last executing test programs: 1m21.592515613s ago: executing program 1 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 1m21.414029016s ago: executing program 1 (id=324): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1m21.253128588s ago: executing program 1 (id=327): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000280)={0xfeff, 0x8, 0x8, 0xfffe, 0x11, "0100000000000080"}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 1m20.358323161s ago: executing program 1 (id=360): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 1m20.115783495s ago: executing program 1 (id=364): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='mm_page_alloc\x00', r2, 0x0, 0xf29}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 1m19.794362229s ago: executing program 1 (id=369): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1m19.766390689s ago: executing program 32 (id=369): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 1m8.584451243s ago: executing program 4 (id=632): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m8.491318334s ago: executing program 4 (id=636): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4100, 0x1004}], 0x1) 1m8.384754645s ago: executing program 4 (id=640): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 1m8.251026847s ago: executing program 4 (id=646): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m8.204423848s ago: executing program 4 (id=647): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x18) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 1m7.945034752s ago: executing program 4 (id=650): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x109000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1m7.944794932s ago: executing program 33 (id=650): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x109000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 41.480076067s ago: executing program 6 (id=1415): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 41.338128109s ago: executing program 6 (id=1418): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) io_uring_setup(0x1694, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 41.28019687s ago: executing program 6 (id=1422): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) 41.175298891s ago: executing program 6 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ec) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 41.121587072s ago: executing program 6 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) fallocate(r2, 0x0, 0x0, 0x2c2) 40.934389865s ago: executing program 6 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 40.934270095s ago: executing program 34 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 1.274491972s ago: executing program 0 (id=2458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) dup3(r2, r1, 0x0) 1.232079722s ago: executing program 0 (id=2460): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r1 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', 0x0, 0x111) syz_emit_ethernet(0x32, &(0x7f0000004ec0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x1200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000000000000529f00000000000003"]) 1.123984874s ago: executing program 0 (id=2462): r0 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x2, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) 891.780027ms ago: executing program 7 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 849.951768ms ago: executing program 7 (id=2470): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 842.292908ms ago: executing program 0 (id=2471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 790.623429ms ago: executing program 5 (id=2473): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r1 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', 0x0, 0x111) syz_emit_ethernet(0x32, &(0x7f0000004ec0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x1200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000000000000529f00000000000003"]) 767.031559ms ago: executing program 0 (id=2474): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 728.54631ms ago: executing program 3 (id=2476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000a00)='\x00', 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe0000000) 721.25818ms ago: executing program 7 (id=2477): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x2}}, 0x5, 0x12, 0x40, 0x3}, 0x9c) r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r0, 0x92c, 0x59f0, 0x44, 0x0, 0x0) 702.24775ms ago: executing program 0 (id=2478): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 646.559841ms ago: executing program 7 (id=2479): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 456.675654ms ago: executing program 5 (id=2480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = semget$private(0x0, 0x3, 0x0) semop(r2, &(0x7f0000000140)=[{0x0, 0xfffb}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)) 456.058484ms ago: executing program 3 (id=2481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 439.745454ms ago: executing program 7 (id=2482): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r0, r1, 0x0) 242.371286ms ago: executing program 7 (id=2484): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 242.118186ms ago: executing program 3 (id=2485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xffee, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_ACT={0x60, 0x4, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 238.978937ms ago: executing program 2 (id=2486): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000280)=""/103, 0x67}], 0x2, 0x0, 0x0) 218.705107ms ago: executing program 2 (id=2487): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 197.645967ms ago: executing program 2 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 191.258887ms ago: executing program 5 (id=2489): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffc9c, 0x2, {0x0, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) 134.675578ms ago: executing program 3 (id=2490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x959, 0x4, 0x7, 0x6286, 0x3, 0x3, 0x9, 0x9, 0xd}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 134.237928ms ago: executing program 2 (id=2491): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 