last executing test programs: 9.517558571s ago: executing program 0 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x4000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x400, 0xffffffff, 0x3d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010100, @multicast2, 0xff000000, 0x0, 'nr0\x00', 'pimreg\x00', {}, {}, 0xe9, 0x3, 0x28}, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {0x122}, [@common=@inet=@hashlimit2={{0x150}, {'macsec0\x00', {0x1, 0xe0b6, 0x54, 0x40f, 0xf, 0x1000, 0x1000, 0x78}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) 8.594760819s ago: executing program 0 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file0\x00', 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x42000000) 4.859040709s ago: executing program 2 (id=815): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r3], 0x4) 4.80116538s ago: executing program 2 (id=816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "60e22bf05d254c09826cc0d206a3e539"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) 4.764389111s ago: executing program 2 (id=817): syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x2c}}, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x2, "8a79038df081496d042092d76c872600", 0x3, 0x1, 0x85}, 0x3c) 4.738703721s ago: executing program 2 (id=818): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0xfffffffc, 0x8}, 0x70bd2a, 0x3500, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.361158888s ago: executing program 4 (id=822): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x220c084, &(0x7f0000000880)=ANY=[], 0x9, 0x224, &(0x7f0000000380)="$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") socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x81040a, 0x0, 0x1, 0x0, &(0x7f00000007c0)) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) socket$inet6(0xa, 0x80002, 0x0) 4.29928096s ago: executing program 3 (id=823): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.28483967s ago: executing program 2 (id=824): r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = gettid() fcntl$setown(r0, 0x8, r4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 3.995465695s ago: executing program 3 (id=825): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioperm(0x0, 0x8001, 0x9) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 3.951156326s ago: executing program 2 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x48000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x42000000) 3.813862538s ago: executing program 0 (id=827): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x1b, 0x0, 0x1, 0x401, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c6c71616e31323700"], 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000e1fae19002b14e571451277906000000010000000000000b01000000040000000000000e0100000002000000050000000000000b040000000c0000000000fa7a7b90890708af0941213ca69c622a7b7e9a2690ecff82cda05ffdbb9ebedf0645d7"], &(0x7f0000000680)=""/4096, 0x52, 0x1000, 0x0, 0x40}, 0x28) 3.775094249s ago: executing program 1 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.658220742s ago: executing program 4 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2.990544784s ago: executing program 3 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2.815483437s ago: executing program 1 (id=831): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) rename(0x0, 0x0) 2.65935881s ago: executing program 4 (id=832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x44, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x44}}, 0x0) 2.574632272s ago: executing program 4 (id=833): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0xffff}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 2.413507115s ago: executing program 0 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2.413151545s ago: executing program 1 (id=835): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) writev(r0, &(0x7f0000003a00), 0x0) 2.331324086s ago: executing program 1 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 1.892863674s ago: executing program 3 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 1.759807417s ago: executing program 3 (id=838): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc00}, 0x2de0d2a06d7aeea8) 1.441432013s ago: executing program 0 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.390211324s ago: executing program 4 (id=840): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x40000, 0x14, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 888.854464ms ago: executing program 1 (id=841): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 802.247575ms ago: executing program 3 (id=842): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) socket(0x22, 0xa, 0xfffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 519.34673ms ago: executing program 0 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, 0x0, &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 415.723623ms ago: executing program 4 (id=844): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x1b, 0x0, 0x1, 0x401, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c6c71616e31323700"], 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000e1fae19002b14e571451277906000000010000000000000b01000000040000000000000e0100000002000000050000000000000b040000000c0000000000fa7a7b90890708af0941213ca69c622a7b7e9a2690ecff82cda05ffdbb9ebedf0645d7"], &(0x7f0000000680)=""/4096, 0x52, 0x1000, 0x0, 0x40}, 0x28) 0s ago: executing program 1 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) kernel console output (not intermixed with test programs): 1) entered blocking state [ 34.295603][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.329743][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.341348][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.355624][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.390577][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.397897][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.412130][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.419529][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.460198][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.539602][ T3306] veth0_vlan: entered promiscuous mode [ 34.576091][ T3306] veth1_vlan: entered promiscuous mode [ 34.589676][ T3298] veth0_vlan: entered promiscuous mode [ 34.610296][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.628149][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.641785][ T3306] veth0_macvtap: entered promiscuous mode [ 34.661840][ T3298] veth1_vlan: entered promiscuous mode [ 34.685790][ T3306] veth1_macvtap: entered promiscuous mode [ 34.707562][ T3308] veth0_vlan: entered promiscuous mode [ 34.722631][ T3298] veth0_macvtap: entered promiscuous mode [ 34.736105][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.745002][ T3298] veth1_macvtap: entered promiscuous mode [ 34.756621][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.776141][ T3308] veth1_vlan: entered promiscuous mode [ 34.790868][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.817295][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.832759][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.846688][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.856560][ T3308] veth0_macvtap: entered promiscuous mode [ 34.864899][ T3308] veth1_macvtap: entered promiscuous mode [ 34.875626][ T3302] veth0_vlan: entered promiscuous mode [ 34.884413][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.893406][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.905461][ T3302] veth1_vlan: entered promiscuous mode [ 34.917446][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.930428][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.951772][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.972644][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.983671][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.999939][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.013058][ T3302] veth0_macvtap: entered promiscuous mode [ 35.014809][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.027033][ T3300] veth0_vlan: entered promiscuous mode [ 35.042681][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.052135][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.062767][ T3302] veth1_macvtap: entered promiscuous mode [ 35.091497][ T3300] veth1_vlan: entered promiscuous mode [ 35.102256][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.128103][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.135903][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.155718][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.190131][ T1093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.204190][ T3300] veth0_macvtap: entered promiscuous mode [ 35.220820][ T3300] veth1_macvtap: entered promiscuous mode [ 35.232743][ T1093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.265590][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 35.265609][ T29] audit: type=1400 audit(1759323381.680:101): avc: denied { bind } for pid=3466 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.293344][ T1093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.303562][ T1093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.334183][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.353200][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.372793][ T3476] loop2: detected capacity change from 0 to 512 [ 35.383232][ T1093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.399990][ T1093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.423415][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.444908][ T3476] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 35.458959][ T1093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.468446][ T3476] System zones: 0-7 [ 35.500258][ T3476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.532334][ T29] audit: type=1400 audit(1759323381.930:102): avc: denied { mount } for pid=3475 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.598337][ T3485] loop4: detected capacity change from 0 to 512 [ 35.619732][ T3485] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 35.646395][ T3485] System zones: 0-7 [ 35.650861][ T3485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.319764][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.330162][ T3498] loop1: detected capacity change from 0 to 512 [ 36.494061][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.701796][ T3512] loop4: detected capacity change from 0 to 512 [ 36.703272][ T3514] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 36.790334][ T3518] loop3: detected capacity change from 0 to 256 [ 36.806693][ T3517] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 36.826948][ T29] audit: type=1400 audit(1759323383.230:103): avc: denied { create } for pid=3513 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.938739][ T29] audit: type=1400 audit(1759323383.280:104): avc: denied { ioctl } for pid=3513 comm="syz.0.12" path="socket:[4863]" dev="sockfs" ino=4863 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.964362][ T29] audit: type=1400 audit(1759323383.290:105): avc: denied { mount } for pid=3506 comm="syz.3.11" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.987131][ T29] audit: type=1400 audit(1759323383.290:106): avc: denied { create } for pid=3506 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.034275][ T3521] loop2: detected capacity change from 0 to 1024 [ 37.059309][ T3521] EXT4-fs: Ignoring removed orlov option [ 37.182838][ T3521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.952673][ T3522] vlan2: entered allmulticast mode [ 37.958273][ T3522] bridge0: entered allmulticast mode [ 37.972108][ T29] audit: type=1400 audit(1759323383.620:107): avc: denied { mount } for pid=3515 comm="syz.2.13" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.995124][ T29] audit: type=1400 audit(1759323383.740:108): avc: denied { add_name } for pid=3515 comm="syz.2.13" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.015653][ T29] audit: type=1400 audit(1759323383.740:109): avc: denied { create } for pid=3515 comm="syz.2.13" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.035902][ T29] audit: type=1400 audit(1759323383.740:110): avc: denied { read open } for pid=3515 comm="syz.2.13" path="/2/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.625161][ T3533] loop4: detected capacity change from 0 to 1024 [ 38.632327][ T3533] EXT4-fs: Ignoring removed i_version option [ 38.648087][ T3533] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.680496][ T3533] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.15: Invalid block bitmap block 0 in block_group 0 [ 38.695072][ T3533] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.15: Failed to acquire dquot type 0 [ 38.707036][ T3533] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.15: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.721258][ T3533] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.15: Invalid inode bitmap blk 0 in block_group 0 [ 38.734405][ T3533] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 38.743340][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 38.757527][ T3533] EXT4-fs (loop4): 1 orphan inode deleted [ 38.764415][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.887416][ T3528] vlan2: entered allmulticast mode [ 38.954467][ T3533] syz.4.15 (3533) used greatest stack depth: 9760 bytes left [ 39.095491][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.131580][ T3540] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 39.364939][ T3545] vlan2: entered allmulticast mode [ 39.465757][ T3548] Zero length message leads to an empty skb [ 39.482307][ T3548] loop1: detected capacity change from 0 to 512 [ 39.736126][ T3548] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.742976][ T3548] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.19: Failed to acquire dquot type 1 [ 39.755275][ T3548] EXT4-fs (loop1): 1 truncate cleaned up [ 39.762128][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.363982][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 40.363996][ T29] audit: type=1400 audit(1759323385.890:117): avc: denied { write } for pid=3541 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.390979][ T29] audit: type=1400 audit(1759323385.890:118): avc: denied { read } for pid=3541 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.411731][ T29] audit: type=1400 audit(1759323386.210:119): avc: denied { firmware_load } for pid=3541 comm="syz.1.19" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 40.678433][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.993446][ T3556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 41.094398][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.103836][ T29] audit: type=1326 audit(1759323387.500:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3559 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 41.127464][ T29] audit: type=1326 audit(1759323387.500:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3559 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 41.151277][ T29] audit: type=1326 audit(1759323387.500:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3559 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 41.175123][ T29] audit: type=1326 audit(1759323387.500:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3559 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 41.199129][ T29] audit: type=1326 audit(1759323387.500:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3559 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 41.222724][ T29] audit: type=1400 audit(1759323387.500:125): avc: denied { setopt } for pid=3550 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.242971][ T29] audit: type=1326 audit(1759323387.510:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3559 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 41.800441][ T3570] loop3: detected capacity change from 0 to 512 [ 41.821026][ T3570] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 41.843292][ T3570] System zones: 0-7 [ 41.922222][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.955319][ T3578] loop4: detected capacity change from 0 to 512 [ 41.985128][ T3578] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 41.993748][ T3578] System zones: 0-7 [ 42.008065][ T3578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.762430][ T3590] loop1: detected capacity change from 0 to 512 [ 42.895348][ T3592] loop2: detected capacity change from 0 to 1024 [ 42.902330][ T3592] EXT4-fs: Ignoring removed i_version option [ 42.969808][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.037395][ T3590] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.045459][ T3590] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.28: Failed to acquire dquot type 1 [ 43.080044][ T3590] EXT4-fs (loop1): 1 truncate cleaned up [ 43.096499][ T3592] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.233735][ T3592] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.30: Invalid block bitmap block 0 in block_group 0 [ 43.309949][ T3592] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.30: Failed to acquire dquot type 0 [ 43.352456][ T3592] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.30: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.403107][ T3592] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.30: Invalid inode bitmap blk 0 in block_group 0 [ 43.455181][ T3592] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 43.497110][ T3592] EXT4-fs (loop2): 1 orphan inode deleted [ 43.521101][ T3592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.637480][ T3590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.706917][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 43.722284][ T3592] syz.2.30 (3592) used greatest stack depth: 9408 bytes left [ 43.733680][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.490341][ T3606] loop4: detected capacity change from 0 to 512 [ 44.523093][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.539812][ T3606] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.547581][ T3606] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.29: Failed to acquire dquot type 1 [ 44.560537][ T3606] EXT4-fs (loop4): 1 truncate cleaned up [ 44.719984][ T3606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.206291][ T3617] vhci_hcd: invalid port number 96 [ 45.211480][ T3617] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 45.295973][ T3614] Illegal XDP return value 51 on prog (id 22) dev syz_tun, expect packet loss! [ 45.974578][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.987068][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.027919][ T3626] loop4: detected capacity change from 0 to 1024 [ 46.051477][ T3626] ======================================================= [ 46.051477][ T3626] WARNING: The mand mount option has been deprecated and [ 46.051477][ T3626] and is ignored by this kernel. Remove the mand [ 46.051477][ T3626] option from the mount to silence this warning. [ 46.051477][ T3626] ======================================================= [ 46.131168][ T3626] EXT4-fs: quotafile must be on filesystem root [ 46.154085][ T3630] loop3: detected capacity change from 0 to 256 [ 46.173772][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 46.173791][ T29] audit: type=1400 audit(1759323392.590:147): avc: denied { connect } for pid=3628 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.199305][ T29] audit: type=1400 audit(1759323392.590:148): avc: denied { write } for pid=3628 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.476363][ T3636] vlan2: entered allmulticast mode [ 46.872304][ T3641] loop0: detected capacity change from 0 to 512 [ 46.881325][ T3641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.889948][ T3641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.298132][ T29] audit: type=1400 audit(1759323393.300:149): avc: denied { read write } for pid=3637 comm="syz.0.42" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.322144][ T29] audit: type=1400 audit(1759323393.300:150): avc: denied { open } for pid=3637 comm="syz.0.42" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.345341][ T29] audit: type=1400 audit(1759323393.300:151): avc: denied { ioctl } for pid=3637 comm="syz.0.42" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.491134][ T3645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.809055][ T3654] loop3: detected capacity change from 0 to 1024 [ 48.815912][ T3654] EXT4-fs: Ignoring removed i_version option [ 48.823030][ T3654] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.331182][ T3654] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.46: Invalid block bitmap block 0 in block_group 0 [ 49.345913][ T3654] Quota error (device loop3): write_blk: dquota write failed [ 49.353650][ T3654] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 49.363759][ T3654] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.46: Failed to acquire dquot type 0 [ 49.375596][ T3654] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.46: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.389566][ T3654] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.46: Invalid inode bitmap blk 0 in block_group 0 [ 49.402908][ T56] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 49.412149][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 49.434689][ T3658] loop4: detected capacity change from 0 to 256 [ 49.443523][ T3654] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 49.453447][ T3654] EXT4-fs (loop3): 1 orphan inode deleted [ 49.460241][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.490127][ T3658] vfat: Unknown parameter 'fs' [ 50.446343][ T3669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 50.486036][ T3671] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 50.728447][ T3671] vlan2: entered allmulticast mode [ 50.945610][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.158304][ T3687] loop3: detected capacity change from 0 to 256 [ 51.172020][ T3688] vlan2: entered allmulticast mode [ 51.618819][ T3690] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 51.629344][ T3692] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 51.734061][ T3692] vlan2: entered allmulticast mode [ 51.739452][ T3692] bridge0: entered allmulticast mode [ 51.751919][ T3690] vlan2: entered allmulticast mode [ 51.757164][ T3690] bridge0: entered allmulticast mode [ 51.856481][ T29] audit: type=1326 audit(1759323398.280:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 51.880104][ T29] audit: type=1326 audit(1759323398.280:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 51.915958][ T29] audit: type=1326 audit(1759323398.280:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 51.940003][ T29] audit: type=1326 audit(1759323398.280:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 51.964292][ T29] audit: type=1326 audit(1759323398.280:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 51.988091][ T29] audit: type=1326 audit(1759323398.280:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 52.011895][ T29] audit: type=1326 audit(1759323398.280:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 52.035493][ T29] audit: type=1326 audit(1759323398.280:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 52.059137][ T29] audit: type=1326 audit(1759323398.280:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 52.082924][ T29] audit: type=1326 audit(1759323398.280:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 53.383834][ T3733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 53.838558][ T3744] loop2: detected capacity change from 0 to 512 [ 53.850829][ T3744] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 53.898299][ T3744] System zones: 0-7 [ 53.918514][ T3744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.274866][ T3753] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 54.553417][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.718915][ T3761] loop3: detected capacity change from 0 to 256 [ 55.279918][ T3762] hub 2-0:1.0: USB hub found [ 55.288288][ T3762] hub 2-0:1.0: 8 ports detected [ 57.549802][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 57.549820][ T29] audit: type=1400 audit(1759323403.970:202): avc: denied { create } for pid=3790 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.704253][ T29] audit: type=1400 audit(1759323404.040:203): avc: denied { read write } for pid=3790 comm="syz.4.85" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.728635][ T29] audit: type=1400 audit(1759323404.040:204): avc: denied { open } for pid=3790 comm="syz.4.85" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.752356][ T29] audit: type=1400 audit(1759323404.040:205): avc: denied { allowed } for pid=3790 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.771572][ T29] audit: type=1400 audit(1759323404.040:206): avc: denied { create } for pid=3790 comm="syz.4.85" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.792793][ T29] audit: type=1400 audit(1759323404.050:207): avc: denied { ioctl } for pid=3790 comm="syz.4.85" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.817932][ T29] audit: type=1400 audit(1759323404.120:208): avc: denied { create } for pid=3792 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.837378][ T29] audit: type=1400 audit(1759323404.120:209): avc: denied { bind } for pid=3792 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.049192][ T29] audit: type=1400 audit(1759323404.130:210): avc: denied { write } for pid=3792 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.177253][ T3801] loop3: detected capacity change from 0 to 512 [ 58.199616][ T29] audit: type=1326 audit(1759323404.500:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 58.895313][ T3804] loop2: detected capacity change from 0 to 128 [ 60.655081][ T3801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.667816][ T3801] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.915230][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.772238][ T3824] loop3: detected capacity change from 0 to 256 [ 63.672189][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 63.672205][ T29] audit: type=1400 audit(1759323410.090:237): avc: denied { ioctl } for pid=3834 comm="syz.4.98" path="socket:[6513]" dev="sockfs" ino=6513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.967101][ T3846] FAT-fs (loop9): unable to read boot sector [ 64.398001][ T29] audit: type=1400 audit(1759323410.390:238): avc: denied { create } for pid=3836 comm="syz.4.99" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.418717][ T29] audit: type=1400 audit(1759323410.390:239): avc: denied { mounton } for pid=3836 comm="syz.4.99" path="/19/file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.470419][ T3844] loop2: detected capacity change from 0 to 512 [ 64.548768][ T3844] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 64.584717][ T3844] System zones: 0-7 [ 64.590041][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.784237][ T29] audit: type=1400 audit(1759323411.200:240): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.817898][ T29] audit: type=1326 audit(1759323411.240:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 64.841625][ T29] audit: type=1326 audit(1759323411.240:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 64.884789][ T3859] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 64.906201][ T29] audit: type=1326 audit(1759323411.330:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 64.929745][ T29] audit: type=1326 audit(1759323411.330:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 64.953211][ T29] audit: type=1326 audit(1759323411.330:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3851 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 65.042052][ T3864] loop1: detected capacity change from 0 to 1024 [ 65.048963][ T3864] EXT4-fs: Ignoring removed i_version option [ 65.086408][ T3859] vlan2: entered allmulticast mode [ 65.093043][ T3864] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.199144][ T3864] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.106: Invalid block bitmap block 0 in block_group 0 [ 65.213844][ T3864] Quota error (device loop1): write_blk: dquota write failed [ 65.221431][ T3864] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.106: Failed to acquire dquot type 0 [ 65.236214][ T3864] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.106: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.250811][ T3864] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.106: Invalid inode bitmap blk 0 in block_group 0 [ 65.264682][ T3864] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 65.273588][ T3864] EXT4-fs (loop1): 1 orphan inode deleted [ 65.279847][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.300297][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 66.096751][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.243945][ T3892] loop4: detected capacity change from 0 to 128 [ 67.533614][ T3902] loop0: detected capacity change from 0 to 128 [ 67.645953][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.880580][ T3906] loop4: detected capacity change from 0 to 256 [ 67.913955][ T3906] vfat: Unknown parameter 'fs' [ 68.332022][ T3913] loop2: detected capacity change from 0 to 512 [ 68.357219][ T3913] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 68.366562][ T3913] System zones: 0-7 [ 68.371053][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.959841][ T3919] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 69.120125][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 69.120143][ T29] audit: type=1400 audit(1759323415.540:273): avc: denied { create } for pid=3924 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.161087][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.269764][ T29] audit: type=1400 audit(1759323415.540:274): avc: denied { setopt } for pid=3924 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.289124][ T29] audit: type=1400 audit(1759323415.540:275): avc: denied { connect } for pid=3924 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.478960][ T3935] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 69.577029][ T3937] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.597708][ T3937] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 69.789703][ T29] audit: type=1400 audit(1759323416.210:276): avc: denied { write } for pid=3926 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.795998][ T3935] vlan2: entered allmulticast mode [ 69.814938][ T3935] bridge0: entered allmulticast mode [ 69.845859][ T29] audit: type=1400 audit(1759323416.210:277): avc: denied { nlmsg_write } for pid=3926 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.867363][ T3935] bridge0: entered promiscuous mode [ 69.873142][ T3935] bridge0: left promiscuous mode [ 69.879886][ T3935] bond1: (slave vlan2): making interface the new active one [ 69.887897][ T3935] bridge0: entered promiscuous mode [ 69.895089][ T3935] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 69.943663][ T3944] loop4: detected capacity change from 0 to 1024 [ 69.950573][ T3944] EXT4-fs: Ignoring removed i_version option [ 70.016657][ T3944] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.185678][ T3944] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.131: Invalid block bitmap block 0 in block_group 0 [ 70.200102][ T3944] Quota error (device loop4): write_blk: dquota write failed [ 70.207542][ T3944] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 70.217653][ T3944] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.131: Failed to acquire dquot type 0 [ 70.229742][ T3944] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.131: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.244124][ T3944] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.131: Invalid inode bitmap blk 0 in block_group 0 [ 70.257463][ T3944] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 70.272860][ T3599] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 70.281978][ T3599] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 70.294910][ T3944] EXT4-fs (loop4): 1 orphan inode deleted [ 70.302103][ T3944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.507006][ T3951] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 70.570547][ T3951] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 70.585190][ T3951] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 70.764837][ T3955] vhci_hcd: invalid port number 96 [ 70.770143][ T3955] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 70.980698][ T29] audit: type=1326 audit(1759323417.300:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 71.004494][ T29] audit: type=1326 audit(1759323417.300:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 71.612965][ T3971] vlan2: entered allmulticast mode [ 71.658522][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.906570][ T3977] vhci_hcd: invalid port number 96 [ 71.911766][ T3977] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 72.010419][ T3985] loop3: detected capacity change from 0 to 512 [ 72.046273][ T3983] vhci_hcd: invalid port number 96 [ 72.051503][ T3983] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 72.089123][ T3985] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 72.098752][ T3985] System zones: 0-7 [ 72.103298][ T3985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.226955][ T3990] loop2: detected capacity change from 0 to 512 [ 73.151605][ T3990] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.159367][ T3990] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.144: Failed to acquire dquot type 1 [ 73.172150][ T3990] EXT4-fs (loop2): 1 truncate cleaned up [ 73.179417][ T3990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.984861][ T4006] loop1: detected capacity change from 0 to 512 [ 74.107875][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.334772][ T4006] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.343008][ T4006] __quota_error: 20 callbacks suppressed [ 74.343089][ T4006] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 74.359243][ T4006] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 74.368673][ T4006] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.150: Failed to acquire dquot type 1 [ 74.382646][ T4006] EXT4-fs (loop1): 1 truncate cleaned up [ 74.571665][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.501653][ T4018] loop2: detected capacity change from 0 to 1024 [ 75.508458][ T4018] EXT4-fs: Ignoring removed i_version option [ 75.516690][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.584488][ T4018] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.738436][ T4020] loop1: detected capacity change from 0 to 512 [ 75.803162][ T4020] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 75.877433][ T4020] System zones: 0-7 [ 76.104172][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.456151][ T4018] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.153: Invalid block bitmap block 0 in block_group 0 [ 76.582500][ T4018] Quota error (device loop2): write_blk: dquota write failed [ 76.590047][ T4018] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 76.600281][ T4018] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.153: Failed to acquire dquot type 0 [ 76.612721][ T4018] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.153: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.627139][ T4018] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.153: Invalid inode bitmap blk 0 in block_group 0 [ 76.640599][ T4018] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 76.649710][ T3599] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 76.658809][ T3599] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 76.671410][ T4020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.707453][ T4018] EXT4-fs (loop2): 1 orphan inode deleted [ 76.714280][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.934757][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.018190][ T4037] loop0: detected capacity change from 0 to 256 [ 77.051345][ T4037] vfat: Unknown parameter 'fs' [ 77.229825][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.709357][ T4049] loop2: detected capacity change from 0 to 512 [ 77.730820][ T4049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.740526][ T4049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.169974][ T4060] loop0: detected capacity change from 0 to 512 [ 79.885665][ T4060] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.892453][ T4060] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 79.902850][ T4060] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 79.912289][ T4060] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.164: Failed to acquire dquot type 1 [ 80.615947][ T4060] EXT4-fs (loop0): 1 truncate cleaned up [ 80.859953][ T4060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.334504][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.112801][ T4074] loop1: detected