last executing test programs: 1m10.656313169s ago: executing program 0 (id=1): symlink(0x0, &(0x7f00000017c0)='./file0\x00') r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1m10.489526712s ago: executing program 0 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x88c, 0x2, 0x3}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r2, 0x2, 0xaa}, &(0x7f0000000500)=0x10) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x400}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7f, 0x0, 0xfffffffe}, 0x0, 0xb, r1, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x143) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000300)="48e9cd65dd8cb82d464dad87b826edaa5c0738b1749b2c586597d84525f7961dcc00d179bab5d6466c87a4803f1a1a9cc7ff0f1445d94c833376b56fa667cc7b06a686ea8c50c142bad1606357ffc796e62d0649caf8cccc46223401158c343cb5d15875cacb4efa24cb92220aedd3989585a3f1edc9fb89bb9b28cfe66ff709161e47deca0b6acd2e7b8ffe12665d94ec3b9df7029c1e23bb9b181604e5d529b2c255ced1d2159234ca043a66d816c9a095498fd88faf8b42de2faa9934529afbc03d6a3a3ec4e1d024aa3ae7252f52828bf6169d532c4545d3c28a68a39f5675c4bf41ddcd97e3294ad90090e15735abe6209e4c550300"/264, 0x108, 0x800, 0x0, 0xffffffffffffff46) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1m10.208340636s ago: executing program 0 (id=10): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) (fail_nth: 1) 1m8.987992785s ago: executing program 0 (id=24): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000003e000701fcfbbb92d5dbdf250150fa5e080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x2, 0x7f, 0x7, 0x60, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000004aa50000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) symlink(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) brk(0x20001000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 1m8.986844435s ago: executing program 32 (id=24): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000003e000701fcfbbb92d5dbdf250150fa5e080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x2, 0x7f, 0x7, 0x60, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000004aa50000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) symlink(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) brk(0x20001000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 2.681446378s ago: executing program 3 (id=869): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getuid() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}], [{@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@permit_directio}, {@uid_lt={'uid<', r0}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '*-'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}]}, 0x6, 0x60a, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="300300002100010029bd7000fbdbdf2500000000000000000000000000000001fe880000000000000000fa91d04e210004020080403200"/64, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x330}}, 0x0) 2.504259931s ago: executing program 3 (id=871): removexattr(0x0, &(0x7f0000000040)=ANY=[]) getitimer(0xe, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {@in6=@loopback, 0x0, 0x3c}, @in=@multicast1, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x40040000}}}}}}, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x3}, 0x10) bind$tipc(r6, 0x0, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r5, &(0x7f00000004c0)=""/195, 0xc3, 0x5) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}}, 0x0) close(r5) 2.279034654s ago: executing program 3 (id=873): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.140369887s ago: executing program 3 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x20, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.804789022s ago: executing program 4 (id=881): syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@loopback}]}, @lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.705188654s ago: executing program 5 (id=885): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.690686523s ago: executing program 4 (id=886): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 1.668755334s ago: executing program 5 (id=888): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.653676804s ago: executing program 2 (id=889): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x4e21, 0x7, @remote}, r3, 0x2}}, 0x48) close(0x3) 1.604172935s ago: executing program 2 (id=890): r0 = io_uring_setup(0x7882, &(0x7f0000000a40)={0x0, 0x17fe, 0x2, 0xfffffffe, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r0, r1, 0x0) msgsnd(0x0, &(0x7f0000003900)=ANY=[@ANYBLOB="01"], 0xc56, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 1.528532626s ago: executing program 5 (id=891): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 1.528332726s ago: executing program 2 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x0) 1.222336561s ago: executing program 3 (id=893): r0 = socket$inet6(0xa, 0xa, 0x400000) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x14e24, 0x0, @rand_addr, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) 1.148016012s ago: executing program 2 (id=894): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="a980b2a0cb0809541841ee4e1262808a24fc8f1c27d5e4506f13af5c6d63172360b6baad9d0c3df046f4f5f0adc0308e3ef659787d0489cf1b2965169fccccd319634be2722fd699c8ed", 0x4a}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8ae117154b30ab1c7fae42a9d398ee41d0f486ad54dc3832847d201f9a55131f9f76f2e00cf1105b10a47921f04087cb12b3d49446bcc2ec3564a6376c10f73cc539fbb8a0dd111d0c0f6ed38796250527a6e59c960b5b1219eb41a8248a4d56a5f4e20f248aa6c383ad528e822413ceeb4a5e5c3e8268662e94b56b9fd93a4175c7d9fdce4609faa21aa9f63caf1130269b9445386e4f473a0e6feb415ccf9919147f8c9f16c8be580a2363a0f66fcfac0e4311c8db2cf1f3987e1d02dfb97b", 0xe1}, {&(0x7f00000011c0)="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", 0x156}], 0x3}, 0x88d4) sendto$inet(r0, &(0x7f00000001c0)="53fdec8fe6c4f98ad83787c16a3c8744c0580c7ae04e4fbe5abd3769e1bf22e5864d82f5124ac2449dea5e296789a97bf062ec9381df", 0x36, 0x4000000, 0x0, 0x0) 1.028043284s ago: executing program 2 (id=895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x800}]}, 0x28}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) 601.87992ms ago: executing program 5 (id=897): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x22, 0x0, &(0x7f00000000c0)) 494.420102ms ago: executing program 4 (id=898): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 430.186663ms ago: executing program 1 (id=899): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x20004084) 393.942564ms ago: executing program 5 (id=900): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x4e21, 0x7, @remote}, r3, 0x2}}, 0x48) close(0x3) 339.108625ms ago: executing program 4 (id=901): modify_ldt$write2(0x11, &(0x7f0000000080)={0x3e, 0xffffffffffffffff, 0x1400, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) socket$kcm(0x10, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x7d, 0xffffffffffffffff, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000380)={0x2e, 0xffffffffffffffff, 0x1400, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x4040000) 277.099126ms ago: executing program 1 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 228.462046ms ago: executing program 3 (id=903): socket$kcm(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5}}]}}]}}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 216.713807ms ago: executing program 5 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000100)={0x20, 0xc, 0x2, {0x2, 0x7}}, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "64a85d98"}]}}, 0x0}, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x845b2b38ec2bf5a4, 0x0) 126.122378ms ago: executing program 1 (id=905): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="a980b2a0cb0809541841ee4e1262808a24fc8f1c27d5e4506f13af5c6d63172360b6baad9d0c3df046f4f5f0adc0308e3ef659787d0489cf1b2965169fccccd319634be2722fd699c8ed", 0x4a}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8ae117154b30ab1c7fae42a9d398ee41d0f486ad54dc3832847d201f9a55131f9f76f2e00cf1105b10a47921f04087cb12b3d49446bcc2ec3564a6376c10f73cc539fbb8a0dd111d0c0f6ed38796250527a6e59c960b5b1219eb41a8248a4d56a5f4e20f248aa6c383ad528e822413ceeb4a5e5c3e8268662e94b56b9fd93a4175c7d9fdce4609faa21aa9f63caf1130269b9445386e4f473a0e6feb415ccf9919147f8c9f16c8be580a2363a0f66fcfac0e4311c8db2cf1f3987e1d02dfb97b", 0xe1}, {&(0x7f00000011c0)="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", 0x156}], 0x3}, 0x88d4) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="53fdec8fe6c4f98ad83787c16a3c8744c0580c7ae04e4fbe5abd3769e1bf22e5864d82f5124ac2449dea5e296789a97bf062ec9381df", 0x36, 0x4000000, 0x0, 0x0) 119.890648ms ago: executing program 4 (id=906): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 82.301778ms ago: executing program 4 (id=907): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400d5d0000001a4657a75b9139ee170f4bb785474545af501e0c1356f824761a6b5d20e8a1f2b98e8c05382c35cdb3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 41.216349ms ago: executing program 1 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000300)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) 39.280689ms ago: executing program 2 (id=909): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4) readv(r0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/171, 0xab}, {0x0}], 0x2) 14.351259ms ago: executing program 1 (id=910): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x800) 0s ago: executing program 1 (id=911): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) getpid() getpid() kernel console output (not intermixed with test programs): o 1560 would solve the problem. [ 73.382801][ T3562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.421142][ T3562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.428492][ T3562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.455167][ T3562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.477227][ T3610] loop1: detected capacity change from 0 to 512 [ 73.498835][ T3589] syz.2.27 (3589) used greatest stack depth: 8952 bytes left [ 73.535484][ T3584] syz.2.27 (3584) used greatest stack depth: 8152 bytes left [ 73.552437][ T3610] EXT4-fs (loop1): 1 orphan inode deleted [ 73.561021][ T3610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.582898][ T143] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 73.615827][ T3610] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.680580][ T37] bridge_slave_1: left allmulticast mode [ 73.686706][ T37] bridge_slave_1: left promiscuous mode [ 73.692814][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.711150][ T3610] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 73.721120][ T37] bridge_slave_0: left allmulticast mode [ 73.727346][ T37] bridge_slave_0: left promiscuous mode [ 73.733844][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.851680][ T3579] syz.2.27 (3579) used greatest stack depth: 6824 bytes left [ 73.895217][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.907960][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.921850][ T37] bond0 (unregistering): Released all slaves [ 73.958891][ T3618] x_tables: duplicate underflow at hook 1 [ 73.969055][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.989031][ T3562] hsr_slave_0: entered promiscuous mode [ 74.010473][ T3562] hsr_slave_1: entered promiscuous mode [ 74.046024][ T3562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.061125][ T3562] Cannot create hsr debugfs directory [ 74.102249][ T3628] loop1: detected capacity change from 0 to 128 [ 74.133922][ T37] hsr_slave_0: left promiscuous mode [ 74.147684][ T3622] SELinux: syz.2.35 (3622) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.163366][ T37] hsr_slave_1: left promiscuous mode [ 74.180506][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.189371][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.215713][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.224188][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.248988][ T37] veth1_macvtap: left promiscuous mode [ 74.257912][ T3640] loop1: detected capacity change from 0 to 1024 [ 74.271052][ T37] veth0_macvtap: left promiscuous mode [ 74.274450][ T3640] EXT4-fs: Ignoring removed orlov option [ 74.287677][ T37] veth1_vlan: left promiscuous mode [ 74.289933][ T3637] loop4: detected capacity change from 0 to 512 [ 74.294849][ T3642] capability: warning: `syz.2.39' uses 32-bit capabilities (legacy support in use) [ 74.314510][ T37] veth0_vlan: left promiscuous mode [ 74.317094][ T3637] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.350948][ T3637] EXT4-fs (loop4): 1 truncate cleaned up [ 74.365645][ T3640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.383320][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.397474][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 74.397491][ T29] audit: type=1326 audit(1750527976.609:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c0785d290 code=0x7ffc0000 [ 74.426205][ T3637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.431710][ T29] audit: type=1326 audit(1750527976.609:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4c0785d677 code=0x7ffc0000 [ 74.465497][ T29] audit: type=1326 audit(1750527976.609:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c0785d290 code=0x7ffc0000 [ 74.490164][ T29] audit: type=1326 audit(1750527976.609:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 74.514160][ T29] audit: type=1326 audit(1750527976.609:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 74.538292][ T29] audit: type=1326 audit(1750527976.619:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 74.563174][ T29] audit: type=1326 audit(1750527976.619:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 74.589102][ T29] audit: type=1326 audit(1750527976.619:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 