122.998988ms ago: executing program 5 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 105.367209ms ago: executing program 2 (id=2493): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) setresuid(0xee00, 0xee00, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 81.374379ms ago: executing program 3 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 67.373229ms ago: executing program 5 (id=2495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 44.73228ms ago: executing program 5 (id=2496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 14.86058ms ago: executing program 2 (id=2497): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 3 (id=2498): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): comm="gtp" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=13882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.297413][ T6166] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.320278][ T6168] rdma_op ffff88811afbcd80 conn xmit_rdma 0000000000000000 [ 75.347310][ T29] audit: type=1400 audit(1753095855.733:897): avc: denied { mount } for pid=6171 comm="syz.3.908" name="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 75.370648][ T29] audit: type=1400 audit(1753095855.733:898): avc: denied { search } for pid=6171 comm="syz.3.908" name="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.393082][ T29] audit: type=1400 audit(1753095855.733:899): avc: denied { search } for pid=6171 comm="syz.3.908" name="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.417451][ T29] audit: type=1400 audit(1753095855.733:900): avc: denied { read open } for pid=6171 comm="syz.3.908" path="/" dev="configfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.444616][ T6166] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.460837][ T29] audit: type=1400 audit(1753095855.853:901): avc: denied { write } for pid=6174 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.515160][ T6179] openvswitch: netlink: Message has 6 unknown bytes. [ 75.540742][ T6166] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.627854][ T6166] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.731917][ T6166] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.755844][ T6166] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.772749][ T6166] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.787729][ T6166] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.862642][ T6197] netlink: 'syz.5.920': attribute type 4 has an invalid length. [ 75.871259][ T6197] netlink: 152 bytes leftover after parsing attributes in process `syz.5.920'. [ 75.898191][ T6197] : renamed from bond0 (while UP) [ 76.320127][ T29] audit: type=1400 audit(1753095856.703:902): avc: denied { ioctl } for pid=6234 comm="syz.5.935" path="socket:[14074]" dev="sockfs" ino=14074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.599166][ T6264] loop5: detected capacity change from 0 to 128 [ 76.632679][ T6264] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.682132][ T6264] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.765905][ T4598] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.122767][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.970'. [ 77.138597][ T6314] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 77.228899][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 77.254724][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 77.422383][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'. [ 77.432267][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.984'. [ 77.442564][ T6346] netlink: 108 bytes leftover after parsing attributes in process `syz.5.984'. [ 77.451686][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.984'. [ 77.473478][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.984'. [ 77.473711][ T6351] netlink: 'syz.6.987': attribute type 10 has an invalid length. [ 77.534692][ T6351] team0: Port device geneve1 added [ 77.600675][ T6359] loop5: detected capacity change from 0 to 1024 [ 77.660254][ T6359] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 77.715131][ T6359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.825170][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.852287][ T6384] loop2: detected capacity change from 0 to 1024 [ 77.885752][ T6384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.959850][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.982833][ T6390] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 77.999836][ T6392] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.081656][ T6392] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.142823][ T6392] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.214225][ T6392] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.483234][ T6392] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.503738][ T6392] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.529717][ T6392] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.558760][ T6392] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.839642][ T6467] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 79.322670][ T6498] program syz.2.1042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.417527][ T6505] futex_wake_op: syz.6.1046 tries to shift op by -1; fix this program [ 79.636633][ T6513] __nla_validate_parse: 8 callbacks suppressed [ 79.636712][ T6513] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1049'. [ 79.725372][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 79.725457][ T29] audit: type=1400 audit(1753095860.113:939): avc: denied { relabelfrom } for pid=6522 comm="syz.0.1054" name="" dev="pipefs" ino=15605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 79.783929][ T29] audit: type=1400 audit(1753095860.173:940): avc: denied { validate_trans } for pid=6527 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.829429][ T6531] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.922330][ T6531] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.981980][ T6531] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.064366][ T6531] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.179310][ T6531] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.200656][ T29] audit: type=1326 audit(1753095860.583:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 