capacity change from 0 to 512 [ 82.145080][ T4074] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 82.153982][ T4074] System zones: 0-7 [ 82.158602][ T4074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.083956][ T4087] ./file0: Can't open blockdev [ 83.159600][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.371617][ T4093] loop1: detected capacity change from 0 to 256 [ 83.379919][ T4093] vfat: Unknown parameter 'fs' [ 83.659867][ T4106] loop2: detected capacity change from 0 to 512 [ 83.672063][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.680972][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.971276][ T4123] loop0: detected capacity change from 0 to 1024 [ 85.978366][ T4123] EXT4-fs: Ignoring removed i_version option [ 85.990969][ T4123] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.005315][ T4123] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.184: Invalid block bitmap block 0 in block_group 0 [ 86.066605][ T4123] Quota error (device loop0): write_blk: dquota write failed [ 86.074109][ T4123] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 86.085746][ T4123] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.184: Failed to acquire dquot type 0 [ 86.098907][ T4123] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.184: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.114611][ T4123] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.184: Invalid inode bitmap blk 0 in block_group 0 [ 86.127534][ T4123] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 86.137759][ T4123] EXT4-fs (loop0): 1 orphan inode deleted [ 86.145157][ T4123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.164075][ T3599] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 86.174006][ T3599] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 86.309151][ T4123] syz.0.184 (4123) used greatest stack depth: 9280 bytes left [ 87.256970][ T4136] FAT-fs (loop9): unable to read boot sector [ 87.326465][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.384794][ T29] audit: type=1107 audit(1759323433.800:298): pid=4134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='‰¤Œá:ËšœS&HŸÌHÌQ9ÆÙBc8’obRQµ,Ì©îJ9C¹—™öVM\ÜáïLø®úC&S««fµ^Ò¤[™µ5ŸÆ©á¯ãËŽi¿ÜfÙËkeÎwEtÉ•²è—á:ˆJ‡°×ÇÖc¥ŒN6}¦)ù½ÿÌ[¬Wï’z§_w´p:'ä3Ý' [ 87.729005][ T4145] netlink: 'syz.1.190': attribute type 4 has an invalid length. [ 87.751382][ T4145] netlink: 'syz.1.190': attribute type 4 has an invalid length. [ 87.867193][ T4149] loop0: detected capacity change from 0 to 256 [ 87.916223][ T4150] loop2: detected capacity change from 0 to 256 [ 87.927547][ T4149] vfat: Unknown parameter 'fs' [ 87.945696][ T29] audit: type=1400 audit(1759323434.370:299): avc: denied { write } for pid=4151 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.236392][ T4157] loop3: detected capacity change from 0 to 256 [ 88.399856][ T29] audit: type=1326 audit(1759323434.820:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 88.427077][ T29] audit: type=1326 audit(1759323434.820:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 88.450725][ T29] audit: type=1326 audit(1759323434.840:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 88.474056][ T29] audit: type=1326 audit(1759323434.840:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 88.497997][ T29] audit: type=1326 audit(1759323434.850:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 88.935519][ T4173] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 88.958727][ T4173] vlan2: entered allmulticast mode [ 88.967478][ T4173] bond1: (slave vlan2): making interface the new active one [ 88.975599][ T4173] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 89.591474][ T4184] loop1: detected capacity change from 0 to 128 [ 90.019167][ T4195] FAT-fs (loop3): unable to read boot sector [ 90.103040][ T4194] loop4: detected capacity change from 0 to 256 [ 91.194251][ T4222] loop0: detected capacity change from 0 to 512 [ 91.206386][ T4222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.215207][ T4222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.171974][ T4231] hub 2-0:1.0: USB hub found [ 92.177136][ T4231] hub 2-0:1.0: 8 ports detected [ 92.944424][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 92.944445][ T29] audit: type=1400 audit(1759323439.320:336): avc: denied { create } for pid=4210 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 94.089925][ T4235] loop2: detected capacity change from 0 to 1024 [ 94.096783][ T4235] EXT4-fs: Ignoring removed i_version option [ 94.914421][ T4235] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.925191][ T4235] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 94.925226][ T4235] EXT4-fs: failed to create workqueue [ 94.940110][ T4235] EXT4-fs (loop2): mount failed [ 95.184230][ T4238] loop1: detected capacity change from 0 to 256 [ 95.675736][ T4246] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 96.058692][ T4258] loop1: detected capacity change from 0 to 256 [ 96.084910][ T4258] vfat: Unknown parameter 'fs' [ 96.187402][ T29] audit: type=1400 audit(1759323442.610:337): avc: denied { read } for pid=4261 comm="syz.3.230" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.211623][ T29] audit: type=1400 audit(1759323442.610:338): avc: denied { open } for pid=4261 comm="syz.3.230" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.485229][ T4268] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 96.498056][ T29] audit: type=1400 audit(1759323442.920:339): avc: denied { ioctl } for pid=4261 comm="syz.3.230" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.533750][ T4268] netlink: 'syz.0.227': attribute type 4 has an invalid length. [ 97.100309][ T4282] loop4: detected capacity change from 0 to 256 [ 97.670868][ T4295] loop2: detected capacity change from 0 to 512 [ 97.693421][ T4295] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.702344][ T4295] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 97.713103][ T4295] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 97.723535][ T4295] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.239: Failed to acquire dquot type 1 [ 97.743417][ T4295] EXT4-fs (loop2): 1 truncate cleaned up [ 97.755762][ T4295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.657863][ T29] audit: type=1107 audit(1759323445.080:340): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='‰¤Œá:ËšœS&HŸÌHÌQ9ÆÙBc8’obRQµ,Ì©îJ9C¹—™öVM\ÜáïLø®úC&S««fµ^Ò¤[™µ5ŸÆ©á¯ãËŽi¿ÜfÙËkeÎwEtÉ•²è—á:ˆJ‡°×ÇÖc¥ŒN6}¦)ù½ÿÌ[¬Wï’z§_w´p:'ä3Ý' [ 98.836623][ T4300] ip6erspan0: entered promiscuous mode [ 98.842163][ T4300] ip6erspan0: entered allmulticast mode [ 99.208171][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.633704][ T4318] loop3: detected capacity change from 0 to 512 [ 99.660998][ T4320] loop2: detected capacity change from 0 to 256 [ 99.669803][ T4320] vfat: Unknown parameter 'fs' [ 99.783353][ T4318] EXT4-fs (loop3): orphan cleanup on readonly fs [ 99.790533][ T4318] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 99.801106][ T4318] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 99.810599][ T4318] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.246: Failed to acquire dquot type 1 [ 99.823164][ T4318] EXT4-fs (loop3): 1 truncate cleaned up [ 99.996379][ T4318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.162197][ T4327] loop1: detected capacity change from 0 to 1024 [ 100.181654][ T4327] EXT4-fs: Ignoring removed orlov option [ 100.233689][ T4327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.077469][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.098835][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.490831][ T4374] FAT-fs (loop3): unable to read boot sector [ 103.367615][ T29] audit: type=1400 audit(1759323449.780:341): avc: denied { create } for pid=4381 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.387611][ T29] audit: type=1400 audit(1759323449.780:342): avc: denied { bind } for pid=4381 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.702241][ T4392] loop2: detected capacity change from 0 to 1024 [ 103.726532][ T4392] EXT4-fs: Ignoring removed orlov option [ 103.752579][ T4392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.573519][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.592454][ T29] audit: type=1326 audit(1759323451.010:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.650424][ T29] audit: type=1326 audit(1759323451.010:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.674085][ T29] audit: type=1326 audit(1759323451.040:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.697623][ T29] audit: type=1326 audit(1759323451.040:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.721518][ T29] audit: type=1326 audit(1759323451.040:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.745122][ T29] audit: type=1326 audit(1759323451.050:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.768717][ T29] audit: type=1326 audit(1759323451.050:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.792061][ T29] audit: type=1326 audit(1759323451.050:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.815364][ T29] audit: type=1326 audit(1759323451.050:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 104.838697][ T29] audit: type=1326 audit(1759323451.050:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 105.208454][ T4420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'. [ 105.975660][ T4434] vlan2: entered allmulticast mode [ 106.767494][ T4450] loop3: detected capacity change from 0 to 1024 [ 106.774538][ T4450] EXT4-fs: Ignoring removed i_version option [ 106.897137][ T4450] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.936331][ T4450] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.285: Invalid block bitmap block 0 in block_group 0 [ 106.950720][ T4450] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.285: Failed to acquire dquot type 0 [ 106.963605][ T4450] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.285: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.977638][ T4450] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.285: Invalid inode bitmap blk 0 in block_group 0 [ 106.991197][ T4450] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 107.000099][ T56] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 107.011774][ T4450] EXT4-fs (loop3): 1 orphan inode deleted [ 107.018167][ T4450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.277653][ T4441] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 107.319416][ T4441] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 108.835500][ T4464] loop2: detected capacity change from 0 to 256 [ 109.045158][ T4475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 109.412679][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.568729][ T4495] vlan2: entered allmulticast mode [ 110.672998][ T4522] loop3: detected capacity change from 0 to 256 [ 110.719247][ T4524] loop2: detected capacity change from 0 to 512 [ 110.727419][ T4524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 110.741463][ T4524] System zones: 0-7 [ 110.765132][ T4524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.937008][ T4531] loop4: detected capacity change from 0 to 512 [ 110.946706][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.955473][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.427209][ T4543] loop3: detected capacity change from 0 to 256 [ 114.103441][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.907354][ T4564] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 114.918761][ T4564] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 115.675177][ T4574] FAT-fs (loop5): unable to read boot sector [ 116.298038][ T4591] loop2: detected capacity change from 0 to 512 [ 116.306957][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.316025][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.377432][ T4599] loop4: detected capacity change from 0 to 256 [ 117.405492][ T4599] vfat: Unknown parameter 'fs' [ 117.960982][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 117.961000][ T29] audit: type=1326 audit(1759323464.380:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 117.991227][ T29] audit: type=1326 audit(1759323464.380:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.024307][ T29] audit: type=1326 audit(1759323464.440:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.048183][ T29] audit: type=1326 audit(1759323464.440:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.071534][ T29] audit: type=1326 audit(1759323464.440:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.095863][ T29] audit: type=1326 audit(1759323464.450:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.119220][ T29] audit: type=1326 audit(1759323464.450:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.142686][ T29] audit: type=1326 audit(1759323464.450:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.166464][ T29] audit: type=1326 audit(1759323464.450:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.190686][ T29] audit: type=1326 audit(1759323464.450:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 118.337221][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 118.435423][ T4621] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 118.446537][ T4621] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 118.498102][ T4623] ip6erspan0: entered promiscuous mode [ 118.503824][ T4623] ip6erspan0: entered allmulticast mode [ 119.328258][ T4634] loop3: detected capacity change from 0 to 512 [ 119.960044][ T4634] EXT4-fs (loop3): orphan cleanup on readonly fs [ 119.967357][ T4634] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.343: Failed to acquire dquot type 1 [ 119.987558][ T4634] EXT4-fs (loop3): 1 truncate cleaned up [ 119.998279][ T4634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.259065][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.602985][ T4674] vlan3: entered allmulticast mode [ 121.662288][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 121.716288][ T4665] netlink: 'syz.3.353': attribute type 4 has an invalid length. [ 121.759039][ T4665] netlink: 'syz.3.353': attribute type 4 has an invalid length. [ 122.919148][ T4705] loop4: detected capacity change from 0 to 256 [ 122.952455][ T4705] vfat: Unknown parameter 'fs' [ 124.130204][ T4720] vlan3: entered allmulticast mode [ 124.702087][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 125.566865][ T4729] loop2: detected capacity change from 0 to 512 [ 125.625224][ T4729] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.632243][ T4729] __quota_error: 20 callbacks suppressed [ 125.632258][ T4729] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 125.648435][ T4729] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 125.658380][ T4729] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.369: Failed to acquire dquot type 1 [ 125.676284][ T4729] EXT4-fs (loop2): 1 truncate cleaned up [ 125.692172][ T4734] loop4: detected capacity change from 0 to 512 [ 125.722537][ T4729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.771339][ T4734] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 125.926683][ T4734] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 125.959547][ T4734] EXT4-fs (loop4): 1 truncate cleaned up [ 126.211208][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.469124][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.507555][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.952056][ T4746] loop2: detected capacity change from 0 to 1024 [ 127.616789][ T4748] loop4: detected capacity change from 0 to 512 [ 127.634009][ T4746] EXT4-fs: quotafile must be on filesystem root [ 127.756491][ T4748] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.763607][ T4748] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 127.774238][ T4748] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 127.783618][ T4748] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.376: Failed to acquire dquot type 1 [ 127.797635][ T4748] EXT4-fs (loop4): 1 truncate cleaned up [ 128.072333][ T4748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.939964][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.219487][ T4769] vlan2: entered allmulticast mode [ 130.169913][ T4781] block device autoloading is deprecated and will be removed. [ 130.177881][ T4781] FAT-fs (loop1): unable to read boot sector [ 130.543999][ T4788] loop4: detected capacity change from 0 to 1024 [ 130.550976][ T4788] EXT4-fs: Ignoring removed i_version option [ 130.559849][ T4788] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.590432][ T4788] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.389: Invalid block bitmap block 0 in block_group 0 [ 130.604253][ T4788] Quota error (device loop4): write_blk: dquota write failed [ 130.611686][ T4788] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 130.621924][ T4788] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.389: Failed to acquire dquot type 0 [ 130.633574][ T4788] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.389: Freeing blocks not in datazone - block = 0, count = 4096 [ 130.656311][ T4788] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.389: Invalid inode bitmap blk 0 in block_group 0 [ 130.669349][ T4788] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 130.678412][ T4788] EXT4-fs (loop4): 1 orphan inode deleted [ 130.684854][ T4788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.689053][ T3599] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 130.706769][ T3599] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 131.345892][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.708262][ T4839] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 132.779341][ T4841] loop1: detected capacity change from 0 to 512 [ 132.838716][ T4841] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.846209][ T4841] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 132.856793][ T4841] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 132.866415][ T4841] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.403: Failed to acquire dquot type 1 [ 132.879358][ T4841] EXT4-fs (loop1): 1 truncate cleaned up [ 132.900499][ T4841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.271177][ T4846] loop2: detected capacity change from 0 to 1024 [ 133.278616][ T4846] EXT4-fs: Ignoring removed i_version option [ 133.299144][ T4846] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.731147][ T4846] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.408: Invalid block bitmap block 0 in block_group 0 [ 133.745025][ T4846] Quota error (device loop2): write_blk: dquota write failed [ 133.752436][ T4846] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 133.762497][ T4846] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.408: Failed to acquire dquot type 0 [ 133.777486][ T4846] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.408: Freeing blocks not in datazone - block = 0, count = 4096 [ 133.791385][ T4846] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.408: Invalid inode bitmap blk 0 in block_group 0 [ 133.804893][ T4846] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 133.813841][ T4846] EXT4-fs (loop2): 1 orphan inode deleted [ 133.820126][ T4846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.981026][ T31] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 133.990363][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 134.301305][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.325995][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.346837][ T4853] loop4: detected capacity change from 0 to 1024 [ 134.384933][ T4853] EXT4-fs: quotafile must be on filesystem root [ 134.727920][ T4862] loop1: detected capacity change from 0 to 512 [ 134.751250][ T4862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.758929][ T4862] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 134.769779][ T4862] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 134.779410][ T4862] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.412: Failed to acquire dquot type 1 [ 134.794749][ T4862] EXT4-fs (loop1): 1 truncate cleaned up [ 134.804326][ T4862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.562484][ T4872] vlan3: entered allmulticast mode [ 136.375286][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.565158][ T4884] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 136.961139][ T4885] loop2: detected capacity change from 0 to 256 [ 137.322393][ T29] audit: type=1400 audit(1759323483.740:400): avc: denied { create } for pid=4889 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.509302][ T4898] loop2: detected capacity change from 0 to 256 [ 137.521000][ T4900] syz_tun: entered allmulticast mode [ 137.563521][ T29] audit: type=1400 audit(1759323483.980:401): avc: denied { write } for pid=4889 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.634307][ T29] audit: type=1400 audit(1759323484.030:402): avc: denied { create } for pid=4899 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.657191][ T4899] syz_tun: left allmulticast mode [ 137.727834][ T4908] loop4: detected capacity change from 0 to 512 [ 137.894851][ T4911] loop3: detected capacity change from 0 to 512 [ 137.904023][ T4911] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 137.918841][ T4911] System zones: 0-7 [ 137.928248][ T4911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.920761][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.487749][ T29] audit: type=1326 audit(1759323485.910:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 139.511475][ T29] audit: type=1326 audit(1759323485.910:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 139.534750][ T29] audit: type=1326 audit(1759323485.910:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 139.558238][ T29] audit: type=1326 audit(1759323485.910:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 139.581542][ T29] audit: type=1326 audit(1759323485.910:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 139.605066][ T29] audit: type=1326 audit(1759323485.910:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 139.662524][ T29] audit: type=1326 audit(1759323486.060:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 139.743590][ T4947] loop2: detected capacity change from 0 to 1024 [ 139.750421][ T4947] EXT4-fs: Ignoring removed i_version option [ 139.787981][ T4947] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.831870][ T4947] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.438: Invalid block bitmap block 0 in block_group 0 [ 139.845552][ T4947] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.438: Failed to acquire dquot type 0 [ 139.859629][ T4947] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.438: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.873974][ T4947] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.438: Invalid inode bitmap blk 0 in block_group 0 [ 139.887094][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 139.899128][ T4947] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 139.910094][ T4947] EXT4-fs (loop2): 1 orphan inode deleted [ 139.916437][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.388294][ T4969] loop4: detected capacity change from 0 to 256 [ 140.742973][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.181789][ T4984] vlan2: entered allmulticast mode [ 141.795369][ T4987] FAT-fs (loop5): unable to read boot sector [ 141.809548][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 142.148058][ T5000] syz_tun: entered allmulticast mode [ 142.355289][ T4999] syz_tun: left allmulticast mode [ 142.400263][ T5015] syz_tun: entered allmulticast mode [ 142.504035][ T5014] syz_tun: left allmulticast mode [ 143.404571][ T5034] vlan2: entered allmulticast mode [ 143.433540][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 143.670718][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 143.670752][ T29] audit: type=1400 audit(1759323490.090:427): avc: denied { connect } for pid=5041 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.696806][ T29] audit: type=1400 audit(1759323490.100:428): avc: denied { shutdown } for pid=5041 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.167495][ T5062] loop3: detected capacity change from 0 to 1024 [ 144.174515][ T5062] EXT4-fs: Ignoring removed i_version option [ 144.184928][ T5063] loop1: detected capacity change from 0 to 512 [ 144.193483][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.202064][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.271053][ T5062] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.306037][ T5062] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.478: Invalid block bitmap block 0 in block_group 0 [ 144.322884][ T5062] Quota