74.615162][ T29] audit: type=1326 audit(1750527976.619:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 74.642198][ T29] audit: type=1400 audit(1750527976.619:369): avc: denied { remove_name } for pid=3638 comm="syz.1.38" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.690778][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.706705][ T37] team0 (unregistering): Port device team_slave_1 removed [ 74.737357][ T37] team0 (unregistering): Port device team_slave_0 removed [ 74.988676][ T3665] random: crng reseeded on system resumption [ 75.094910][ T3562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.122428][ T3562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.146800][ T3562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.166224][ T3562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.289349][ T3562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.337079][ T3562] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.346454][ T3700] loop4: detected capacity change from 0 to 128 [ 75.356943][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.364191][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.398409][ T3710] netlink: 'syz.2.50': attribute type 3 has an invalid length. [ 75.418578][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.425908][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.440463][ T3710] netlink: 'syz.2.50': attribute type 21 has an invalid length. [ 75.479298][ T3710] loop2: detected capacity change from 0 to 512 [ 75.505026][ T3562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.521881][ T3562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.534802][ T3710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.548109][ T3710] EXT4-fs (loop2): 1 truncate cleaned up [ 75.556123][ T3710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.574562][ T3717] loop4: detected capacity change from 0 to 256 [ 75.579217][ T3710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.648728][ T3721] SELinux: syz.3.53 (3721) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 75.807156][ T3562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.866814][ T3749] batman_adv: batadv0: Adding interface: ip6gretap1 [ 75.874611][ T3749] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.902825][ T3749] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 75.921557][ T3752] loop1: detected capacity change from 0 to 2048 [ 75.928524][ T3737] loop3: detected capacity change from 0 to 256 [ 75.939958][ T3749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.947953][ T3749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.966543][ T3752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.983334][ T3752] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.002901][ T3749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.010966][ T3749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.025583][ T3737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 76.038571][ T3749] batman_adv: batadv0: Removing interface: ip6gretap1 [ 76.120028][ T3762] ip6gretap0: entered promiscuous mode [ 76.145299][ T3762] macsec1: entered allmulticast mode [ 76.151646][ T3762] ip6gretap0: entered allmulticast mode [ 76.200540][ T3762] ip6gretap0: left allmulticast mode [ 76.206422][ T3762] ip6gretap0: left promiscuous mode [ 76.260763][ T3764] bond1: entered promiscuous mode [ 76.266603][ T3764] bond1: entered allmulticast mode [ 76.283207][ T3764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.294341][ T3772] loop4: detected capacity change from 0 to 128 [ 76.315323][ T3764] bond1 (unregistering): Released all slaves [ 76.391514][ T3777] netlink: 'syz.2.62': attribute type 3 has an invalid length. [ 76.444973][ T3777] netlink: 'syz.2.62': attribute type 21 has an invalid length. [ 76.509086][ T3777] loop2: detected capacity change from 0 to 512 [ 76.552117][ T37] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 76.561872][ T3777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.585581][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1022 with error 117 [ 76.600238][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.600238][ T37] [ 76.611833][ T3777] EXT4-fs (loop2): 1 truncate cleaned up [ 76.626706][ T3777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.695564][ T3562] veth0_vlan: entered promiscuous mode [ 76.713223][ T3777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.718063][ T3562] veth1_vlan: entered promiscuous mode [ 76.786670][ T3562] veth0_macvtap: entered promiscuous mode [ 76.806225][ T3562] veth1_macvtap: entered promiscuous mode [ 76.849287][ T3562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.087602][ T3562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.139183][ T3815] loop2: detected capacity change from 0 to 128 [ 77.218467][ T3818] SELinux: syz.3.66 (3818) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 77.275955][ T143] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1038 with max blocks 2 with error 28 [ 77.288522][ T143] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.288522][ T143] [ 77.298277][ T143] EXT4-fs (loop1): Total free blocks count 0 [ 77.304509][ T143] EXT4-fs (loop1): Free/Dirty block details [ 77.310548][ T143] EXT4-fs (loop1): free_blocks=0 [ 77.315561][ T143] EXT4-fs (loop1): dirty_blocks=16 [ 77.320708][ T143] EXT4-fs (loop1): Block reservation details [ 77.339373][ T3562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.348357][ T3562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.357228][ T3562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.366002][ T3562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.448503][ T3827] loop3: detected capacity change from 0 to 1024 [ 77.464482][ T3827] EXT4-fs: Ignoring removed orlov option [ 77.485800][ T3827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.506076][ T3820] loop2: detected capacity change from 0 to 256 [ 77.523631][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 77.537776][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.625528][ T3839] loop2: detected capacity change from 0 to 128 [ 77.724849][ T3844] loop5: detected capacity change from 0 to 512 [ 77.755637][ T3844] EXT4-fs: dax option not supported [ 77.779193][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 77.818448][ T3844] loop5: detected capacity change from 0 to 512 [ 77.826087][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 77.832225][ T3854] netlink: 'syz.2.76': attribute type 3 has an invalid length. [ 77.851431][ T3844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.909252][ T3854] netlink: 'syz.2.76': attribute type 21 has an invalid length. [ 77.918153][ T3844] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 77.935801][ T3844] System zones: 0-2, 18-18, 34-34 [ 77.943984][ T3844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.961940][ T3844] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.975255][ T3854] loop2: detected capacity change from 0 to 512 [ 78.031179][ T3854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.063851][ T3854] EXT4-fs (loop2): 1 truncate cleaned up [ 78.088479][ T3854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.090057][ T3874] loop3: detected capacity change from 0 to 256 [ 78.138768][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.155693][ T3854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.432852][ T3901] loop5: detected capacity change from 0 to 512 [ 78.444785][ T3901] journal_path: Non-blockdev passed as './bus' [ 78.452101][ T3901] EXT4-fs: error: could not find journal device path [ 78.480853][ T3890] loop1: detected capacity change from 0 to 256 [ 78.506500][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'. [ 78.531136][ T3905] xfrm1: entered promiscuous mode [ 78.536932][ T3905] xfrm1: entered allmulticast mode [ 78.626755][ T3909] mmap: syz.2.85 (3909) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.729967][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 79.095918][ T3923] random: crng reseeded on system resumption [ 79.170639][ T3926] SELinux: syz.1.93 (3926) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 79.396070][ T3936] loop1: detected capacity change from 0 to 128 [ 79.519172][ T3944] loop2: detected capacity change from 0 to 512 [ 79.528406][ T3946] netlink: 'syz.1.99': attribute type 3 has an invalid length. [ 79.556406][ T3944] journal_path: Non-blockdev passed as './bus' [ 79.563002][ T3944] EXT4-fs: error: could not find journal device path [ 79.570305][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 79.570321][ T29] audit: type=1326 audit(1750527981.779:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.580602][ T3946] netlink: 'syz.1.99': attribute type 21 has an invalid length. [ 79.600608][ T29] audit: type=1326 audit(1750527981.789:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.633607][ T29] audit: type=1326 audit(1750527981.789:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.657839][ T29] audit: type=1326 audit(1750527981.789:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.667562][ T3949] loop1: detected capacity change from 0 to 512 [ 79.683535][ T29] audit: type=1326 audit(1750527981.789:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.715608][ T29] audit: type=1326 audit(1750527981.789:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.742440][ T29] audit: type=1326 audit(1750527981.789:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.767222][ T29] audit: type=1326 audit(1750527981.789:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.792384][ T29] audit: type=1326 audit(1750527981.789:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 79.828560][ T3949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.952380][ T29] audit: type=1326 audit(1750527981.789:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c0785e929 code=0x7ffc0000 [ 80.004103][ T3949] EXT4-fs (loop1): 1 truncate cleaned up [ 80.026993][ T3949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.041374][ T3949] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.055225][ T3952] loop2: detected capacity change from 0 to 2048 [ 80.072783][ T3961] tmpfs: Bad value for 'mpol' [ 80.087941][ T3961] loop3: detected capacity change from 0 to 256 [ 80.174333][ T3975] FAULT_INJECTION: forcing a failure. [ 80.174333][ T3975] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.185262][ T3964] SELinux: syz.4.102 (3964) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.187972][ T3975] CPU: 1 UID: 0 PID: 3975 Comm: syz.3.105 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 80.188013][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.188036][ T3975] Call Trace: [ 80.188046][ T3975] [ 80.188057][ T3975] __dump_stack+0x1d/0x30 [ 80.188227][ T3975] dump_stack_lvl+0xe8/0x140 [ 80.188255][ T3975] dump_stack+0x15/0x1b [ 80.188314][ T3975] should_fail_ex+0x265/0x280 [ 80.188360][ T3975] should_fail+0xb/0x20 [ 80.188399][ T3975] should_fail_usercopy+0x1a/0x20 [ 80.188456][ T3975] _copy_from_user+0x1c/0xb0 [ 80.188535][ T3975] do_sock_getsockopt+0xf1/0x240 [ 80.188584][ T3975] __x64_sys_getsockopt+0x11e/0x1a0 [ 80.188664][ T3975] x64_sys_call+0x12aa/0x2fb0 [ 80.188694][ T3975] do_syscall_64+0xd2/0x200 [ 80.188764][ T3975] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.188810][ T3975] ? clear_bhb_loop+0x40/0x90 [ 80.188885][ T3975] ? clear_bhb_loop+0x40/0x90 [ 80.188917][ T3975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.188977][ T3975] RIP: 0033:0x7fc635a2e929 [ 80.189006][ T3975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.189031][ T3975] RSP: 002b:00007fc634097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 80.189057][ T3975] RAX: ffffffffffffffda RBX: 00007fc635c55fa0 RCX: 00007fc635a2e929 [ 80.189075][ T3975] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 80.189092][ T3975] RBP: 00007fc634097090 R08: 00002000000003c0 R09: 0000000000000000 [ 80.189109][ T3975] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.189146][ T3975] R13: 0000000000000000 R14: 00007fc635c55fa0 R15: 00007ffe4e469748 [ 80.189174][ T3975] [ 80.193596][ T3952] loop2: unable to read partition table [ 80.402133][ T3952] loop2: partition table beyond EOD, truncated [ 80.402160][ T3952] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 80.524954][ T2995] loop2: unable to read partition table [ 80.531503][ T2995] loop2: partition table beyond EOD, truncated [ 80.687545][ T4004] loop2: detected capacity change from 0 to 128 [ 80.830951][ T4005] loop3: detected capacity change from 0 to 256 [ 80.883730][ T4024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.938105][ T4005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 80.980298][ T4026] SELinux: syz.2.120 (4026) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.994899][ T4024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.221475][ T4045] loop5: detected capacity change from 0 to 512 [ 81.243872][ T4045] journal_path: Non-blockdev passed as './bus' [ 81.250727][ T4045] EXT4-fs: error: could not find journal device path [ 81.303237][ T4043] SELinux: syz.2.127 (4043) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.407536][ T4055] loop2: detected capacity change from 0 to 512 [ 81.422796][ T4055] journal_path: Non-blockdev passed as './bus' [ 81.429559][ T4055] EXT4-fs: error: could not find journal device path [ 81.437008][ T4057] loop3: detected capacity change from 0 to 2048 [ 81.534474][ T4063] loop2: detected capacity change from 0 to 128 [ 81.535334][ T4057] loop3: unable to read partition table [ 81.581533][ T4057] loop3: partition table beyond EOD, truncated [ 81.588445][ T4057] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 81.633599][ T4068] loop2: detected capacity change