80.224244][ T29] audit: type=1326 audit(1753095860.583:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 80.248184][ T29] audit: type=1326 audit(1753095860.583:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 80.272191][ T29] audit: type=1326 audit(1753095860.583:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 80.296965][ T29] audit: type=1326 audit(1753095860.583:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6552 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 80.318229][ T6531] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.408696][ T6531] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.440357][ T6567] ref_ctr increment failed for inode: 0x16d offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888109044780 [ 80.453169][ T6531] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.463787][ T6564] uprobe: syz.6.1075:6564 failed to unregister, leaking uprobe [ 80.573432][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 80.686006][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1081'. [ 80.696051][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1081'. [ 80.759186][ T6589] netlink: 'syz.6.1084': attribute type 4 has an invalid length. [ 80.782014][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 80.890877][ T6595] only policy match revision 0 supported [ 80.890951][ T6595] unable to load match [ 80.924899][ T29] audit: type=1326 audit(1753095861.313:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5cd5e9a9 code=0x7ffc0000 [ 80.949295][ T29] audit: type=1326 audit(1753095861.313:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5cd5e9a9 code=0x7ffc0000 [ 80.973283][ T29] audit: type=1326 audit(1753095861.313:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f5cd5e9a9 code=0x7ffc0000 [ 81.253294][ T6618] loop6: detected capacity change from 0 to 2048 [ 81.313947][ T3546] loop6: p1 < > p4 [ 81.321358][ T3546] loop6: p4 size 8388608 extends beyond EOD, truncated [ 81.346701][ T6618] loop6: p1 < > p4 [ 81.351979][ T6618] loop6: p4 size 8388608 extends beyond EOD, truncated [ 81.492014][ T4611] udevd[4611]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 81.505083][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 81.524348][ T4612] udevd[4612]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 81.557318][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 81.679934][ T6640] SELinux: syz.0.1108 (6640) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.698386][ T6642] loop5: detected capacity change from 0 to 128 [ 81.719321][ T6642] EXT4-fs: Ignoring removed nobh option [ 81.741729][ T6642] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.761238][ T6642] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.929379][ T4598] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.082497][ T6675] loop6: detected capacity change from 0 to 512 [ 82.089698][ T6675] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.102708][ T6675] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.111133][ T6671] vhci_hcd: invalid port number 96 [ 82.116415][ T6671] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 82.135308][ T6675] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 82.162962][ T2996] udevd[2996]: worker [3546] terminated by signal 33 (Unknown signal 33) [ 82.179051][ T2996] udevd[2996]: worker [3546] failed while handling '/devices/virtual/block/loop6' [ 82.199412][ T6675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 82.251269][ T6675] System zones: 1-12 [ 82.264715][ T6675] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.1123: corrupted in-inode xattr: e_value size too large [ 82.303383][ T6675] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1123: couldn't read orphan inode 15 (err -117) [ 82.346736][ T6675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.621644][ T5469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.728652][ T6710] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.799946][ T6716] netlink: 'syz.6.1143': attribute type 1 has an invalid length. [ 82.808363][ T6716] netlink: 'syz.6.1143': attribute type 4 has an invalid length. [ 82.816352][ T6716] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1143'. [ 82.876432][ T6725] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.954835][ T6735] loop3: detected capacity change from 0 to 128 [ 82.965853][ T6725] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.983313][ T6735] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.010979][ T6735] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.043443][ T6725] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.075672][ T6741] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.113424][ T6725] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.131810][ T6743] only policy match revision 0 supported [ 83.131853][ T6743] unable to load match [ 83.149133][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.172132][ T6741] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.219390][ T6725] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.238195][ T6725] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.254068][ T6741] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.276087][ T6725] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.293213][ T6725] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.312530][ T6741] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.405699][ T6741] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.430091][ T6741] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458434][ T6741] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.473859][ T6741] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.543715][ T6772] netlink: 'syz.6.1168': attribute type 1 has an invalid length. [ 83.553161][ T6772] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1168'. [ 83.567601][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 84.363796][ T6778] loop2: detected capacity change from 0 to 256 [ 84.387546][ T6778] FAT-fs (loop2): bogus logical sector size 133 [ 84.394080][ T6778] FAT-fs (loop2): Can't find a valid FAT filesystem [ 84.402467][ T6784] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.415579][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 84.443395][ T6782] loop3: detected capacity