error (device loop3): write_blk: dquota write failed [ 144.330547][ T5062] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 144.340917][ T5062] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.478: Failed to acquire dquot type 0 [ 144.353419][ T5062] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.478: Freeing blocks not in datazone - block = 0, count = 4096 [ 144.368165][ T5062] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.478: Invalid inode bitmap blk 0 in block_group 0 [ 144.383201][ T5062] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 144.392073][ T37] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 144.401139][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 144.413133][ T5062] EXT4-fs (loop3): 1 orphan inode deleted [ 144.419487][ T5062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.858678][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.310708][ T5074] loop4: detected capacity change from 0 to 256 [ 145.682762][ T5086] vlan3: entered allmulticast mode [ 146.037981][ T5087] ip6erspan0: entered promiscuous mode [ 146.043525][ T5087] ip6erspan0: entered allmulticast mode [ 147.206651][ T29] audit: type=1326 audit(1759323493.610:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 147.230617][ T29] audit: type=1326 audit(1759323493.610:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 147.254731][ T29] audit: type=1326 audit(1759323493.610:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 147.278057][ T29] audit: type=1326 audit(1759323493.610:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 147.301523][ T29] audit: type=1326 audit(1759323493.620:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98e27beec9 code=0x7ffc0000 [ 147.394076][ T5115] loop1: detected capacity change from 0 to 512 [ 147.505142][ T5115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.517927][ T5115] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.627226][ T5127] loop4: detected capacity change from 0 to 512 [ 150.250233][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.274878][ T5127] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.281691][ T5127] __quota_error: 21 callbacks suppressed [ 150.281712][ T5127] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 150.297881][ T5127] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 150.307360][ T5127] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.498: Failed to acquire dquot type 1 [ 150.319187][ T5127] EXT4-fs (loop4): 1 truncate cleaned up [ 150.325807][ T5127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.409290][ T29] audit: type=1326 audit(1759323496.830:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.432798][ T29] audit: type=1326 audit(1759323496.830:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.518016][ T29] audit: type=1326 audit(1759323496.880:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.541537][ T29] audit: type=1326 audit(1759323496.880:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.564970][ T29] audit: type=1326 audit(1759323496.880:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.588332][ T29] audit: type=1326 audit(1759323496.880:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.611640][ T29] audit: type=1326 audit(1759323496.880:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.635075][ T29] audit: type=1326 audit(1759323496.880:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5131 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1440eec9 code=0x7ffc0000 [ 150.735782][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.800058][ T5137] bridge_slave_0: left promiscuous mode [ 150.805903][ T5137] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.817562][ T5137] bridge_slave_1: left allmulticast mode [ 150.823259][ T5137] bridge_slave_1: left promiscuous mode [ 150.829079][ T5137] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.872011][ T5137] bond0: (slave bond_slave_0): Releasing backup interface [ 150.893346][ T5137] bond0: (slave bond_slave_1): Releasing backup interface [ 150.904831][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.913314][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.945768][ T5137] team0: Port device team_slave_0 removed [ 150.962782][ T5137] team0: Port device team_slave_1 removed [ 150.977937][ T5137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.985596][ T5137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.004982][ T5137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.012715][ T5137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.072527][ T5137] bond1: (slave vlan2): Releasing active interface [ 151.308722][ T5143] vlan2: entered allmulticast mode [ 151.821416][ T5146] loop4: detected capacity change from 0 to 512 [ 151.829788][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.838300][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.929260][ T5148] loop2: detected capacity change from 0 to 1024 [ 151.943220][ T5148] EXT4-fs: Ignoring removed orlov option [ 151.992782][ T5148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.787571][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.942243][ T5162] bridge_slave_0: left promiscuous mode [ 152.948924][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.965201][ T5162] bridge_slave_1: left allmulticast mode [ 152.966686][ T5164] loop1: detected capacity change from 0 to 1024 [ 152.971031][ T5162] bridge_slave_1: left promiscuous mode [ 152.978123][ T5164] EXT4-fs: quotafile must be on filesystem root [ 152.983173][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.056489][ T5165] loop2: detected capacity change from 0 to 512 [ 153.215786][ T5165] EXT4-fs (loop2): orphan cleanup on readonly fs [ 153.223458][ T5165] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.507: Failed to acquire dquot type 1 [ 153.238221][ T5165] EXT4-fs (loop2): 1 truncate cleaned up [ 153.325083][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 153.948000][ T5165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.968139][ T5162] bond0: (slave bond_slave_0): Releasing backup interface [ 153.980508][ T5162] bond0: (slave bond_slave_1): Releasing backup interface [ 153.994891][ T5162] team0: Port device team_slave_0 removed [ 154.009423][ T5162] team0: Port device team_slave_1 removed [ 154.017519][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.024972][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.036519][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.044050][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.169778][ T5171] bridge_slave_0: left allmulticast mode [ 154.175775][ T5171] bridge_slave_0: left promiscuous mode [ 154.181664][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.218616][ T5171] bridge_slave_1: left allmulticast mode [ 154.224584][ T5171] bridge_slave_1: left promiscuous mode [ 154.230307][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.285826][ T5171] bond0: (slave bond_slave_0): Releasing backup interface [ 154.298441][ T5171] bond0: (slave bond_slave_1): Releasing backup interface [ 154.311407][ T5171] team0: Port device team_slave_0 removed [ 154.322260][ T5171] team0: Port device team_slave_1 removed [ 154.329557][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.337067][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.609711][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.617163][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.654039][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.861909][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 155.382653][ T5189] vlan2: entered allmulticast mode [ 155.575926][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 155.575945][ T29] audit: type=1326 audit(1759323502.000:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 155.606357][ T29] audit: type=1326 audit(1759323502.000:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 155.629657][ T29] audit: type=1326 audit(1759323502.000:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 155.652950][ T29] audit: type=1326 audit(1759323502.000:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 155.676681][ T29] audit: type=1326 audit(1759323502.000:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 155.708721][ T5191] loop3: detected capacity change from 0 to 512 [ 155.807031][ T5191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.820022][ T5191] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.854722][ T29] audit: type=1326 audit(1759323502.280:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 155.878304][ T29] audit: type=1326 audit(1759323502.280:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 155.901648][ T29] audit: type=1326 audit(1759323502.280:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 156.039637][ T29] audit: type=1326 audit(1759323502.350:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 156.063121][ T29] audit: type=1326 audit(1759323502.350:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 156.115883][ T5188] syzkaller0: entered allmulticast mode [ 156.335728][ T5217] loop2: detected capacity change from 0 to 512 [ 156.354326][ T5218] loop1: detected capacity change from 0 to 512 [ 156.362658][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.371316][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.454885][ T5217] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 156.477635][ T5217] System zones: 0-7 [ 156.487529][ T5217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.234251][ T5195] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 157.268253][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.279590][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.429042][ T5222] loop4: detected capacity change from 0 to 256 [ 157.442700][ T5226] loop3: detected capacity change from 0 to 256 [ 157.787376][ T5240] vlan2: entered allmulticast mode [ 157.792606][ T5240] bridge_slave_0: entered allmulticast mode [ 159.532652][ T5257] vlan2: entered allmulticast mode [ 159.537888][ T5257] bridge0: entered allmulticast mode [ 159.760128][ T5266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 159.828658][ T5269] loop4: detected capacity change from 0 to 1024 [ 159.835705][ T5269] EXT4-fs: quotafile must be on filesystem root [ 159.975599][ T5269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 160.157800][ T5277] loop4: detected capacity change from 0 to 1024 [ 160.164671][ T5277] EXT4-fs: Ignoring removed i_version option [ 160.171250][ T5277] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.185875][ T5277] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.545: Invalid block bitmap block 0 in block_group 0 [ 160.199581][ T5277] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.545: Failed to acquire dquot type 0 [ 160.211307][ T5277] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.545: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.225698][ T5277] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.545: Invalid inode bitmap blk 0 in block_group 0 [ 160.238397][ T5277] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 160.247223][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 160.259656][ T5277] EXT4-fs (loop4): 1 orphan inode deleted [ 160.266287][ T5277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.776840][ T5291] vlan3: entered allmulticast mode [ 160.971920][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.164090][ T5297] syz_tun: entered allmulticast mode [ 161.186703][ T5296] syz_tun: left allmulticast mode [ 161.237938][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 161.237953][ T29] audit: type=1326 audit(1759323507.660:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.267621][ T29] audit: type=1326 audit(1759323507.660:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.292452][ T29] audit: type=1326 audit(1759323507.660:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.312255][ T5303] loop1: detected capacity change from 0 to 1024 [ 161.317282][ T29] audit: type=1326 audit(1759323507.660:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.337132][ T5303] EXT4-fs: Ignoring removed orlov option [ 161.347788][ T29] audit: type=1326 audit(1759323507.660:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.376832][ T29] audit: type=1326 audit(1759323507.660:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.400090][ T29] audit: type=1326 audit(1759323507.660:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.423382][ T29] audit: type=1326 audit(1759323507.660:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.449382][ T29] audit: type=1326 audit(1759323507.870:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.472959][ T29] audit: type=1326 audit(1759323507.870:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 161.500035][ T5303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.598509][ T5311] loop4: detected capacity change from 0 to 512 [ 161.720362][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.744140][ T5331] syzkaller0: entered allmulticast mode [ 163.330480][ T5344] vlan2: entered allmulticast mode [ 163.859916][ T5351] loop4: detected capacity change from 0 to 512 [ 163.879774][ T5351] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.887192][ T5351] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.568: Failed to acquire dquot type 1 [ 163.900017][ T5351] EXT4-fs (loop4): 1 truncate cleaned up [ 163.907703][ T5351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.931888][ T5359] loop2: detected capacity change from 0 to 256 [ 165.558857][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.696320][ T5374] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 165.718943][ T5374] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 166.793272][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 166.793289][ T29] audit: type=1400 audit(1759323513.210:548): avc: denied { name_bind } for pid=5389 comm="syz.3.582" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 166.934531][ T5390] syzkaller1: entered promiscuous mode [ 166.940073][ T5390] syzkaller1: entered allmulticast mode [ 167.982795][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 168.533379][ T5433] loop3: detected capacity change from 0 to 256 [ 169.486755][ T5456] loop3: detected capacity change from 0 to 512 [ 169.542493][ T5456] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.550026][ T5456] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 169.560640][ T5456] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 169.570057][ T5456] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.604: Failed to acquire dquot type 1 [ 169.584441][ T5456] EXT4-fs (loop3): 1 truncate cleaned up [ 169.596815][ T5456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.808108][ T5455] loop1: detected capacity change from 0 to 1024 [ 169.946345][ T5455] EXT4-fs: Ignoring removed i_version option [ 169.972759][ T5455] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.423352][ T5455] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.603: Invalid block bitmap block 0 in block_group 0 [ 170.493993][ T5455] Quota error (device loop1): write_blk: dquota write failed [ 170.501545][ T5455] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 170.595189][ T5455] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.603: Failed to acquire dquot type 0 [ 170.660461][ T5455] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.603: Freeing blocks not in datazone - block = 0, count = 4096 [ 170.725327][ T5455] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.603: Invalid inode bitmap blk 0 in block_group 0 [ 170.744496][ T56] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 170.753600][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 170.821937][ T5455] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 170.883839][ T5455] EXT4-fs (loop1): 1 orphan inode deleted [ 170.907676][ T5455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.981086][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.123854][ T5480] loop3: detected capacity change from 0 to 512 [ 171.978630][ T5495] loop3: detected capacity change from 0 to 256 [ 172.986303][ T5519] loop4: detected capacity change from 0 to 512 [ 173.206950][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.279197][ T5553] loop3: detected capacity change from 0 to 512 [ 174.325657][ T5553] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 174.368548][ T5553] System zones: 0-7 [ 174.440892][ T5557] loop4: detected capacity change from 0 to 512 [ 174.627675][ T5557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.635216][ T5557] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 174.645807][ T5557] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.655529][ T5557] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.636: Failed to acquire dquot type 1 [ 174.668722][ T5557] EXT4-fs (loop4): 1 truncate cleaned up [ 174.677684][ T5557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.761361][ T5553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.692935][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.826337][ T5566] loop3: detected capacity change from 0 to 1024 [ 175.853579][ T5566] EXT4-fs: Ignoring removed orlov option [ 176.016865][ T5566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.368087][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.788451][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.287266][ T5590] loop1: detected capacity change from 0 to 512 [ 178.284204][ T29] audit: type=1326 audit(1759323524.590:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 178.307548][ T29] audit: type=1326 audit(1759323524.590:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 179.036601][ T5592] loop3: detected capacity change from 0 to 512 [ 179.133809][ T5592] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.141574][ T5592] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 179.152654][ T5592] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 179.162279][ T5592] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.646: Failed to acquire dquot type 1 [ 179.247426][ T5590] EXT4-fs (loop1): orphan cleanup on readonly fs [ 179.263385][ T5592] EXT4-fs (loop3): 1 truncate cleaned up [ 179.269355][ T5590] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 179.279955][ T5590] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 179.281550][ T29] audit: type=1326 audit(1759323525.450:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 179.289476][ T5590] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.645: Failed to acquire dquot type 1 [ 179.312909][ T29] audit: type=1326 audit(1759323525.520:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5593 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beebeec9 code=0x7ffc0000 [ 179.335580][ T5590] EXT4-fs (loop1): 1 truncate cleaned up [ 180.413096][ T5592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.666677][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.685846][ T5590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.794850][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.028496][ T5615] loop4: detected capacity change from 0 to 1024 [ 181.038822][ T5616] FAT-fs (loop7): unable to read boot sector [ 181.052229][ T5615] EXT4-fs: Ignoring removed i_version option [ 181.088278][ T5615] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.205851][ T5615] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.653: Invalid block bitmap block 0 in block_group 0 [ 181.220263][ T5615] __quota_error: 25 callbacks suppressed [ 181.220281][ T5615] Quota error (device loop4): write_blk: dquota write failed [ 181.233572][ T5615] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 181.243919][ T5615] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.653: Failed to acquire dquot type 0 [ 181.262624][ T5615] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.653: Freeing blocks not in datazone - block = 0, count = 4096 [ 181.277352][ T5615] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.653: Invalid inode bitmap blk 0 in block_group 0 [ 181.291158][ T5615] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 181.300659][ T5615] EXT4-fs (loop4): 1 orphan inode deleted [ 181.307339][ T5615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.391437][ T4324] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 181.400654][ T4324] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:10: Failed to release dquot type 0 [ 181.816419][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.325223][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 182.516571][ T29] audit: type=1400 audit(1759323528.940:578): avc: denied { bind } for pid=5652 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.686356][ T5661] loop2: detected capacity change from 0 to 512 [ 182.797518][ T5661] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.804576][ T5661] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 182.815023][ T5661] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 182.824525][ T5661] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.662: Failed to acquire dquot type 1 [ 183.448792][ T5670] netlink: 148 bytes leftover after parsing attributes in process `syz.1.670'. [ 183.461599][ T5661] EXT4-fs (loop2): 1 truncate cleaned up [ 183.469836][ T5661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.243177][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.395778][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 184.692224][ T5697] FAT-fs (loop5): unable to read boot sector [ 185.159719][ T5695] loop4: detected capacity change from 0 to 256 [ 186.647505][ T5722] loop4: detected capacity change from 0 to 512 [ 186.669354][ T5722] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.681295][ T5722] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 186.691954][ T5722] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 186.701657][ T5722] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.687: Failed to acquire dquot type 1 [ 186.721470][ T5722] EXT4-fs (loop4): 1 truncate cleaned up [ 186.729820][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.094991][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.121017][ T5734] loop1: detected capacity change from 0 to 512 [ 188.201125][ T5734] EXT4-fs (loop1): orphan cleanup on readonly fs [ 188.208791][ T5734] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 188.219640][ T5734] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 188.229611][ T5734] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.689: Failed to acquire dquot type 1 [ 188.242900][ T5734] EXT4-fs (loop1): 1 truncate cleaned up [ 189.065681][ T5734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.206138][ T5739] syz_tun: entered allmulticast mode [ 189.242386][ T5738] syz_tun: left allmulticast mode [ 189.716497][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.824402][ T5744] loop4: detected capacity change from 0 to 512 [ 190.211076][ T29] audit: type=1400 audit(1759323536.630:579): avc: denied { setcheckreqprot } for pid=5753 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.433568][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 190.861936][ T5749] loop3: detected capacity change from 0 to 256 [ 191.264497][ T5780] FAT-fs (loop9): unable to read boot sector [ 191.480179][ T5782] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.619801][ T29] audit: type=1400 audit(1759323538.040:580): avc: denied { ioctl } for pid=5781 comm="syz.2.707" path="socket:[13733]" dev="sockfs" ino=13733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.724099][ T5791] loop3: detected capacity change from 0 to 1024 [ 191.777665][ T5791] EXT4-fs: Ignoring removed i_version option [ 191.814483][ T5791] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.899196][ T5791] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.708: Invalid block bitmap block 0 in block_group 0 [ 191.932147][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 191.941730][ T5791] Quota error (device loop3): write_blk: dquota write failed [ 191.949368][ T5791] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 191.959730][ T5800] netlink: 148 bytes leftover after parsing attributes in process `syz.4.711'. [ 191.979729][ T5791] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.708: Failed to acquire dquot type 0 [ 192.028274][ T5791] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.708: Freeing blocks not in datazone - block = 0, count = 4096 [ 192.182895][ T5791] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.708: Invalid inode bitmap blk 0 in block_group 0 [ 192.195715][ T31] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 