from 0 to 512 [ 81.653407][ T4068] journal_path: Non-blockdev passed as './bus' [ 81.660268][ T4068] EXT4-fs: error: could not find journal device path [ 81.747465][ T2995] loop3: unable to read partition table [ 81.757482][ T2995] loop3: partition table beyond EOD, truncated [ 81.771499][ T4070] loop2: detected capacity change from 0 to 128 [ 81.818339][ T4070] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 81.828282][ T4070] FAT-fs (loop2): Filesystem has been set read-only [ 81.840027][ T4074] SELinux: syz.3.137 (4074) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.884818][ T4070] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 81.895733][ T4070] syz.2.138: attempt to access beyond end of device [ 81.895733][ T4070] loop2: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 82.010642][ T4084] netlink: 44 bytes leftover after parsing attributes in process `syz.2.142'. [ 82.054765][ T4086] loop4: detected capacity change from 0 to 1024 [ 82.066446][ T4086] EXT4-fs: Ignoring removed orlov option [ 82.109601][ T4086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.143456][ T4096] loop2: detected capacity change from 0 to 512 [ 82.150864][ T4096] journal_path: Non-blockdev passed as './bus' [ 82.157935][ T4096] EXT4-fs: error: could not find journal device path [ 82.223341][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.394024][ T4100] loop1: detected capacity change from 0 to 512 [ 82.429345][ T4105] loop4: detected capacity change from 0 to 128 [ 82.438312][ T4100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.488467][ T4100] EXT4-fs (loop1): 1 truncate cleaned up [ 82.522807][ T4100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.597128][ T4117] loop3: detected capacity change from 0 to 512 [ 82.633879][ T4100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.652206][ T4117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.673934][ T4117] EXT4-fs (loop3): 1 truncate cleaned up [ 82.681239][ T4119] syzkaller0: entered promiscuous mode [ 82.687300][ T4119] syzkaller0: entered allmulticast mode [ 82.694016][ T4117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.727994][ T4117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.834007][ T4133] netlink: 'syz.5.163': attribute type 3 has an invalid length. [ 82.867262][ T4133] Zero length message leads to an empty skb [ 82.883723][ T4133] loop5: detected capacity change from 0 to 512 [ 82.909639][ T4133] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.927792][ T4139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.954188][ T4133] EXT4-fs (loop5): 1 truncate cleaned up [ 82.960582][ T4133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.975048][ T4133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.003390][ T4139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.042713][ T4139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.124057][ T4142] loop3: detected capacity change from 0 to 256 [ 83.148872][ T4139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.153934][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 83.229918][ T4139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244577][ T4139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258040][ T4139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.270945][ T4139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.290851][ T4153] loop5: detected capacity change from 0 to 128 [ 83.360615][ T4157] loop2: detected capacity change from 0 to 1024 [ 83.378480][ T4157] EXT4-fs: Ignoring removed orlov option [ 83.399455][ T4159] SELinux: syz.5.172 (4159) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 83.454348][ T4157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.518472][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.703790][ T4180] loop1: detected capacity change from 0 to 512 [ 83.710843][ T4180] journal_path: Non-blockdev passed as './bus' [ 83.717553][ T4180] EXT4-fs: error: could not find journal device path [ 83.772171][ T4184] random: crng reseeded on system resumption [ 83.867309][ T4177] loop4: detected capacity change from 0 to 256 [ 84.227212][ T4200] loop2: detected capacity change from 0 to 128 [ 84.333938][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 84.475457][ T4208] loop5: detected capacity change from 0 to 128 [ 84.535444][ T4216] loop2: detected capacity change from 0 to 2048 [ 84.563509][ T4219] loop1: detected capacity change from 0 to 512 [ 84.581012][ T4219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.600953][ T4219] EXT4-fs (loop1): 1 truncate cleaned up [ 84.622564][ T4219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.635318][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 84.635335][ T29] audit: type=1400 audit(1750527986.849:1314): avc: denied { name_bind } for pid=4221 comm="syz.3.196" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.639359][ T4223] netlink: 'syz.3.196': attribute type 12 has an invalid length. [ 84.641744][ T29] audit: type=1400 audit(1750527986.849:1315): avc: denied { node_bind } for pid=4221 comm="syz.3.196" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.683256][ T4219] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.719118][ T4231] netlink: 'syz.4.199': attribute type 3 has an invalid length. [ 84.749726][ T4216] loop2: unable to read partition table [ 84.755663][ T4216] loop2: partition table beyond EOD, truncated [ 84.761881][ T4216] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 84.772139][ T29] audit: type=1326 audit(1750527986.989:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 84.795867][ T29] audit: type=1326 audit(1750527986.989:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 84.797684][ T4231] loop4: detected capacity change from 0 to 512 [ 84.819313][ T29] audit: type=1326 audit(1750527986.989:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 84.869253][ T4231] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.914458][ T4231] EXT4-fs (loop4): 1 truncate cleaned up [ 84.930567][ T4236] loop1: detected capacity change from 0 to 1024 [ 84.933916][ T4231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.951649][ T4236] EXT4-fs: Ignoring removed orlov option [ 84.956530][ T2995] loop2: unable to read partition table [ 84.965068][ T2995] loop2: partition table beyond EOD, truncated [ 84.979661][ T4231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.988541][ T29] audit: type=1326 audit(1750527986.999:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 85.014827][ T29] audit: type=1326 audit(1750527986.999:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 85.039522][ T29] audit: type=1326 audit(1750527986.999:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 85.065885][ T29] audit: type=1326 audit(1750527986.999:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 85.091197][ T29] audit: type=1326 audit(1750527986.999:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 85.144433][ T4236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.189451][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.223631][ T4241] loop2: detected capacity change from 0 to 256 [ 85.240167][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 85.327026][ T4255] loop2: detected capacity change from 0 to 1024 [ 85.338559][ T4255] EXT4-fs: Ignoring removed orlov option [ 85.378822][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.526762][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.727199][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.735622][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.744883][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.861938][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870024][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870048][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870156][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870184][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870209][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870230][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870256][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870282][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870343][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.870363][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.909903][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.909931][ T3417] hid-generic 0006:0000:0000.0001: unknown main item tag 0x0 [ 85.918482][ T3417] hid-generic 0006:0000:0000.0001: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 86.044380][ T4294] fido_id[4294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.072149][ T4300] loop2: detected capacity change from 0 to 1024 [ 86.072870][ T4300] EXT4-fs: Ignoring removed orlov option [ 86.110216][ T4313] SELinux: syz.4.218 (4313) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.142936][ T4300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.163531][ T4301] SELinux: syz.3.216 (4301) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.181697][ T4319] netlink: 'syz.1.222': attribute type 3 has an invalid length. [ 86.219208][ T4319] loop1: detected capacity change from 0 to 512 [ 86.225098][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.258075][ T4319] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.266332][ T4319] EXT4-fs (loop1): 1 truncate cleaned up [ 86.532918][ T4333] SELinux: syz.3.225 (4333) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.541470][ T4327] SELinux: syz.2.223 (4327) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.634485][ T4319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.680472][ T4319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.892348][ T4345] SELinux: syz.2.229 (4345) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.957257][ T4348] loop4: detected capacity change from 0 to 2048 [ 87.009228][ T4352] loop2: detected capacity change from 0 to 1024 [ 87.041383][ T4352] EXT4-fs: Ignoring removed orlov option [ 87.070883][ T4354] loop3: detected capacity change from 0 to 2048 [ 87.079605][ T3304] loop4: unable to read partition table [ 87.088501][ T4352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.105584][ T3304] loop4: partition table beyond EOD, truncated [ 87.136562][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.196089][ T4361] loop2: detected capacity change from 0 to 512 [ 87.219073][ T4348] loop4: unable to read partition table [ 87.229020][ T3509] loop3: unable to read partition table [ 87.255183][ T4361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.270198][ T4348] loop4: partition table beyond EOD, truncated [ 87.276729][ T4348] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 87.286013][ T3509] loop3: partition table beyond EOD, truncated [ 87.327138][ T4365] loop1: detected capacity change from 0 to 512 [ 87.342615][ T4361] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.357977][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 87.381148][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.382842][ T4354] loop3: unable to read partition table [ 87.392278][ T4365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.414482][ T4354] loop3: partition table beyond EOD, truncated [ 87.421771][ T4354] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 87.450841][ T4365] EXT4-fs (loop1): 1 truncate cleaned up [ 87.466033][ T4365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.481703][ T4365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.563099][ T4375] loop1: detected capacity change from 0 to 128 [ 87.649136][ T4381] loop2: detected capacity change from 0 to 512 [ 87.688761][ T4381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.689927][ T2995] loop4: unable to read partition table [ 87.708540][ T2995] loop4: partition table beyond EOD, truncated [ 87.714681][ T4381] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.921804][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 87.931756][ T4390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.100583][ T4390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.233303][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.530783][ T4390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.586377][ T4396] loop3: detected capacity change from 0 to 128 [ 88.638923][ T4390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.689809][ T4404] loop2: detected capacity change from 0 to 512 [ 88.730768][ T4404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.752457][ T4406] netlink: 'syz.3.252': attribute type 3 has an invalid length. [ 88.761822][ T4404] EXT4-fs (loop2): 1 truncate cleaned up [ 88.787793][ T4390] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.805285][ T4404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.819136][ T4406] loop3: detected capacity change from 0 to 512 [ 88.823872][ T4390] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.828078][ T4404] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.838837][ T4390] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.856864][ T4390] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.864538][ T4406] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.896413][ T4410] loop5: detected capacity change from 0 to 2048 [ 88.966003][ T4406] EXT4-fs (loop3): 1 truncate cleaned up [ 88.989140][ T3509] loop5: unable to read partition table [ 89.003900][ T4406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.016804][ T3509] loop5: partition table beyond EOD, truncated [ 89.022976][ T4424] loop4: detected capacity change from 0 to 128 [ 89.054613][ T4406] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.079412][ T4424] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.087932][ T4424] FAT-fs (loop4): Filesystem has been set read-only [ 