change from 0 to 164 [ 84.454132][ T6786] erspan0: entered promiscuous mode [ 84.463790][ T6782] Unsupported NM flag settings (8) [ 84.490376][ T6786] macvtap1: entered promiscuous mode [ 84.496136][ T6786] macvtap1: entered allmulticast mode [ 84.502009][ T6786] erspan0: entered allmulticast mode [ 84.527853][ T6784] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.615795][ T6784] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.662646][ T6804] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1182'. [ 84.684666][ T6784] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.724445][ T6812] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 84.797538][ T6784] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.826150][ T6819] bond1: (slave gretap1): making interface the new active one [ 84.834249][ T6819] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 84.845729][ T6784] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.855191][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 84.855273][ T29] audit: type=1400 audit(1753095865.253:1016): avc: denied { read } for pid=6799 comm="syz.0.1181" path="socket:[16892]" dev="sockfs" ino=16892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.863487][ T6784] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.885684][ T29] audit: type=1400 audit(1753095865.253:1017): avc: denied { write } for pid=6799 comm="syz.0.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.925836][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1189'. [ 84.934929][ T6821] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1189'. [ 84.986877][ T6784] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.996437][ T6826] netlink: 'syz.3.1192': attribute type 7 has an invalid length. [ 85.004401][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 85.031786][ T6831] macvtap0: entered promiscuous mode [ 85.040480][ T6831] macvtap0: left promiscuous mode [ 85.078785][ T6835] all: renamed from lo (while UP) [ 85.140867][ T6830] Falling back ldisc for ttyS3. [ 85.185223][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1202'. [ 85.217084][ T6851] loop2: detected capacity change from 0 to 512 [ 85.236854][ T6851] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1204: casefold flag without casefold feature [ 85.252017][ T6851] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1204: couldn't read orphan inode 15 (err -117) [ 85.265245][ T6851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.300722][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.303313][ T6856] geneve2: entered promiscuous mode [ 85.340533][ T29] audit: type=1400 audit(1753095865.703:1018): avc: denied { cmd } for pid=6852 comm="syz.6.1205" path="socket:[17001]" dev="sockfs" ino=17001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.483212][ T6873] loop5: detected capacity change from 0 to 256 [ 85.521756][ T6873] vfat: Unknown parameter 'I' [ 85.619392][ T29] audit: type=1400 audit(1753095866.003:1019): avc: denied { module_request } for pid=6872 comm="syz.5.1214" kmod="arptable_vfat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.764632][ T6897] loop2: detected capacity change from 0 to 2048 [ 85.793196][ T6897] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.1225: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 85.819733][ T6897] EXT4-fs (loop2): Remounting filesystem read-only [ 85.826450][ T6897] EXT4-fs (loop2): get root inode failed [ 85.832300][ T6897] EXT4-fs (loop2): mount failed [ 85.970475][ T29] audit: type=1326 audit(1753095866.363:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 86.022755][ T29] audit: type=1326 audit(1753095866.383:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 86.047807][ T29] audit: type=1326 audit(1753095866.383:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 86.072819][ T29] audit: type=1326 audit(1753095866.393:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 86.096830][ T29] audit: type=1326 audit(1753095866.393:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 86.121398][ T29] audit: type=1326 audit(1753095866.393:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 86.358482][ T6939] loop2: detected capacity change from 0 to 1024 [ 86.385504][ T6939] netlink: 'syz.2.1244': attribute type 1 has an invalid length. [ 86.478742][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.487207][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.495162][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.522671][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.530506][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.537953][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.545418][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.552972][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.560489][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.568203][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.575668][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.583157][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.590607][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.598022][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.606791][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.614273][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.621776][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.629291][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.636823][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.644377][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.652021][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.659492][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.666974][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.674447][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.682517][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.690245][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.697793][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.705254][ T3381] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.729382][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 86.739324][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 86.760384][ T3381] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 86.786406][ T6960] fido_id[6960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.956511][ T6974] netlink: 'syz.2.1261': attribute type 21 has an invalid length. [ 86.991980][ T6974] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1261'. [ 87.001181][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 87.015149][ T6978] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.287104][ T6999] loop2: detected capacity change from 0 to 512 [ 87.327645][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'. [ 87.332874][ T7003] SELinux: ebitmap start bit (132096) is beyond the end of the bitmap (1472) [ 87.348312][ T7003] SELinux: failed to load policy [ 87.363380][ T7001] IPVS: Error joining to the multicast group [ 87.379636][ T6999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.395544][ T7009] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.404260][ T7009] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.422866][ T6999] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.536131][ T7019] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 87.546452][ T7019] batman_adv: batadv0: Adding interface: macvlan0 [ 87.553311][ T7019] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.579599][ T7019] batman_adv: batadv0: Interface activated: macvlan0 [ 87.726091][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.893606][ T7050] 9pnet_virtio: no channels available for device 127.0.0.1 [ 88.014375][ T7065] IPVS: Error joining to the multicast group [ 88.053655][ T7069] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 88.109337][ T7071] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.134156][ T7073] bridge0: port 3(batadv1) entered blocking state [ 88.140866][ T7073] bridge0: port 3(batadv1) entered disabled state [ 88.147740][ T7073] batadv1: entered allmulticast mode [ 88.154130][ T7073] batadv1: entered promiscuous mode [ 88.172352][ T7071] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.229910][ T7071] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.245277][ T7078] ref_ctr_offset mismatch. inode: 0x3f7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 88.292067][ T7071] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.579451][ T7071] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.613052][ T7071] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.631519][ T7071] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.646147][ T7071] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.656380][ T4333] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 88.666201][ T4333] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 88.803953][ T7107] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 88.817216][ T7107] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 88.829450][ T7107] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 88.860804][ T7109] loop5: detected capacity change from 0 to 1024 [ 88.896099][ T7109] netlink: 'syz.5.1318': attribute type 1 has an invalid length. [ 88.999265][ T7119] loop3: detected capacity change from 0 to 1024 [ 89.007311][ T7119] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.023580][ T7119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.048366][ T7116] SELinux: failed to load policy [ 89.071509][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.370247][ T7146] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 89.516089][ T7164] pimreg: entered allmulticast mode [ 89.530950][ T7164] pimreg: left allmulticast mode [ 89.866803][ T7201] loop6: detected capacity change from 0 to 512 [ 89.896713][ T7201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.912351][ T7201] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.933038][ T7201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.933045][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 89.933062][ T29] audit: type=1400 audit(1753095870.323:1128): avc: denied { remount } for pid=7200 comm="syz.6.1359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.972971][ T7201] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.1359: Abort forced by user [ 89.985440][ T7201] EXT4-fs (loop6): Remounting filesystem read-only [ 89.992493][ T7201] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 90.017240][ T5469] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.220515][ T7216] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 90.230287][ T29] audit: type=1400 audit(1753095870.613:1129): avc: denied { relabelto } for pid=7215 comm="syz.0.1364" name="207" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 90.257415][ T29] audit: type=1400 audit(1753095870.623:1130): avc: denied { associate } for pid=7215 comm="syz.0.1364" name="207" dev="tmpfs" ino=1080 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 90.335846][ T29] audit: type=1400 audit(1753095870.683:1131): avc: denied { remove_name } for pid=3924 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 90.364065][ T29] audit: type=1400 audit(1753095870.683:1132): avc: denied { rmdir } for pid=3924 comm="syz-executor" name="207" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 90.485726][ T29] audit: type=1326 audit(1753095870.863:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5cd5e9a9 code=0x7ffc0000 [ 90.509485][ T29] audit: type=1326 audit(1753095870.873:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7f5cd5e9a9 code=0x7ffc0000 [ 90.564502][ T29] audit: type=1326 audit(1753095870.933:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f5cd91265 code=0x7ffc0000 [ 90.588869][ T29] audit: type=1326 audit(1753095870.933:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5cd5e9a9 code=0x7ffc0000 [ 90.613261][ T29] audit: type=1326 audit(1753095870.933:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f5cd5e9a9 code=0x7ffc0000 [ 90.716154][ T7246] loop2: detected capacity change from 0 to 1024 [ 90.749472][ T7252] batadv_slave_1: entered promiscuous mode [ 90.761723][ T7246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.774549][ T7252] batadv_slave_1: left promiscuous mode [ 90.796915][ T7256] loop3: detected capacity change from 0 to 1024 [ 90.807767][ T7256] EXT4-fs: inline encryption not supported [ 90.903495][ T7256] EXT4-fs: Ignoring removed bh option [ 90.928742][ T7246] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1376: Allocating blocks 449-513 which