192.204839][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 192.236036][ T5791] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 192.285365][ T5810] loop4: detected capacity change from 0 to 256 [ 193.174871][ T5791] EXT4-fs (loop3): 1 orphan inode deleted [ 193.204645][ T5791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.216407][ T5829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'. [ 194.288486][ T5824] loop4: detected capacity change from 0 to 256 [ 194.465549][ T5835] vlan2: entered allmulticast mode [ 195.863009][ T5845] loop4: detected capacity change from 0 to 256 [ 195.906019][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 196.178021][ T5867] syz_tun: entered allmulticast mode [ 196.195310][ T5866] syz_tun: left allmulticast mode [ 197.646302][ T5893] loop4: detected capacity change from 0 to 256 [ 198.497134][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.649782][ T29] audit: type=1400 audit(1759323545.070:581): avc: denied { bind } for pid=5905 comm="syz.1.744" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.741603][ T5907] loop1: detected capacity change from 0 to 1024 [ 198.771163][ T5907] ext4: Unknown parameter 'uid<00000000000000000000' [ 199.194897][ T29] audit: type=1400 audit(1759323545.070:582): avc: denied { name_bind } for pid=5905 comm="syz.1.744" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 199.216304][ T29] audit: type=1400 audit(1759323545.070:583): avc: denied { node_bind } for pid=5905 comm="syz.1.744" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 199.239397][ T29] audit: type=1400 audit(1759323545.120:584): avc: denied { map } for pid=5908 comm="syz.0.745" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 199.264171][ T29] audit: type=1400 audit(1759323545.120:585): avc: denied { read write } for pid=5908 comm="syz.0.745" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 199.289010][ T29] audit: type=1400 audit(1759323545.190:586): avc: denied { mounton } for pid=5905 comm="syz.1.744" path="/145/file0" dev="tmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.312773][ T29] audit: type=1326 audit(1759323545.320:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 199.336470][ T29] audit: type=1326 audit(1759323545.320:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 199.360563][ T29] audit: type=1326 audit(1759323545.320:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 199.383978][ T29] audit: type=1326 audit(1759323545.320:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz.0.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47344eeec9 code=0x7ffc0000 [ 199.457994][ T5923] vlan3: entered allmulticast mode [ 199.463302][ T5923] bond0: entered allmulticast mode [ 199.468571][ T5923] bond_slave_0: entered allmulticast mode [ 199.474416][ T5923] bond_slave_1: entered allmulticast mode [ 199.599473][ T5930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.608518][ T5930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.626922][ T5931] loop2: detected capacity change from 0 to 512 [ 202.453191][ T5972] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 202.896594][ T5982] syzkaller0: entered allmulticast mode [ 202.953250][ T5984] loop3: detected capacity change from 0 to 8192 [ 202.970422][ T5984] vfat: Unknown parameter '@' [ 203.147122][ T5990] loop3: detected capacity change from 0 to 1024 [ 203.155760][ T5990] EXT4-fs: Ignoring removed orlov option [ 203.565475][ T5993] FAT-fs (loop3): bogus number of reserved sectors [ 203.568395][ T5990] EXT4-fs: Ignoring removed nobh option [ 203.572240][ T5993] FAT-fs (loop3): Can't find a valid FAT filesystem [ 203.577868][ T5990] EXT4-fs: Ignoring removed bh option [ 203.640843][ T5990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.734554][ T6005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6005 comm=syz.3.770 [ 203.777033][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 203.777094][ T29] audit: type=1400 audit(1759323550.200:689): avc: denied { setopt } for pid=5989 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.252206][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.088184][ T6018] loop2: detected capacity change from 0 to 256 [ 205.581806][ T29] audit: type=1400 audit(1759323552.000:690): avc: denied { connect } for pid=6027 comm="syz.2.779" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.604204][ T29] audit: type=1400 audit(1759323552.000:691): avc: denied { name_connect } for pid=6027 comm="syz.2.779" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 205.672465][ T29] audit: type=1400 audit(1759323552.050:692): avc: denied { read } for pid=6027 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.708103][ T6030] syzkaller0: entered allmulticast mode [ 205.711246][ T29] audit: type=1400 audit(1759323552.130:693): avc: denied { getopt } for pid=6027 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.733597][ T29] audit: type=1400 audit(1759323552.130:694): avc: denied { name_connect } for pid=6027 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 205.962566][ T6050] loop1: detected capacity change from 0 to 512 [ 205.985152][ T6054] loop4: detected capacity change from 0 to 1024 [ 205.991867][ T6054] EXT4-fs: Ignoring removed i_version option [ 206.003050][ T6054] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.103032][ T6050] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 206.112896][ T6054] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.785: Invalid block bitmap block 0 in block_group 0 [ 206.127218][ T6054] Quota error (device loop4): write_blk: dquota write failed [ 206.134736][ T6054] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 206.144984][ T6054] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.785: Failed to acquire dquot type 0 [ 206.155590][ T6050] System zones: 0-7 [ 206.163173][ T6050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.283137][ T6060] loop3: detected capacity change from 0 to 1024 [ 206.303712][ T6060] EXT4-fs: Ignoring removed orlov option [ 206.514982][ T6054] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.785: Freeing blocks not in datazone - block = 0, count = 4096 [ 206.529900][ T6054] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.785: Invalid inode bitmap blk 0 in block_group 0 [ 206.543819][ T31] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 206.552859][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 206.626248][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.650025][ T6054] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 206.659014][ T6054] EXT4-fs (loop4): 1 orphan inode deleted [ 206.665479][ T6054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.885450][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.080249][ T29] audit: type=1326 audit(1759323553.500:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6076 comm="syz.2.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 207.167365][ T6080] loop4: detected capacity change from 0 to 512 [ 207.291600][ T6080] EXT4-fs (loop4): orphan cleanup on readonly fs [ 207.301127][ T6080] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.793: Failed to acquire dquot type 1 [ 207.315425][ T6080] EXT4-fs (loop4): 1 truncate cleaned up [ 208.043100][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.067053][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.513734][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.732477][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.829654][ T6099] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.898308][ T6099] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 208.951979][ T6103] vlan2: entered allmulticast mode [ 208.970196][ T6103] bridge0: entered promiscuous mode [ 208.988075][ T6103] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 209.014676][ T6095] loop3: detected capacity change from 0 to 256 [ 209.135699][ T6116] loop4: detected capacity change from 0 to 1024 [ 209.151655][ T6116] EXT4-fs: Ignoring removed orlov option [ 209.165743][ T6116] EXT4-fs: Ignoring removed nobh option [ 209.171561][ T6116] EXT4-fs: Ignoring removed bh option [ 209.225832][ T6116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.331498][ T6122] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6122 comm=syz.4.805 [ 209.379138][ T6123] loop3: detected capacity change from 0 to 256 [ 209.556737][ T6131] loop1: detected capacity change from 0 to 512 [ 209.749643][ T6138] loop2: detected capacity change from 0 to 512 [ 210.003455][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.245398][ T6144] vlan3: entered allmulticast mode [ 211.215909][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 211.215928][ T29] audit: type=1326 audit(1759323557.640:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.245932][ T29] audit: type=1326 audit(1759323557.640:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.269498][ T29] audit: type=1326 audit(1759323557.640:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.293103][ T29] audit: type=1326 audit(1759323557.640:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.316808][ T29] audit: type=1326 audit(1759323557.640:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.351828][ T29] audit: type=1326 audit(1759323557.640:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.375384][ T29] audit: type=1326 audit(1759323557.640:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.399010][ T29] audit: type=1326 audit(1759323557.640:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.422667][ T29] audit: type=1326 audit(1759323557.720:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.446102][ T29] audit: type=1326 audit(1759323557.720:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6173 comm="syz.2.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47bd3deec9 code=0x7ffc0000 [ 211.589393][ T6171] loop4: detected capacity change from 0 to 256 [ 211.710222][ T6187] loop2: detected capacity change from 0 to 512 [ 211.757385][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.769852][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.835222][ T6180] netlink: 'syz.3.825': attribute type 4 has an invalid length. [ 211.859000][ T6180] netlink: 'syz.3.825': attribute type 4 has an invalid length. [ 212.749892][ T6201] vlan2: entered allmulticast mode [ 215.081855][ T6241] loop4: detected capacity change from 0 to 1024 [ 215.096268][ T6241] EXT4-fs: Ignoring removed orlov option [ 215.137790][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.497013][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 215.541760][ T6244] ================================================================== [ 215.549926][ T6244] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 215.558388][ T6244] [ 215.560736][ T6244] write to 0xffff88811805f5e8 of 8 bytes by task 6241 on cpu 1: [ 215.568828][ T6244] filemap_splice_read+0x4f4/0x740 [ 215.574002][ T6244] ext4_file_splice_read+0x8f/0xb0 [ 215.579147][ T6244] splice_direct_to_actor+0x26c/0x680 [ 215.584551][ T6244] do_splice_direct+0xda/0x150 [ 215.589449][ T6244] do_sendfile+0x380/0x650 [ 215.594083][ T6244] __x64_sys_sendfile64+0x105/0x150 [ 215.599756][ T6244] x64_sys_call+0x2bb4/0x3000 [ 215.604501][ T6244] do_syscall_64+0xd2/0x200 [ 215.609139][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.615072][ T6244] [ 215.617427][ T6244] write to 0xffff88811805f5e8 of 8 bytes by task 6244 on cpu 0: [ 215.625091][ T6244] filemap_splice_read+0x4f4/0x740 [ 215.630262][ T6244] ext4_file_splice_read+0x8f/0xb0 [ 215.635435][ T6244] splice_direct_to_actor+0x26c/0x680 [ 215.641035][ T6244] do_splice_direct+0xda/0x150 [ 215.646107][ T6244] do_sendfile+0x380/0x650 [ 215.650656][ T6244] __x64_sys_sendfile64+0x105/0x150 [ 215.656069][ T6244] x64_sys_call+0x2bb4/0x3000 [ 215.660974][ T6244] do_syscall_64+0xd2/0x200 [ 215.665555][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.671485][ T6244] [ 215.673839][ T6244] value changed: 0x000000000000051f -> 0x0000000000000520 [ 215.680988][ T6244] [ 215.683343][ T6244] Reported by Kernel Concurrency Sanitizer on: [ 215.689627][ T6244] CPU: 0 UID: 0 PID: 6244 Comm: syz.4.844 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.700224][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.710312][ T6244] ================================================================== [ 215.963778][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.