89.099206][ T4426] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 89.105980][ T4426] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.114053][ T4426] vhci_hcd vhci_hcd.0: Device attached [ 89.120741][ T4424] syz.4.257: attempt to access beyond end of device [ 89.120741][ T4424] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 89.133343][ T4410] loop5: unable to read partition table [ 89.141546][ T4410] loop5: partition table beyond EOD, truncated [ 89.145300][ T4424] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.148538][ T4410] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 89.156796][ T4424] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.168023][ T4428] vhci_hcd: cannot find the pending unlink 3994 [ 89.189659][ T4428] usbip_core: unknown command [ 89.194534][ T4428] vhci_hcd: unknown pdu 0 [ 89.199094][ T4428] usbip_core: unknown command [ 89.223239][ T4430] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.232554][ T4430] syz.4.257: attempt to access beyond end of device [ 89.232554][ T4430] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 89.253869][ T51] vhci_hcd: stop threads [ 89.258400][ T51] vhci_hcd: release socket [ 89.263053][ T51] vhci_hcd: disconnect device [ 89.267955][ T4424] syz.4.257: attempt to access beyond end of device [ 89.267955][ T4424] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.292536][ T2995] loop5: unable to read partition table [ 89.292643][ T3369] vhci_hcd: vhci_device speed not set [ 89.298828][ T2995] loop5: partition table beyond EOD, truncated [ 89.305903][ T4430] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.318946][ T4430] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 89.347635][ T4424] syz.4.257: attempt to access beyond end of device [ 89.347635][ T4424] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.352739][ T4434] loop5: detected capacity change from 0 to 128 [ 89.368951][ T4424] syz.4.257: attempt to access beyond end of device [ 89.368951][ T4424] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.383220][ T4430] syz.4.257: attempt to access beyond end of device [ 89.383220][ T4430] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.400773][ T4424] syz.4.257: attempt to access beyond end of device [ 89.400773][ T4424] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.415930][ T4430] syz.4.257: attempt to access beyond end of device [ 89.415930][ T4430] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.433525][ T4424] syz.4.257: attempt to access beyond end of device [ 89.433525][ T4424] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.438135][ T4434] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 89.456114][ T4434] FAT-fs (loop5): Filesystem has been set read-only [ 89.461905][ T4430] syz.4.257: attempt to access beyond end of device [ 89.461905][ T4430] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.473787][ T4434] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 89.484775][ T4434] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 89.610006][ T4441] loop3: detected capacity change from 0 to 128 [ 89.732117][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 89.732139][ T29] audit: type=1326 audit(1750527991.919:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734526e929 code=0x7ffc0000 [ 89.763891][ T29] audit: type=1326 audit(1750527991.919:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f734526e929 code=0x7ffc0000 [ 89.788410][ T29] audit: type=1326 audit(1750527991.919:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734526e929 code=0x7ffc0000 [ 89.813934][ T29] audit: type=1326 audit(1750527991.919:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.2.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734526e929 code=0x7ffc0000 [ 89.880509][ T4445] loop2: detected capacity change from 0 to 2048 [ 89.976769][ T3304] loop2: unable to read partition table [ 89.997172][ T29] audit: type=1326 audit(1750527992.219:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc635a2e929 code=0x7ffc0000 [ 90.007338][ T3304] loop2: partition table beyond EOD, truncated [ 90.083034][ T29] audit: type=1326 audit(1750527992.219:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc635a2e929 code=0x7ffc0000 [ 90.108861][ T29] audit: type=1326 audit(1750527992.249:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4449 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0785e929 code=0x7fc00000 [ 90.133595][ T29] audit: type=1326 audit(1750527992.259:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc635a2e929 code=0x7ffc0000 [ 90.151299][ T4445] loop2: unable to read partition table [ 90.158914][ T29] audit: type=1326 audit(1750527992.259:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc635a2e929 code=0x7ffc0000 [ 90.166543][ T4445] loop2: partition table beyond EOD, [ 90.190302][ T29] audit: type=1326 audit(1750527992.259:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc635a2e929 code=0x7ffc0000 [ 90.196098][ T4445] truncated [ 90.196164][ T4445] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 90.240910][ T4456] loop3: detected capacity change from 0 to 512 [ 90.254910][ T4456] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.290089][ T2995] loop2: unable to read partition table [ 90.299661][ T4456] EXT4-fs (loop3): 1 truncate cleaned up [ 90.313366][ T2995] loop2: partition table beyond EOD, truncated [ 90.342594][ T4456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.398003][ T4456] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.591228][ T4466] loop3: detected capacity change from 0 to 2048 [ 90.625770][ T4467] loop2: detected capacity change from 0 to 128 [ 90.655448][ T4467] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 90.665040][ T4467] FAT-fs (loop2): Filesystem has been set read-only [ 90.695855][ T4467] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 90.710154][ T3304] loop3: unable to read partition table [ 90.717039][ T3304] loop3: partition table beyond EOD, truncated [ 90.797172][ T4490] loop5: detected capacity change from 0 to 128 [ 90.806840][ T4495] netlink: 'syz.1.275': attribute type 3 has an invalid length. [ 90.840989][ T4466] loop3: unable to read partition table [ 90.876048][ T4466] loop3: partition table beyond EOD, truncated [ 90.880329][ T4495] loop1: detected capacity change from 0 to 512 [ 90.882560][ T4466] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 90.912645][ T4495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.971659][ T4495] EXT4-fs (loop1): 1 truncate cleaned up [ 90.988842][ T4495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.017957][ T2995] loop3: unable to read partition table [ 91.026694][ T2995] loop3: partition table beyond EOD, truncated [ 91.034660][ T4495] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.129963][ T4515] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.236906][ T4515] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.275281][ T4526] loop4: detected capacity change from 0 to 2048 [ 91.307717][ T4515] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.394526][ T4515] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.476294][ T3304] loop4: unable to read partition table [ 91.504704][ T3304] loop4: partition table beyond EOD, truncated [ 91.520653][ T4515] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.568325][ T4526] loop4: unable to read partition table [ 91.576146][ T4515] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.589188][ T4526] loop4: partition table beyond EOD, truncated [ 91.595838][ T4526] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 91.615417][ T4544] loop2: detected capacity change from 0 to 256 [ 91.625003][ T4515] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.650884][ T4550] loop1: detected capacity change from 0 to 128 [ 91.665399][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 91.676150][ T4515] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.682137][ T4550] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.692450][ T4550] FAT-fs (loop1): Filesystem has been set read-only [ 91.722915][ T4550] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.789193][ T4564] loop2: detected capacity change from 0 to 128 [ 91.827179][ T4564] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 91.829476][ T2995] loop4: unable to read partition table [ 91.835518][ T4564] FAT-fs (loop2): Filesystem has been set read-only [ 91.860490][ T4564] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 91.868711][ T4564] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 91.912103][ T2995] loop4: partition table beyond EOD, truncated [ 91.921324][ T4573] loop5: detected capacity change from 0 to 1024 [ 91.996944][ T4573] EXT4-fs: Ignoring removed orlov option [ 92.015661][ T4564] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 92.025304][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 92.097270][ T4564] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 92.105578][ T4564] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 92.977560][ T4617] loop2: detected capacity change from 0 to 2048 [ 93.168811][ T4632] loop3: detected capacity change from 0 to 128 [ 93.365249][ T3304] loop2: unable to read partition table [ 93.429824][ T4643] netlink: 'syz.3.300': attribute type 3 has an invalid length. [ 93.435032][ T3304] loop2: partition table beyond EOD, truncated [ 93.520114][ T4647] loop4: detected capacity change from 0 to 128 [ 93.535380][ T4643] loop3: detected capacity change from 0 to 512 [ 93.567696][ T4643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.587284][ T4617] loop2: unable to read partition table [ 93.605722][ T4643] EXT4-fs (loop3): 1 truncate cleaned up [ 93.616227][ T4617] loop2: partition table beyond EOD, truncated [ 93.622617][ T4617] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 93.768916][ T4649] loop4: detected capacity change from 0 to 256 [ 93.777981][ T4662] netlink: 'syz.1.303': attribute type 3 has an invalid length. [ 93.799019][ T4662] loop1: detected capacity change from 0 to 512 [ 93.814843][ T4662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.835125][ T4668] loop2: detected capacity change from 0 to 128 [ 93.864304][ T4662] EXT4-fs (loop1): 1 truncate cleaned up [ 93.933115][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 94.056821][ T4683] loop4: detected capacity change from 0 to 2048 [ 94.086889][ T4684] loop2: detected capacity change from 0 to 2048 [ 94.159498][ T3304] loop4: unable to read partition table [ 94.166327][ T3304] loop4: partition table beyond EOD, truncated [ 94.258176][ T4683] loop4: unable to read partition table [ 94.264531][ T4683] loop4: partition table beyond EOD, truncated [ 94.270777][ T4683] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 94.291522][ T4684] loop2: unable to read partition table [ 94.297473][ T4684] loop2: partition table beyond EOD, truncated [ 94.303829][ T4684] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 94.354656][ T2995] loop4: unable to read partition table [ 94.363984][ T2995] loop4: partition table beyond EOD, truncated [ 94.392374][ T4703] netlink: 'syz.1.313': attribute type 3 has an invalid length. [ 94.448514][ T4703] loop1: detected capacity change from 0 to 512 [ 94.469545][ T2995] loop2: unable to read partition table [ 94.475797][ T4703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.480163][ T2995] loop2: partition table beyond EOD, truncated [ 94.506637][ T4703] EXT4-fs (loop1): 1 truncate cleaned up [ 94.517009][ T4711] netlink: 'syz.2.315': attribute type 3 has an invalid length. [ 94.569551][ T4711] loop2: detected capacity change from 0 to 512 [ 94.579098][ T4711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.592219][ T4713] loop4: detected capacity change from 0 to 128 [ 94.600730][ T4711] EXT4-fs (loop2): 1 truncate cleaned up [ 94.691312][ T4717] netlink: 'syz.4.318': attribute type 3 has an invalid length. [ 94.744544][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 94.744565][ T29] audit: type=1326 audit(1750527996.959:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 94.775315][ T29] audit: type=1326 audit(1750527996.959:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 94.799174][ T29] audit: type=1326 audit(1750527996.959:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 94.823056][ T29] audit: type=1326 audit(1750527996.959:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 94.847145][ T29] audit: type=1326 audit(1750527996.959:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 94.872642][ T29] audit: type=1326 audit(1750527996.959:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 94.899344][ T29] audit: type=1326 audit(1750527996.959:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85a08ee929 code=0x7ffc0000 [ 94.924546][ T29] audit: type=1326 audit(1750527996.959:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85a08ee963 code=0x7ffc0000 [ 94.950213][ T4717] loop4: detected capacity change from 0 to 512 [ 94.958602][ T4717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.975288][ T4717] EXT4-fs (loop4): 1 truncate cleaned up [ 94.983688][ T29] audit: type=1326 audit(1750527996.969:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85a08ed3df code=0x7ffc0000 [ 95.007346][ T29] audit: type=1326 audit(1750527996.969:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f85a08ee9b7 code=0x7ffc0000 [ 95.018750][ T4722] loop5: detected capacity change from 0 to 128 [ 95.112112][ T4722] bio_check_eod: 33200 callbacks suppressed [ 95.112130][ T4722] syz.5.320: attempt to access beyond end of device [ 95.112130][ T4722] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 95.295311][ T4725] SELinux: syz.5.321 (4725) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 95.318734][ T4729] loop3: detected