ 115.375109][T11773] syzkaller1: entered allmulticast mode [ 115.478338][T11786] netlink: 'syz.8.3336': attribute type 10 has an invalid length. [ 115.488581][T11786] bridge0: port 3(batadv0) entered disabled state [ 115.495966][T11786] batadv0: left allmulticast mode [ 115.501097][T11786] batadv0: left promiscuous mode [ 115.506169][T11786] bridge0: port 3(batadv0) entered disabled state [ 115.518093][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.539457][T11786] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 115.548721][T11791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.553082][T11794] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 115.556499][T11791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.579691][T11791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.587294][T11791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.601571][T11791] bond0: (slave batadv0): Releasing backup interface [ 115.752696][T11815] syzkaller1: entered promiscuous mode [ 115.758245][T11815] syzkaller1: entered allmulticast mode [ 115.841467][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 115.841481][ T29] audit: type=1326 audit(1751063972.517:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f262aa658e7 code=0x7ffc0000 [ 115.914038][ T29] audit: type=1326 audit(1751063972.517:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f262aa0ab19 code=0x7ffc0000 [ 115.937613][ T29] audit: type=1326 audit(1751063972.517:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f262aa658e7 code=0x7ffc0000 [ 115.961041][ T29] audit: type=1326 audit(1751063972.517:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f262aa0ab19 code=0x7ffc0000 [ 115.984501][ T29] audit: type=1326 audit(1751063972.517:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f262aa658e7 code=0x7ffc0000 [ 116.007942][ T29] audit: type=1326 audit(1751063972.517:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f262aa0ab19 code=0x7ffc0000 [ 116.031399][ T29] audit: type=1326 audit(1751063972.517:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f262aa658e7 code=0x7ffc0000 [ 116.054827][ T29] audit: type=1326 audit(1751063972.517:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f262aa0ab19 code=0x7ffc0000 [ 116.078237][ T29] audit: type=1326 audit(1751063972.517:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f262aa658e7 code=0x7ffc0000 [ 116.101728][ T29] audit: type=1326 audit(1751063972.517:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.9.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f262aa0ab19 code=0x7ffc0000 [ 116.464240][T11865] netlink: 'syz.0.3370': attribute type 10 has an invalid length. [ 116.485060][T11865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.496462][T11865] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 116.512200][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.519750][T11865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.529791][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.537359][T11865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.550230][T11865] bond0: (slave batadv0): Releasing backup interface [ 116.596841][T11876] SELinux: failed to load policy [ 116.640791][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3379'. [ 116.649925][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3379'. [ 116.839394][T11918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.848250][T11918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.097436][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3400'. [ 117.106505][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3400'. [ 117.469976][T11985] netlink: 'syz.7.3425': attribute type 10 has an invalid length. [ 117.491881][T11984] loop5: detected capacity change from 0 to 512 [ 117.531384][T11984] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.555005][T11994] program syz.0.3427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.566377][T11996] loop7: detected capacity change from 0 to 512 [ 117.583780][T11996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.603814][T11984] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.613820][T11996] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.668391][ T5757] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 117.723871][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.762457][T12007] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 117.776645][T12017] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3435'. [ 117.792672][T12007] SELinux: failed to load policy [ 117.845789][T12023] loop7: detected capacity change from 0 to 512 [ 117.884171][T12023] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.907818][T12036] loop5: detected capacity change from 0 to 512 [ 117.918322][T12023] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.963436][ T5710] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 117.980928][T12036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.000497][T12036] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.049732][T12057] xt_hashlimit: max too large, truncated to 1048576 [ 118.114683][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.517396][T12093] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 118.556717][T12096] loop8: detected capacity change from 0 to 512 [ 118.614270][T12096] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 118.622468][T12096] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 118.649638][T12096] System zones: 0-1, 15-15, 18-18, 34-34 [ 118.660059][T12096] EXT4-fs (loop8): orphan cleanup on readonly fs [ 118.666867][T12096] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 118.681627][T12096] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 118.686243][T12107] syzkaller1: entered promiscuous mode [ 118.694003][T12107] syzkaller1: entered allmulticast mode [ 118.700042][T12096] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.3472: bad orphan inode 16 [ 118.712961][T12096] ext4_test_bit(bit=15, block=18) = 1 [ 118.718470][T12096] is_bad_inode(inode)=0 [ 118.722706][T12096] NEXT_ORPHAN(inode)=0 [ 118.726802][T12096] max_ino=32 [ 118.730031][T12096] i_nlink=2 [ 118.734894][T12096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.771940][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.888850][T12131] loop7: detected capacity change from 0 to 512 [ 118.951597][T12131] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3487: Failed to acquire dquot type 1 [ 118.966199][T12131] EXT4-fs (loop7): 1 truncate cleaned up [ 118.972922][T12131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.985894][T12131] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.082666][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.356120][T12170] loop7: detected capacity change from 0 to 512 [ 119.363797][T12170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.429024][T12176] __nla_validate_parse: 2 callbacks suppressed [ 119.429040][T12176] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3505'. [ 119.469249][T12170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.482668][T12170] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.512168][ T5710] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.586099][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3512'. [ 119.651557][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3517'. [ 119.668468][T12202] ipvlan2: entered promiscuous mode [ 119.693808][T12206] loop9: detected capacity change from 0 to 512 [ 119.700927][T12206] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.712549][T12206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.725244][T12206] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.769421][ T8795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.859072][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3524'. [ 119.922840][T12230] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3528'. [ 119.932134][T12230] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 119.985302][T12238] loop9: detected capacity change from 0 to 512 [ 119.996401][T12240] loop8: detected capacity change from 0 to 512 [ 120.003483][T12240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.012195][T12238] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 120.012236][T12238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 120.012313][T12238] System zones: 0-1, 15-15, 18-18, 34-34 [ 120.012556][T12238] EXT4-fs (loop9): orphan cleanup on readonly fs [ 120.012641][T12238] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.032742][T12240] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 120.035609][T12238] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 120.042449][T12240] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.066312][T12238] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.3540: bad orphan inode 16 [ 120.096401][T12238] ext4_test_bit(bit=15, block=18) = 1 [ 120.102011][T12238] is_bad_inode(inode)=0 [ 120.106182][T12238] NEXT_ORPHAN(inode)=0 [ 120.110472][T12238] max_ino=32 [ 120.113694][T12238] i_nlink=2 [ 120.117256][T12238] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.130719][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 120.155663][ T8795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.181807][T12250] loop9: detected capacity change from 0 to 164 [ 120.189646][T12249] netlink: 'syz.7.3535': attribute type 2 has an invalid length. [ 120.197568][T12249] netlink: 'syz.7.3535': attribute type 1 has an invalid length. [ 120.197708][T12250] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.205373][T12249] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.3535'. [ 120.228863][T12250] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.238419][T12250] Symlink component flag not implemented [ 120.244222][T12250] Symlink component flag not implemented [ 120.252100][T12250] Symlink component flag not implemented (7) [ 120.258119][T12250] Symlink component flag not implemented (116) [ 120.389063][T12278] loop9: detected capacity change from 0 to 1024 [ 120.396424][T12278] EXT4-fs: Ignoring removed i_version option [ 120.406203][T12278] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.422099][T12278] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.3548: Invalid block bitmap block 0 in block_group 0 [ 120.434477][T12283] SELinux: security_context_str_to_sid () failed with errno=-22 [ 120.436274][T12284] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3547'. [ 120.453602][T12278] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3548: Failed to acquire dquot type 0 [ 120.453937][T12274] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3547'. [ 120.475388][T12278] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.3548: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.490786][T12278] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.3548: Invalid inode bitmap blk 0 in block_group 0 [ 120.510731][ T4932] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 120.522511][T12278] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 120.535508][T12278] EXT4-fs (loop9): 1 orphan inode deleted [ 120.541812][T12278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.592621][ T8795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.629904][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3568'. [ 120.638983][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3568'. [ 120.862151][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 120.862166][ T29] audit: type=1400 audit(1751063977.537:3827): avc: denied { unlink } for pid=5760 comm="syz-executor" name="file0" dev="tmpfs" ino=3069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.920797][T12336] xt_CT: No such helper "pptp" [ 120.924869][T12341] ipvlan2: entered promiscuous mode [ 121.033211][T12354] netlink: 'syz.8.3585': attribute type 1 has an invalid length. [ 121.081976][ T29] audit: type=1326 audit(1751063977.757:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.5.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 121.105746][ T29] audit: type=1326 audit(1751063977.757:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.5.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 121.141427][ T29] audit: type=1326 audit(1751063977.757:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.5.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 121.165108][ T29] audit: type=1326 audit(1751063977.757:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.5.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 121.188651][ T29] audit: type=1326 audit(1751063977.757:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.5.