capacity change from 0 to 1024 [ 95.326592][ T4729] EXT4-fs: Ignoring removed orlov option [ 95.421447][ T4741] netlink: 'syz.2.328': attribute type 3 has an invalid length. [ 95.462182][ T4741] loop2: detected capacity change from 0 to 512 [ 95.470390][ T4741] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.485064][ T4741] EXT4-fs (loop2): 1 truncate cleaned up [ 95.493236][ T4744] loop3: detected capacity change from 0 to 128 [ 95.715292][ T4756] loop4: detected capacity change from 0 to 128 [ 95.733594][ T4756] syz.4.332: attempt to access beyond end of device [ 95.733594][ T4756] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 95.809516][ T4759] netlink: 'syz.4.333': attribute type 3 has an invalid length. [ 95.844289][ T4759] loop4: detected capacity change from 0 to 512 [ 95.853910][ T4759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.886611][ T4759] EXT4-fs (loop4): 1 truncate cleaned up [ 96.104516][ T4764] SELinux: syz.1.335 (4764) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.137871][ T4770] loop4: detected capacity change from 0 to 1024 [ 96.193704][ T4770] EXT4-fs: Ignoring removed orlov option [ 96.198795][ T4774] loop1: detected capacity change from 0 to 128 [ 96.219888][ T4776] loop2: detected capacity change from 0 to 512 [ 96.287241][ T4776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.301124][ T4782] loop4: detected capacity change from 0 to 128 [ 96.314662][ T4776] EXT4-fs (loop2): 1 truncate cleaned up [ 96.464293][ T4791] loop4: detected capacity change from 0 to 128 [ 96.487090][ T4791] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.495049][ T4791] FAT-fs (loop4): Filesystem has been set read-only [ 96.539548][ T4791] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.587537][ T4791] syz.4.344: attempt to access beyond end of device [ 96.587537][ T4791] loop4: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 96.654072][ T4803] netlink: 96 bytes leftover after parsing attributes in process `syz.2.350'. [ 96.694305][ T4807] loop1: detected capacity change from 0 to 128 [ 96.787693][ T4814] loop1: detected capacity change from 0 to 2048 [ 96.825536][ T4818] loop2: detected capacity change from 0 to 2048 [ 96.941942][ T3509] loop2: unable to read partition table [ 96.959079][ T3304] loop1: unable to read partition table [ 96.965364][ T3509] loop2: partition table beyond EOD, truncated [ 96.988348][ T3304] loop1: partition table beyond EOD, truncated [ 97.027959][ T4818] loop2: unable to read partition table [ 97.036065][ T4818] loop2: partition table beyond EOD, truncated [ 97.044544][ T4818] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 97.131802][ T4814] loop1: unable to read partition table [ 97.149739][ T4814] loop1: partition table beyond EOD, truncated [ 97.157219][ T4814] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 97.265585][ T2995] loop2: unable to read partition table [ 97.271665][ T2995] loop2: partition table beyond EOD, truncated [ 97.355536][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 97.435091][ T4838] random: crng reseeded on system resumption [ 97.492030][ T4846] loop3: detected capacity change from 0 to 1024 [ 97.509491][ T4846] EXT4-fs: Ignoring removed orlov option [ 97.610310][ T4848] SELinux: syz.2.367 (4848) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 97.719638][ T4868] FAULT_INJECTION: forcing a failure. [ 97.719638][ T4868] name failslab, interval 1, probability 0, space 0, times 0 [ 97.733462][ T4868] CPU: 0 UID: 0 PID: 4868 Comm: syz.3.376 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 97.733521][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.733538][ T4868] Call Trace: [ 97.733546][ T4868] [ 97.733555][ T4868] __dump_stack+0x1d/0x30 [ 97.733583][ T4868] dump_stack_lvl+0xe8/0x140 [ 97.733658][ T4868] dump_stack+0x15/0x1b [ 97.733678][ T4868] should_fail_ex+0x265/0x280 [ 97.733715][ T4868] should_failslab+0x8c/0xb0 [ 97.733815][ T4868] kmem_cache_alloc_noprof+0x50/0x310 [ 97.733848][ T4868] ? security_inode_alloc+0x37/0x100 [ 97.733891][ T4868] security_inode_alloc+0x37/0x100 [ 97.733925][ T4868] inode_init_always_gfp+0x4b7/0x500 [ 97.733980][ T4868] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 97.734040][ T4868] alloc_inode+0x58/0x170 [ 97.734081][ T4868] new_inode+0x1d/0xe0 [ 97.734105][ T4868] shmem_get_inode+0x244/0x750 [ 97.734131][ T4868] __shmem_file_setup+0x113/0x210 [ 97.734210][ T4868] shmem_file_setup+0x3b/0x50 [ 97.734364][ T4868] __se_sys_memfd_create+0x2c3/0x590 [ 97.734414][ T4868] __x64_sys_memfd_create+0x31/0x40 [ 97.734512][ T4868] x64_sys_call+0x122f/0x2fb0 [ 97.734602][ T4868] do_syscall_64+0xd2/0x200 [ 97.734619][ T4868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.734646][ T4868] ? clear_bhb_loop+0x40/0x90 [ 97.734670][ T4868] ? clear_bhb_loop+0x40/0x90 [ 97.734736][ T4868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.734763][ T4868] RIP: 0033:0x7fc635a2e929 [ 97.734827][ T4868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.734845][ T4868] RSP: 002b:00007fc634096e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 97.734865][ T4868] RAX: ffffffffffffffda RBX: 000000000000050c RCX: 00007fc635a2e929 [ 97.734881][ T4868] RDX: 00007fc634096ef0 RSI: 0000000000000000 RDI: 00007fc635ab14cc [ 97.734896][ T4868] RBP: 0000200000000c40 R08: 00007fc634096bb7 R09: 00007fc634096e40 [ 97.734910][ T4868] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 97.734922][ T4868] R13: 00007fc634096ef0 R14: 00007fc634096eb0 R15: 0000200000000480 [ 97.734979][ T4868] [ 98.018241][ T4877] SELinux: syz.4.379 (4877) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 98.075129][ T4879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.380'. [ 98.084349][ T4879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 98.095464][ T4879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.380'. [ 98.404083][ T4900] SELinux: syz.3.388 (4900) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 98.625876][ T4912] loop3: detected capacity change from 0 to 128 [ 98.646570][ T4912] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.654772][ T4912] FAT-fs (loop3): Filesystem has been set read-only [ 98.662421][ T4912] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.670621][ T4912] syz.3.395: attempt to access beyond end of device [ 98.670621][ T4912] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 98.698925][ T4920] random: crng reseeded on system resumption [ 98.855510][ T4927] loop3: detected capacity change from 0 to 128 [ 98.857815][ T4928] loop1: detected capacity change from 0 to 128 [ 98.890916][ T4928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 98.899257][ T4928] FAT-fs (loop1): Filesystem has been set read-only [ 98.912071][ T4928] syz.1.398: attempt to access beyond end of device [ 98.912071][ T4928] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 98.933634][ T4928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 98.942404][ T4928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 98.961764][ T4928] syz.1.398: attempt to access beyond end of device [ 98.961764][ T4928] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.976712][ T4929] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 99.010962][ T4931] loop3: detected capacity change from 0 to 512 [ 99.021181][ T4929] syz.1.398: attempt to access beyond end of device [ 99.021181][ T4929] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 99.038037][ T4928] syz.1.398: attempt to access beyond end of device [ 99.038037][ T4928] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.056782][ T4931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.067382][ T4929] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 99.076867][ T4929] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 99.086232][ T4928] syz.1.398: attempt to access beyond end of device [ 99.086232][ T4928] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.102280][ T4931] EXT4-fs (loop3): 1 truncate cleaned up [ 99.133838][ T4929] syz.1.398: attempt to access beyond end of device [ 99.133838][ T4929] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.484610][ T4946] loop4: detected capacity change from 0 to 128 [ 99.589116][ T4950] netlink: 'syz.3.408': attribute type 3 has an invalid length. [ 99.634792][ T4950] loop3: detected capacity change from 0 to 512 [ 99.654423][ T4950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.714807][ T4950] EXT4-fs (loop3): 1 truncate cleaned up [ 99.714889][ T4952] loop4: detected capacity change from 0 to 2048 [ 99.760514][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 99.760607][ T29] audit: type=1326 audit(1750528001.979:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.3.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc635a2e929 code=0x7ffc0000 [ 99.852539][ T29] audit: type=1326 audit(1750528002.069:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734526e929 code=0x7ffc0000 [ 99.856247][ T4959] loop2: detected capacity change from 0 to 764 [ 99.876324][ T29] audit: type=1326 audit(1750528002.069:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734526e929 code=0x7ffc0000 [ 99.907656][ T29] audit: type=1326 audit(1750528002.069:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f734526e929 code=0x7ffc0000 [ 99.933762][ T29] audit: type=1326 audit(1750528002.069:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f734526e963 code=0x7ffc0000 [ 99.935567][ T3507] loop4: unable to read partition table [ 99.971505][ T29] audit: type=1326 audit(1750528002.079:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f734526d3df code=0x7ffc0000 [ 100.003251][ T29] audit: type=1326 audit(1750528002.079:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f734526e9b7 code=0x7ffc0000 [ 100.007539][ T3507] loop4: partition table beyond EOD, [ 100.029023][ T29] audit: type=1326 audit(1750528002.079:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f734526d290 code=0x7ffc0000 [ 100.029064][ T29] audit: type=1326 audit(1750528002.079:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f734526e52b code=0x7ffc0000 [ 100.035070][ T3507] truncated [ 100.089632][ T4959] iso9660: Unknown parameter '000000000000000000000110177777777777777777777701777777777777777777777' [ 100.090752][ T29] audit: type=1326 audit(1750528002.309:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f734526d58a code=0x7ffc0000 [ 100.146850][ T4959] loop2: detected capacity change from 0 to 1024 [ 100.165940][ T4952] loop4: unable to read partition table [ 100.171926][ T4952] loop4: partition table beyond EOD, truncated [ 100.178389][ T4952] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 100.248096][ T4959] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 100.357486][ T2995] loop4: unable to read partition table [ 100.376897][ T3319] EXT4-fs unmount: 29 callbacks suppressed [ 100.376936][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.378946][ T2995] loop4: partition table beyond EOD, truncated [ 100.492908][ T4980] loop2: detected capacity change from 0 to 128 [ 100.539489][ T4978] SELinux: syz.1.417 (4978) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 100.699213][ T4994] loop1: detected capacity change from 0 to 128 [ 100.709311][ T4994] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.711900][ T4986] loop2: detected capacity change from 0 to 2048 [ 100.717864][ T4994] FAT-fs (loop1): Filesystem has been set read-only [ 100.718281][ T4994] bio_check_eod: 8068 callbacks suppressed [ 100.718380][ T4994] syz.1.423: attempt to access beyond end of device [ 100.718380][ T4994] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 100.753631][ T4994] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.762163][ T4994] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.772796][ T4995] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.781246][ T4995] syz.1.423: attempt to access beyond end of device [ 100.781246][ T4995] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 100.803268][ T4994] syz.1.423: attempt to access beyond end of device [ 100.803268][ T4994] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.819726][ T4994] syz.1.423: attempt to access beyond end of device [ 100.819726][ T4994] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.874471][ T4995] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.882832][ T4995] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 100.903617][ T4986] loop2: unable to read partition table [ 100.909750][ T4994] syz.1.423: attempt to access beyond end of device [ 100.909750][ T4994] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.926036][ T4986] loop2: partition table beyond EOD, truncated [ 100.933447][ T4986] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 100.947547][ T4995] syz.1.423: attempt to access beyond end of device [ 100.947547][ T4995] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 100.985935][ T4994] syz.1.423: attempt to access beyond end of device [ 100.985935][ T4994] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.084968][ T4995] syz.1.423: attempt to access beyond end of device [ 101.084968][ T4995] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.181904][ T2995] loop2: unable to read partition table [ 101.195404][ T4994] syz.1.423: attempt to access beyond end of device [ 101.195404][ T4994] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.211590][ T2995] loop2: partition table beyond EOD, truncated [ 101.220015][ T4995] syz.1.423: attempt to access beyond end of device [ 101.220015][ T4995] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 101.334859][ T5002] SELinux: syz.2.426 (5002) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.434469][ T5006] SELinux: syz.3.428 (5006) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.465381][ T5008] loop4: detected capacity change from 0 to 764 [ 101.474608][ T5008] iso9660: Unknown parameter '000000000000000000000110177777777777777777777701777777777777777777777' [ 101.496332][ T5010] loop2: detected capacity change from 0 to 512 [ 101.504561][ T5010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.542830][ T5010] EXT4-fs (loop2): 1 truncate cleaned up [ 101.548996][ T5010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.556043][ T5013] netlink: 'syz.3.430': attribute type 3 has an invalid length. [ 101.597368][ T5013] loop3: detected capacity change from 0 to 512 [ 101.606288][ T5010] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.657660][ T5013] journal_path: Non-blockdev passed as './bus' [ 101.664291][ T5013] EXT4-fs: error: could not find journal device path [ 101.876453][ T5024] loop1: detected capacity change from 0 to 2048 [ 101.897381][ T5032] loop5: detected capacity change from 0 to 1024 [ 101.912467][ T5032] EXT4-fs: Ignoring removed orlov option [ 101.934878][ T5032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.980474][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.098549][ T3304] loop1: unable to read partition table [ 102.106103][ T3304] loop1: partition table beyond EOD, truncated [ 102.162570][ T5024] loop1: unable to read partition table [ 102.170333][ T5024] loop1: partition table beyond EOD, truncated [ 102.177729][ T5024] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 102.270232][ T5042] loop4: detected capacity change from 0 to 2048 [ 102.508032][ T5042] loop4: unable to read partition table [ 102.533466][ T5042] loop4: partition table beyond EOD, truncated [ 102.540194][ T5042] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 102.777194][ T2995] loop1: unable to read partition table [ 102.789561][ T2995] loop1: partition table beyond EOD, truncated [ 102.796732][ T5060] loop2: detected capacity change from 0 to 512 [ 102.807790][ T5060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.831170][ T5060] EXT4-fs (loop2): 1 truncate cleaned up [ 102.856718][ T5060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.880140][ T5060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.004867][ T5063] loop4: detected capacity change from 0 to 764 [ 103.062673][ T5063] iso9660: Unknown parameter '000000000000000000000110177777777777777777777701777777777777777777777' [ 103.086194][ T5070] macvtap0: entered promiscuous mode [ 103.099593][ T5070] macvtap0: left promiscuous mode [ 103.366212][ T5089] loop4: detected capacity change from 0 to 512 [ 103.422523][ T5089] EXT4-fs: dax option not supported [ 103.823263][ T5116] loop4: detected capacity change from 0 to 128 [ 103.835825][ T5116] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 104.019166][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 104.101787][ T5125] loop5: detected capacity change from 0 to 512 [ 104.114816][ T5125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.216759][ T5125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.310154][ T5125] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.364738][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.551200][ T5142] loop1: detected capacity change from 0 to 512 [ 104.614350][ T5142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.650889][ T5142] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.810286][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.846626][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 104.846645][ T29] audit: type=1400 audit(1750528007.069:2800): avc: denied { read } for pid=5159 comm="syz.4.479" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.878654][ T29] audit: type=1400 audit(1750528007.069:2801): avc: denied { open } for pid=5159 comm="syz.4.479" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.139674][ T5168] No control pipe specified [ 105.151759][ T29] audit: type=1400 audit(1750528007.359:2802): avc: denied { bind } for pid=5166 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.172190][ T29] audit: type=1400 audit(1750528007.359:2803): avc: denied { node_bind } for pid=5166 comm="syz.1.480" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 105.196263][ T29] audit: type=1400 audit(1750528007.369:2804): avc: denied { connect } for pid=5166 comm="syz.1.480" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.490312][ T5176] xt_hashlimit: size too large, truncated to 1048576 [ 105.606052][ T5181] net_ratelimit: 10 callbacks suppressed [ 105.606070][ T5181] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.666085][ T29] audit: type=1400 audit(1750528007.889:2805): avc: denied { read write } for pid=5180 comm="syz.2.485" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.691609][ T29] audit: type=1400 audit(1750528007.889:2806): avc: denied { open } for pid=5180 comm="syz.2.485" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.720192][ T5181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.752346][ T5181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.771035][ T29] audit: type=1400 audit(1750528007.939:2807): avc: denied { ioctl } for pid=5180 comm="syz.2.485" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.857882][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 105.909790][ T5187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.938091][ T5187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.032122][ T29] audit: type=1400 audit(1750528008.249:2808): avc: denied { create } for pid=5194 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.063778][ T29] audit: type=1400 audit(1750528008.279:2809): avc: denied { name_bind } for pid=5196 comm="syz.5.492" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 106.138286][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 106.472212][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 106.915924][ T5224] loop5: detected capacity change from 0 to 256 [ 106.923552][ T5224] vfat: Unknown parameter 'shor†name' [ 107.531703][ T5227] random: crng reseeded on system resumption [ 107.822914][ T5231] loop2: detected capacity change from 0 to 128 [ 107.884201][ T5231] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.925240][ T5231] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.030788][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.043147][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.072300][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.108051][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 108.117814][ T5247] loop4: detected capacity change from 0 to 512 [ 108.148918][ T5247] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.160971][ T5249] bond0: (slave bond_slave_1): Releasing backup interface [ 108.173758][ T5247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 108.186699][ T5247] System zones: 1-12 [ 108.191455][ T5247] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.508: corrupted in-inode xattr: overlapping e_value [ 108.207487][ T5247] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.508: couldn't read orphan inode 15 (err -117) [ 108.221549][ T5247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.239927][ T5247] futex_wake_op: syz.4.508 tries to shift op by -1; fix this program [ 108.271327][ T5256] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 108.271327][ T5256] The task syz.5.510 (5256) triggered the difference, watch for misbehavior. [ 109.542041][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.583101][ T5267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.513'. [ 109.669345][ T5280] loop3: detected capacity change from 0 to 128 [ 110.492206][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 110.492223][ T29] audit: type=1400 audit(1750528012.679:2820): avc: denied { connect } for pid=5279 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.525603][ T5283] usb usb1: usbfs: process 5283 (syz.3.518) did not claim interface 1 before use [ 110.583134][ T5289] loop5: detected capacity change from 0 to 128 [ 110.609990][ T5289] EXT4-fs: Ignoring removed nobh option [ 110.634563][ T29] audit: type=1400 audit(1750528012.739:2821): avc: denied { append } for pid=5279 comm="syz.3.518" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.709442][ T5289] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.713290][ T5296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.737503][ T5296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.748770][ T5289] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.799389][ T5300] loop1: detected capacity change from 0 to 2048 [ 110.843118][ T29] audit: type=1400 audit(1750528013.069:2822): avc: denied { create } for pid=5287 comm="syz.5.519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.885788][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 110.920666][ T29] audit: type=1400 audit(1750528013.119:2823): avc: denied { write open } for pid=5287 comm="syz.5.519" path="/62/mnt/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.055257][ T5310] loop1: detected capacity change from 0 to 256 [ 111.075942][ T5310] vfat: Unknown parameter 'shor†name' [ 111.423367][ T29] audit: type=1400 audit(1750528013.639:2824): avc: denied { rename } for pid=5287 comm="syz.5.519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.747083][ T5316] random: crng reseeded on system resumption [ 111.861079][ T29] audit: type=1400 audit(1750528014.039:2825): avc: denied { write } for pid=5317 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.111531][ T3562] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.146203][ T5320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 112.357057][ T29] audit: type=1400 audit(1750528014.569:2826): avc: denied { write } for pid=5327 comm="syz.3.534" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.954478][ T3388] IPVS: starting estimator thread 0... [ 113.132412][ T5335] IPVS: using max 2256 ests per chain, 112800 per kthread [ 113.593192][ T5356] program syz.1.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.620136][ T5356] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.641012][ T29] audit: type=1400 audit(1750528015.849:2827): avc: denied { create } for pid=5352 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.778524][ T29] audit: type=1400 audit(1750528015.999:2828): avc: denied { ioctl } for pid=5341 comm="syz.2.536" path="socket:[10314]" dev="sockfs" ino=10314 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.398782][ T5380] loop1: detected capacity change from 0 to 128 [ 114.487079][ T51] bio_check_eod: 2696 callbacks suppressed [ 114.487098][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.487098][ T51] loop1: rw=1, sector=129, nr_sectors = 8 limit=128 [ 114.497198][ T29] audit: type=1400 audit(1750528016.719:2829): avc: denied { write } for pid=5381 comm="syz.5.554" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.520952][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.520952][ T51] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 114.548427][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.548427][ T51] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 114.582237][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.582237][ T51] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 114.584452][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.558'. [ 114.596098][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.596098][ T51] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 114.618672][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.618672][ T51] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 114.639630][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.639630][ T51] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 114.654720][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.654720][ T51] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 114.668395][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.668395][ T51] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 114.683198][ T51] kworker/u8:3: attempt to access beyond end of device [ 114.683198][ T51] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 115.005371][ T5400] loop1: detected capacity change from 0 to 512 [ 115.147192][ T5404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.183064][ T5404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.256799][ T5400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.270167][ T5400] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.311725][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 116.311741][ T29] audit: type=1400 audit(1750528018.519:2831): avc: denied { read append } for pid=5395 comm="syz.1.561" path="/122/bus/blkio.bfq.io_service_time_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.793302][ T5431] syzkaller1: entered promiscuous mode [ 116.799003][ T5431] syzkaller1: entered allmulticast mode [ 116.814400][ T5434] 9pnet_fd: Insufficient options for proto=fd [ 116.873874][ T29] audit: type=1400 audit(1750528019.089:2832): avc: denied { read write } for pid=5430 comm="syz.4.572" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 116.899234][ T29] audit: type=1400 audit(1750528019.089:2833): avc: denied { open } for pid=5430 comm="syz.4.572" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 116.987880][ T5440] loop2: detected capacity change from 0 to 512 [ 117.013937][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.049656][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.056222][ T29] audit: type=1400 audit(1750528019.259:2834): avc: denied { create } for pid=5443 comm="syz.5.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.078061][ T29] audit: type=1400 audit(1750528019.259:2835): avc: denied { write } for pid=5443 comm="syz.5.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.099687][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.109063][ T5448] loop4: detected capacity change from 0 to 256 [ 117.116359][ T5448] vfat: Unknown parameter 'shor†name' [ 117.141136][ T5440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.167874][ T5440] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.236202][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.336291][ T5460] random: crng reseeded on system resumption [ 117.720616][ T3388] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.738114][ T3388] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.930033][ T5474] loop3: detected capacity change from 0 to 128 [ 117.943274][ T5474] EXT4-fs: Ignoring removed nobh option [ 117.957164][ T5474] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.970243][ T5474] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.085706][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.096844][ T5478] loop5: detected capacity change from 0 to 512 [ 118.098485][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.139135][ T5478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.161835][ T5478] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.172066][ T29] audit: type=1400 audit(1750528020.379:2836): avc: denied { ioctl } for pid=5476 comm="syz.4.590" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.302578][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.449071][ T5488] loop1: detected capacity change from 0 to 2048 [ 118.533501][ T5488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.903584][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.178902][ T5499] loop3: detected capacity change from 0 to 2048 [ 119.209266][ T5506] loop4: detected capacity change from 0 to 256 [ 119.217062][ T5506] vfat: Unknown parameter 'shor†name' [ 119.226511][ T29] audit: type=1400 audit(1750528021.449:2837): avc: denied { listen } for pid=5496 comm="syz.2.598" lport=47233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.253567][ T29] audit: type=1400 audit(1750528021.469:2838): avc: denied { accept } for pid=5496 comm="syz.2.598" lport=47233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.328001][ T5515] loop3: detected capacity change from 0 to 512 [ 119.354162][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.380397][ T5515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.395695][ T5515] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.424556][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.468911][ T29] audit: type=1400 audit(1750528021.689:2839): avc: denied { read } for pid=5522 comm="syz.3.606" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.559750][ T5525] random: crng reseeded on system resumption [ 120.251781][ T5528] syz.3.607 uses obsolete (PF_INET,SOCK_PACKET) [ 120.484798][ T5550] loop1: detected capacity change from 0 to 512 [ 120.541643][ T5550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.556421][ T5556] tipc: Started in network mode [ 120.561463][ T5556] tipc: Node identity 72ecbcf7023c, cluster identity 4711 [ 120.568992][ T5556] tipc: Enabled bearer , priority 0 [ 120.583812][ T5550] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.616763][ T5556] syzkaller0: entered promiscuous mode [ 120.622330][ T5556] syzkaller0: entered allmulticast mode [ 120.628629][ T5556] tipc: Resetting bearer [ 120.635609][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.644902][ T5555] tipc: Resetting bearer [ 120.663058][ T5565] loop1: detected capacity change from 0 to 256 [ 120.698342][ T5555] tipc: Disabling bearer [ 120.810142][ T5565] vfat: Unknown parameter 'shor†name' [ 121.141487][ T5571] random: crng reseeded on system resumption [ 121.640796][ T5588] loop1: detected capacity change from 0 to 512 [ 121.674364][ T5591] batadv_slave_0: entered allmulticast mode [ 121.681558][ T5589] batadv_slave_0: left allmulticast mode [ 121.694799][ T5588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.712278][ T5588] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.787986][ T5606] syzkaller1: entered promiscuous mode [ 121.793556][ T5606] syzkaller1: entered allmulticast mode [ 121.827658][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.845201][ T5610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.641'. [ 121.956935][ T5614] loop1: detected capacity change from 0 to 2048 [ 122.003072][ T29] audit: type=1400 audit(1750528024.199:2840): avc: denied { create } for pid=5613 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.022624][ T29] audit: type=1400 audit(1750528024.199:2841): avc: denied { connect } for pid=5613 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.042084][ T29] audit: type=1400 audit(1750528024.199:2842): avc: denied { setopt } for pid=5613 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.061481][ T29] audit: type=1400 audit(1750528024.199:2843): avc: denied { bind } for pid=5613 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.081038][ T29] audit: type=1400 audit(1750528024.199:2844): avc: denied { write } for pid=5613 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.123572][ T5617] loop3: detected capacity change from 0 to 256 [ 122.156687][ T5617] vfat: Unknown parameter 'shor†name' [ 122.446379][ T5618] random: crng reseeded on system resumption [ 122.807970][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.828775][ T29] audit: type=1400 audit(1750528025.049:2845): avc: denied { read } for pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 122.829211][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.889409][ T5642] loop5: detected capacity change from 0 to 256 [ 122.910718][ T29] audit: type=1400 audit(1750528025.129:2846): avc: denied { watch watch_reads } for pid=5641 comm="syz.5.654" path="/93/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 122.943066][ T29] audit: type=1400 audit(1750528025.159:2847): avc: denied { unmount } for pid=5641 comm="syz.5.654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.146353][ T29] audit: type=1400 audit(1750528025.369:2848): avc: denied { create } for pid=5644 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.166110][ T29] audit: type=1400 audit(1750528025.369:2849): avc: denied { connect } for pid=5644 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.859174][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.881592][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.070536][ T5702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.666'. [ 124.373948][ T5721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.383395][ T5721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.619277][ T5739] loop4: detected capacity change from 0 to 512 [ 124.633499][ T5739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.647533][ T5739] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.694251][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.719501][ T5742] loop2: detected capacity change from 0 to 512 [ 124.785173][ T5742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.798122][ T5742] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.679137][ T5759] loop1: detected capacity change from 0 to 512 [ 125.715372][ T5759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.740723][ T5759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 125.761468][ T5759] System zones: 1-12 [ 125.773913][ T5759] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.688: corrupted in-inode xattr: overlapping e_value [ 125.806569][ T5759] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.688: couldn't read orphan inode 15 (err -117) [ 125.833576][ T5759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.863263][ T5759] futex_wake_op: syz.1.688 tries to shift op by -1; fix this program [ 126.020423][ T5767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.029279][ T5767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.456402][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.485136][ T5773] loop2: detected capacity change from 0 to 512 [ 126.542727][ T5773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.558577][ T5773] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.570218][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.600971][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.690854][ T5791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.700'. [ 127.028783][ T5804] loop3: detected capacity change from 0 to 512 [ 127.040939][ T5804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.053678][ T5804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 127.061719][ T5804] System zones: 1-12 [ 127.070780][ T5804] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.705: corrupted in-inode xattr: overlapping e_value [ 127.086228][ T5804] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.705: couldn't read orphan inode 15 (err -117) [ 127.098854][ T5804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.115552][ T5804] futex_wake_op: syz.3.705 tries to shift op by -1; fix this program [ 127.228261][ T5811] loop2: detected capacity change from 0 to 512 [ 127.244560][ T5811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.257748][ T5811] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.689007][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.707276][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.732200][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.824432][ T5843] loop2: detected capacity change from 0 to 512 [ 127.831355][ T5843] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.922225][ T5843] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 127.930908][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.943186][ T5843] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.949895][ T5843] __quota_error: 4 callbacks suppressed [ 127.949912][ T5843] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 128.010383][ T5843] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.040957][ T5843] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 128.059573][ T5843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.721: bg 0: block 40: padding at end of block bitmap is not set [ 128.074954][ T5843] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 128.098253][ T5843] EXT4-fs (loop2): 1 truncate cleaned up [ 128.105059][ T5843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.125358][ T5843] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.721: corrupted xattr block 31: invalid header [ 128.141013][ T5843] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 128.150365][ T5843] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.721: corrupted xattr block 31: invalid header [ 128.171969][ T5843] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 128.188740][ T5843] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.721: bad symlink. [ 128.192051][ T29] audit: type=1400 audit(1750528030.409:2854): avc: denied { read } for pid=5842 comm="syz.2.721" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 128.301858][ T29] audit: type=1400 audit(1750528030.499:2855): avc: denied { ioctl } for pid=5853 comm="syz.3.725" path="socket:[11929]" dev="sockfs" ino=11929 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 128.426674][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.629713][ T5876] loop1: detected capacity change from 0 to 512 [ 128.683920][ T5876] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.713033][ T5876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 128.730177][ T5876] System zones: 1-12 [ 128.737092][ T5876] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.733: corrupted in-inode xattr: overlapping e_value [ 128.743188][ T5890] netlink: 32 bytes leftover after parsing attributes in process `syz.4.739'. [ 128.751629][ T5876] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.733: couldn't read orphan inode 15 (err -117) [ 128.783778][ T5876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.837258][ T5876] futex_wake_op: syz.1.733 tries to shift op by -1; fix this program [ 128.965687][ T5904] loop4: detected capacity change from 0 to 2048 [ 128.975829][ T29] audit: type=1400 audit(1750528031.199:2856): avc: denied { write } for pid=5911 comm="syz.2.749" name="mcfilter" dev="proc" ino=4026532888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 129.589173][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.604914][ T3304] loop4: p1 < > p4 [ 129.610534][ T3304] loop4: p4 size 8388608 extends beyond EOD, truncated [ 129.637018][ T5904] loop4: p1 < > p4 [ 129.661491][ T5904] loop4: p4 size 8388608 extends beyond EOD, truncated [ 129.776621][ T2995] loop4: p1 < > p4 [ 129.797926][ T2995] loop4: p4 size 8388608 extends beyond EOD, truncated [ 129.844953][ T5921] loop1: detected capacity change from 0 to 512 [ 129.874986][ T5921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.913648][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.923794][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 129.938245][ T5921] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.961288][ T5929] netlink: 14 bytes leftover after parsing attributes in process `syz.3.754'. [ 129.981127][ T5245] udevd[5245]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 129.981160][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 130.009607][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 130.020874][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 130.031098][ T5929] hsr_slave_0: left promiscuous mode [ 130.052261][ T5929] hsr_slave_1: left promiscuous mode [ 130.058021][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.078551][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.149092][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.441738][ T29] audit: type=1400 audit(1750528032.659:2857): avc: denied { create } for pid=5962 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.515587][ T5964] tmpfs: Unknown parameter 'quota' [ 131.097252][ T1036] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 131.101120][ T5987] loop3: detected capacity change from 0 to 256 [ 131.114233][ T1036] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.165453][ T5990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.175542][ T5990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.339008][ T5998] loop2: detected capacity change from 0 to 512 [ 131.360005][ T6000] loop4: detected capacity change from 0 to 2048 [ 131.372707][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.385706][ T5998] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.411409][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.509956][ T3388] kernel write not supported for file /snd/seq (pid: 3388 comm: kworker/1:3) [ 131.529613][ T29] audit: type=1400 audit(1750528033.749:2858): avc: denied { bind } for pid=6013 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.563666][ T6017] loop2: detected capacity change from 0 to 256 [ 131.646756][ T6021] loop4: detected capacity change from 0 to 512 [ 131.659223][ T6021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.670688][ T6021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 131.679895][ T6021] System zones: 1-12 [ 131.684196][ T6021] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.788: corrupted in-inode xattr: overlapping e_value [ 131.699502][ T6021] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.788: couldn't read orphan inode 15 (err -117) [ 131.712888][ T6021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.727830][ T6021] futex_wake_op: syz.4.788 tries to shift op by -1; fix this program [ 132.187261][ T6034] loop2: detected capacity change from 0 to 512 [ 132.275605][ T6034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.315592][ T6034] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.416893][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.474301][ T29] audit: type=1400 audit(1750528034.699:2859): avc: denied { write } for pid=6044 comm="syz.2.797" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 132.547728][ T6045] 9pnet_fd: Insufficient options for proto=fd [ 132.566369][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.610200][ T29] audit: type=1400 audit(1750528034.829:2860): avc: denied { watch watch_reads } for pid=6050 comm="syz.5.799" path="/125" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 132.616792][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.663553][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.697399][ T29] audit: type=1400 audit(1750528034.879:2861): avc: denied { name_bind } for pid=6056 comm="syz.1.803" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 132.760463][ T6067] loop2: detected capacity change from 0 to 512 [ 132.814103][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.834520][ T6082] 9pnet_fd: Insufficient options for proto=fd [ 132.868817][ T6067] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.892185][ T6074] futex_wake_op: syz.5.810 tries to shift op by -1; fix this program [ 132.963873][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.980635][ T6088] loop3: detected capacity change from 0 to 256 [ 133.034650][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.054071][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.510533][ T6099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.820'. [ 133.679141][ T6110] 9pnet_fd: Insufficient options for proto=fd [ 134.054734][ T6124] loop1: detected capacity change from 0 to 512 [ 134.067160][ T6124] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.093580][ T6124] EXT4-fs (loop1): 1 orphan inode deleted [ 134.099413][ T6124] EXT4-fs (loop1): 1 truncate cleaned up [ 134.106139][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.125007][ T29] audit: type=1400 audit(1750528036.109:2862): avc: denied { create } for pid=6118 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.145175][ T29] audit: type=1400 audit(1750528036.289:2863): avc: denied { read } for pid=6118 comm="syz.5.828" path="socket:[12334]" dev="sockfs" ino=12334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.222631][ T6122] loop2: detected capacity change from 0 to 512 [ 134.392185][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.436538][ T29] audit: type=1400 audit(1750528036.579:2864): avc: denied { connect } for pid=6128 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.464639][ T6122] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.617917][ T6139] loop3: detected capacity change from 0 to 512 [ 134.626444][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.635637][ T6139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.683810][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.693243][ T6139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 134.720483][ T6139] System zones: 1-12 [ 134.740483][ T6139] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.835: corrupted in-inode xattr: overlapping e_value [ 134.776885][ T6143] 9pnet_fd: Insufficient options for proto=fd [ 134.803273][ T6139] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.835: couldn't read orphan inode 15 (err -117) [ 134.875815][ T6139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.923931][ T6139] futex_wake_op: syz.3.835 tries to shift op by -1; fix this program [ 135.055792][ T6153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.833'. [ 135.203387][ T6159] loop4: detected capacity change from 0 to 1024 [ 135.211224][ T6159] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.266625][ T6159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.605858][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.668045][ T6174] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 135.792614][ T6177] netlink: 14 bytes leftover after parsing attributes in process `syz.3.845'. [ 135.827238][ T29] audit: type=1400 audit(1750528037.989:2865): avc: denied { mount } for pid=6158 comm="syz.4.840" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.224200][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.313455][ T6188] 9pnet_fd: Insufficient options for proto=fd [ 136.349569][ T6194] loop2: detected capacity change from 0 to 256 [ 136.382336][ T6194] vfat: Unknown parameter 'shor†name' [ 136.485567][ T6203] loop3: detected capacity change from 0 to 128 [ 136.509478][ T6203] EXT4-fs: test_dummy_encryption option not supported [ 136.559975][ T6207] loop1: detected capacity change from 0 to 512 [ 136.626801][ T6208] random: crng reseeded on system resumption [ 136.639442][ T6207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.646733][ T6207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.666762][ T6207] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 137.172679][ T6207] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 137.233722][ T6207] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 137.245934][ T6207] EXT4-fs (loop1): 1 truncate cleaned up [ 137.268568][ T6207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.412116][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.426555][ T6218] netlink: 14 bytes leftover after parsing attributes in process `syz.3.858'. [ 137.463422][ T3388] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 137.475273][ T3388] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.545775][ T6233] 9pnet_fd: Insufficient options for proto=fd [ 137.622440][ T6241] loop3: detected capacity change from 0 to 1024 [ 137.643327][ T6245] loop2: detected capacity change from 0 to 256 [ 137.650905][ T6241] EXT4-fs: Ignoring removed i_version option [ 137.657945][ T6245] vfat: Unknown parameter 'shor†name' [ 137.669340][ T6241] ext4: Unknown parameter 'smackfsroot' [ 137.755263][ T6249] Illegal XDP return value 1075513386 on prog (id 369) dev syz_tun, expect packet loss! [ 137.779734][ T29] audit: type=1400 audit(1750528039.999:2866): avc: denied { connect } for pid=6248 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.799750][ T29] audit: type=1400 audit(1750528039.999:2867): avc: denied { setopt } for pid=6248 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.819648][ T29] audit: type=1400 audit(1750528039.999:2868): avc: denied { bind } for pid=6248 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.891366][ T6253] random: crng reseeded on system resumption [ 138.100070][ T6259] netlink: 14 bytes leftover after parsing attributes in process `syz.1.874'. [ 138.154022][ T6259] hsr_slave_0: left promiscuous mode [ 138.161820][ T6259] hsr_slave_1: left promiscuous mode [ 138.257135][ T29] audit: type=1400 audit(1750528040.479:2869): avc: denied { create } for pid=6264 comm="syz.5.876" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.279767][ T29] audit: type=1400 audit(1750528040.499:2870): avc: denied { write } for pid=6264 comm="syz.5.876" name="file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.302618][ T29] audit: type=1400 audit(1750528040.499:2871): avc: denied { open } for pid=6264 comm="syz.5.876" path="/137/file0" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.892392][ T6310] netlink: 'syz.1.884': attribute type 275 has an invalid length. [ 139.346533][ T6321] loop2: detected capacity change from 0 to 256 [ 139.357626][ T6321] vfat: Unknown parameter 'shor†name' [ 139.619572][ T6324] random: crng reseeded on system resumption [ 139.747153][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 139.747169][ T29] audit: type=1400 audit(1750528041.969:2879): avc: denied { getopt } for pid=6327 comm="syz.5.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.025618][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.053902][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.054882][ T6343] netlink: 596 bytes leftover after parsing attributes in process `syz.4.901'. [ 140.074577][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.083514][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.093198][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.102497][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.111316][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.120334][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.129297][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.138464][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.148126][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.157303][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.904'. [ 140.219862][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.232826][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.275618][ T6361] loop1: detected capacity change from 0 to 128 [ 140.427823][ T6364] bio_check_eod: 104 callbacks suppressed [ 140.427841][ T6364] syz.1.911: attempt to access beyond end of device [ 140.427841][ T6364] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 140.540216][ T6361] ================================================================== [ 140.548691][ T6361] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 140.556743][ T6361] [ 140.559097][ T6361] write to 0xffff888119447214 of 4 bytes by task 6362 on cpu 0: [ 140.566773][ T6361] xas_set_mark+0x12b/0x140 [ 140.571337][ T6361] tag_pages_for_writeback+0xc2/0x290 [ 140.576763][ T6361] writeback_iter+0x340/0x820 [ 140.581497][ T6361] mpage_writepages+0x87/0x1250 [ 140.586384][ T6361] fat_writepages+0x24/0x30 [ 140.590937][ T6361] do_writepages+0x1c6/0x310 [ 140.595573][ T6361] file_write_and_wait_range+0x156/0x2c0 [ 140.601268][ T6361] __generic_file_fsync+0x46/0x140 [ 140.606440][ T6361] fat_file_fsync+0x49/0x100 [ 140.611081][ T6361] vfs_fsync_range+0x10d/0x130 [ 140.615895][ T6361] generic_file_write_iter+0x1b8/0x2f0 [ 140.621487][ T6361] iter_file_splice_write+0x5f2/0x970 [ 140.626896][ T6361] direct_splice_actor+0x156/0x2a0 [ 140.632065][ T6361] splice_direct_to_actor+0x312/0x680 [ 140.637490][ T6361] do_splice_direct+0xda/0x150 [ 140.642405][ T6361] do_sendfile+0x380/0x650 [ 140.646959][ T6361] __x64_sys_sendfile64+0x105/0x150 [ 140.652205][ T6361] x64_sys_call+0xb39/0x2fb0 [ 140.656858][ T6361] do_syscall_64+0xd2/0x200 [ 140.661399][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.667416][ T6361] [ 140.669767][ T6361] read to 0xffff888119447214 of 4 bytes by task 6361 on cpu 1: [ 140.677345][ T6361] file_write_and_wait_range+0x10e/0x2c0 [ 140.683014][ T6361] __generic_file_fsync+0x46/0x140 [ 140.688154][ T6361] fat_file_fsync+0x49/0x100 [ 140.692791][ T6361] vfs_fsync_range+0x10d/0x130 [ 140.697603][ T6361] generic_file_write_iter+0x1b8/0x2f0 [ 140.703090][ T6361] iter_file_splice_write+0x5f2/0x970 [ 140.708512][ T6361] direct_splice_actor+0x156/0x2a0 [ 140.713653][ T6361] splice_direct_to_actor+0x312/0x680 [ 140.719055][ T6361] do_splice_direct+0xda/0x150 [ 140.723903][ T6361] do_sendfile+0x380/0x650 [ 140.728348][ T6361] __x64_sys_sendfile64+0x105/0x150 [ 140.733569][ T6361] x64_sys_call+0xb39/0x2fb0 [ 140.738178][ T6361] do_syscall_64+0xd2/0x200 [ 140.742694][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.748605][ T6361] [ 140.750943][ T6361] value changed: 0x02000021 -> 0x04000021 [ 140.756673][ T6361] [ 140.759005][ T6361] Reported by Kernel Concurrency Sanitizer on: [ 140.765169][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.1.911 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 140.777511][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.787582][ T6361] ================================================================== [ 143.422214][ T6323] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec [ 145.982160][ T3369] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 149.662125][ T3369] page_pool_release_retry() stalled pool shutdown: id 58, 1 inflight 60 sec