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6412e929 code=0x7ffc0000 [ 121.271300][T12380] futex_wake_op: syz.5.3597 tries to shift op by -1; fix this program [ 121.299796][T12385] loop8: detected capacity change from 0 to 1024 [ 121.309501][T12386] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 121.326236][T12385] EXT4-fs: Ignoring removed i_version option [ 121.342348][T12385] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.368937][T12385] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3608: Invalid block bitmap block 0 in block_group 0 [ 121.384150][T12385] Quota error (device loop8): write_blk: dquota write failed [ 121.391691][T12385] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 121.404856][T12399] loop0: detected capacity change from 0 to 512 [ 121.411949][T12385] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3608: Failed to acquire dquot type 0 [ 121.423622][T12399] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.433831][T12385] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.3608: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.443283][T12403] netlink: 'syz.5.3603': attribute type 2 has an invalid length. [ 121.447977][T12385] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3608: Invalid inode bitmap blk 0 in block_group 0 [ 121.454972][T12403] netlink: 'syz.5.3603': attribute type 1 has an invalid length. [ 121.468376][T12385] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 121.477182][ T579] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8 [ 121.484550][T12385] EXT4-fs (loop8): 1 orphan inode deleted [ 121.492934][ T579] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 121.500181][T12385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.511203][T12399] EXT4-fs (loop0): 1 truncate cleaned up [ 121.528975][T12399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.566142][ T5760] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.626627][ T29] audit: type=1400 audit(1751063978.297:3833): avc: denied { validate_trans } for pid=12409 comm="syz.8.3615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.723602][T12421] binfmt_misc: register: failed to install interpreter file ./file2 [ 121.812329][ T8835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.062647][T12470] futex_wake_op: syz.8.3622 tries to shift op by -1; fix this program [ 122.368860][T12531] netlink: 'syz.5.3652': attribute type 1 has an invalid length. [ 122.541504][T12568] loop9: detected capacity change from 0 to 1024 [ 122.556148][T12568] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 122.567205][T12568] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 122.578582][T12568] JBD2: no valid journal superblock found [ 122.584435][T12568] EXT4-fs (loop9): Could not load journal inode [ 122.596861][T12568] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 122.704968][T12597] netlink: 'syz.9.3657': attribute type 1 has an invalid length. [ 122.733654][T12606] program syz.9.3658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.940508][T12644] wireguard0: entered promiscuous mode [ 123.210981][T12692] netlink: 'syz.8.3678': attribute type 1 has an invalid length. [ 123.255537][T12698] wireguard0: entered promiscuous mode [ 123.423273][T12721] loop9: detected capacity change from 0 to 512 [ 123.432817][T12721] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 123.445158][T12721] EXT4-fs (loop9): 1 truncate cleaned up [ 123.460935][T12721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.734782][ T8795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.789587][T12763] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.797413][T12760] netlink: 'syz.7.3705': attribute type 1 has an invalid length. [ 124.144951][T12813] loop0: detected capacity change from 0 to 8192 [ 124.153604][T12832] IPVS: Error connecting to the multicast addr [ 124.203908][T12836] program syz.7.3739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.219026][T12836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.285782][T12850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12850 comm=syz.5.3742 [ 124.298517][T12850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12850 comm=syz.5.3742 [ 124.580870][T12864] lo speed is unknown, defaulting to 1000 [ 124.598868][ T4197] ================================================================== [ 124.607014][ T4197] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 124.615304][ T4197] [ 124.617637][ T4197] write to 0xffff88814412d8ac of 2 bytes by task 12844 on cpu 1: [ 124.625375][ T4197] fat16_ent_put+0x28/0x60 [ 124.629815][ T4197] fat_ent_write+0x6c/0xe0 [ 124.634262][ T4197] fat_chain_add+0x15b/0x3f0 [ 124.638877][ T4197] fat_get_block+0x46c/0x5e0 [ 124.643491][ T4197] __block_write_begin_int+0x400/0xf90 [ 124.648994][ T4197] cont_write_begin+0x5fc/0x970 [ 124.653865][ T4197] fat_write_begin+0x4f/0xe0 [ 124.658482][ T4197] generic_perform_write+0x184/0x490 [ 124.663793][ T4197] __generic_file_write_iter+0x9e/0x120 [ 124.669356][ T4197] generic_file_write_iter+0x8d/0x2f0 [ 124.674743][ T4197] vfs_write+0x4a0/0x8e0 [ 124.679012][ T4197] __x64_sys_pwrite64+0xfd/0x150 [ 124.683962][ T4197] x64_sys_call+0xe45/0x2fb0 [ 124.688568][ T4197] do_syscall_64+0xd2/0x200 [ 124.693082][ T4197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.698988][ T4197] [ 124.701322][ T4197] read to 0xffff88814412d800 of 512 bytes by task 4197 on cpu 0: [ 124.709042][ T4197] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 124.714953][ T4197] generic_perform_write+0x2c2/0x490 [ 124.720251][ T4197] shmem_file_write_iter+0xc5/0xf0 [ 124.725374][ T4197] lo_rw_aio+0x6ea/0x7a0 [ 124.729643][ T4197] loop_process_work+0x52d/0xa60 [ 124.734610][ T4197] loop_workfn+0x31/0x40 [ 124.738876][ T4197] process_scheduled_works+0x4ce/0x9d0 [ 124.744352][ T4197] worker_thread+0x582/0x770 [ 124.748966][ T4197] kthread+0x486/0x510 [ 124.753048][ T4197] ret_from_fork+0xda/0x150 [ 124.757566][ T4197] ret_from_fork_asm+0x1a/0x30 [ 124.762347][ T4197] [ 124.764679][ T4197] Reported by Kernel Concurrency Sanitizer on: [ 124.770835][ T4197] CPU: 0 UID: 0 PID: 4197 Comm: kworker/u8:9 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 124.783443][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.793516][ T4197] Workqueue: loop0 loop_workfn [ 124.798317][ T4197] ================================================================== [ 124.855601][T12886] loop5: detected capacity change from 0 to 512 [ 124.863343][T12886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.940301][T12886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.966573][T12886] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.003640][ T5757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.