overlap fs metadata [ 90.966638][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.996473][ T7245] EXT4-fs (loop2): pa ffff888106a7b8c0: logic 48, phys. 177, len 21 [ 91.004703][ T7245] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 91.054902][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.087366][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.273643][ T7302] netlink: 'syz.0.1398': attribute type 1 has an invalid length. [ 91.298918][ T7302] bond1: (slave gretap1): making interface the new active one [ 91.308206][ T7302] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 91.361231][ T7305] SELinux: ebitmap: truncated map [ 91.372016][ T7305] SELinux: failed to load policy [ 91.969200][ T7316] loop5: detected capacity change from 0 to 1024 [ 91.978319][ T7316] EXT4-fs: inline encryption not supported [ 91.989535][ T7316] EXT4-fs: Ignoring removed bh option [ 92.046944][ T7316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.085645][ T7326] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.123176][ T7329] __nla_validate_parse: 4 callbacks suppressed [ 92.123193][ T7329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 92.140072][ T7329] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 92.154227][ T7326] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.171121][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.231531][ T7326] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.282050][ T7326] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.329990][ T7326] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.350213][ T7326] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.362873][ T7326] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.374727][ T7326] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.456849][ T7350] loop6: detected capacity change from 0 to 164 [ 92.479093][ T7350] Unsupported NM flag settings (8) [ 92.593731][ T7354] infiniband syz!: set active [ 92.598513][ T7354] infiniband syz!: added team_slave_0 [ 92.672326][ T7354] RDS/IB: syz!: added [ 92.677388][ T7354] smc: adding ib device syz! with port count 1 [ 92.683986][ T7354] smc: ib device syz! port 1 has pnetid [ 92.809590][ T4375] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.918461][ T4375] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.972627][ T4375] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.012227][ T4375] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.098462][ T7409] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.139047][ T4375] bridge_slave_1: left allmulticast mode [ 93.144934][ T4375] bridge_slave_1: left promiscuous mode [ 93.150825][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.159632][ T4375] bridge_slave_0: left allmulticast mode [ 93.165554][ T4375] bridge_slave_0: left promiscuous mode [ 93.171345][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.263761][ T4375] team0: Port device geneve1 removed [ 93.312953][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.322888][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.332664][ T4375] bond0 (unregistering): Released all slaves [ 93.343300][ T7409] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.397667][ T4375] hsr_slave_0: left promiscuous mode [ 93.404006][ T4375] hsr_slave_1: left promiscuous mode [ 93.409651][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.417412][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.425044][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.432813][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.444650][ T4375] veth1_macvtap: left promiscuous mode [ 93.450279][ T4375] veth0_macvtap: left promiscuous mode [ 93.456057][ T4375] veth1_vlan: left promiscuous mode [ 93.461600][ T4375] veth0_vlan: left promiscuous mode [ 93.537802][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 93.548680][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 93.583370][ T7383] chnl_net:caif_netlink_parms(): no params data found [ 93.611975][ T7409] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.677672][ T7409] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.719605][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.727050][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.730153][ T7447] futex_wake_op: syz.5.1449 tries to shift op by -1; fix this program [ 93.743409][ T7383] bridge_slave_0: entered allmulticast mode [ 93.750386][ T7383] bridge_slave_0: entered promiscuous mode [ 93.758854][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.766212][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.773572][ T7383] bridge_slave_1: entered allmulticast mode [ 93.780342][ T7383] bridge_slave_1: entered promiscuous mode [ 93.815132][ T7383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.833592][ T7409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.853466][ T7383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.880990][ T7409] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.891566][ C0] hrtimer: interrupt took 45032 ns [ 93.905131][ T7409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.917469][ T7409] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968960][ T7383] team0: Port device team_slave_0 added [ 93.981389][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 93.989381][ T7383] team0: Port device team_slave_1 added [ 93.990440][ T7463] netlink: 'syz.3.1455': attribute type 15 has an invalid length. [ 94.036732][ T7467] netlink: 'syz.5.1458': attribute type 1 has an invalid length. [ 94.065387][ T7463] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.074018][ T7463] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.083181][ T7463] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.091771][ T7463] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.102802][ T7463] vxlan0: entered promiscuous mode [ 94.111110][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.118796][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.145790][ T7383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.162558][ T7467] bond0: (slave gretap1): making interface the new active one [ 94.170757][ T7467] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 94.180014][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.187116][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.213904][ T7383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.242824][ T7383] hsr_slave_0: entered promiscuous mode [ 94.248894][ T7383] hsr_slave_1: entered promiscuous mode [ 94.255081][ T7383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.263216][ T7383] Cannot create hsr debugfs directory [ 94.306886][ T7474] loop5: detected capacity change from 0 to 512 [ 94.321018][ T7474] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 94.331580][ T7474] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1460: invalid indirect mapped block 2683928664 (level 1) [ 94.348245][ T7474] EXT4-fs (loop5): Remounting filesystem read-only [ 94.356391][ T7474] EXT4-fs (loop5): 1 truncate cleaned up [ 94.365905][ T7474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.420126][ T7383] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 94.429020][ T7481] hub 9-0:1.0: USB hub found [ 94.434352][ T7481] hub 9-0:1.0: 8 ports detected [ 94.435401][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.454054][ T7383] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 94.464754][ T7383] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 94.474966][ T7383] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 94.597420][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.613395][ T7504] loop5: detected capacity change from 0 to 512 [ 94.614321][ T7383] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.628627][ T7504] EXT4-fs (loop5): orphan cleanup on readonly fs [ 94.639378][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.646619][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.666832][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.674169][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.685085][ T7507] Cannot find add_set index 0 as target [ 94.692126][ T7504] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1469: bg 0: block 248: padding at end of block bitmap is not set [ 94.725726][ T7504] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1469: Failed to acquire dquot type 1 [ 94.776515][ T7504] EXT4-fs (loop5): 1 truncate cleaned up [ 94.792948][ T7504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.811559][ T7383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.918933][ T7504] syz.5.1469 (7504) used greatest stack depth: 9304 bytes left [ 94.963489][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.997864][ T7383] veth0_vlan: entered promiscuous mode [ 95.008398][ T7383] veth1_vlan: entered promiscuous mode [ 95.028323][ T7383] veth0_macvtap: entered promiscuous mode [ 95.037098][ T7383] veth1_macvtap: entered promiscuous mode [ 95.049946][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.064973][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.074976][ T7383] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.083900][ T7383] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.092858][ T7383] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.101989][ T7383] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.127385][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 95.127402][ T29] audit: type=1400 audit(1753095875.513:1236): avc: denied { mount } for pid=7383 comm="syz-executor" name="/" dev="gadgetfs" ino=3856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 95.325975][ T29] audit: type=1326 audit(1753095875.713:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.350218][ T29] audit: type=1326 audit(1753095875.713:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.383303][ T29] audit: type=1326 audit(1753095875.773:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.406819][ T29] audit: type=1326 audit(1753095875.773:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.430512][ T29] audit: type=1326 audit(1753095875.773:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.454233][ T29] audit: type=1326 audit(1753095875.773:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.478528][ T29] audit: type=1326 audit(1753095875.773:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.502539][ T29] audit: type=1326 audit(1753095875.773:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.526686][ T29] audit: type=1326 audit(1753095875.773:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.5.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 95.883158][ T7580] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.896009][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'. [ 95.905085][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1499'. [ 95.943261][ T7581] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.951978][ T7581] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.960277][ T7581] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.968641][ T7581] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.984601][ T4317] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4b [ 96.007015][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'. [ 96.016758][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1499'. [ 96.029977][ T7580] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.082936][ T7580] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.753443][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 97.047808][ T7629] loop3: detected capacity change from 0 to 1024 [ 97.056644][ T7629] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 97.067650][ T7629] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 97.299271][ T7651] loop5: detected capacity change from 0 to 1024 [ 97.310853][ T7651] EXT4-fs: Ignoring removed orlov option [ 97.340691][ T7651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.376346][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.445464][ T7580] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.579183][ T7689] pim6reg9: entered allmulticast mode [ 98.332650][ T7784] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 98.782363][ T7580] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.810730][ T7580] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.824617][ T7857] loop5: detected capacity change from 0 to 128 [ 98.824617][ T7580] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.828275][ T7580] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.854690][ T7857] syz.5.1553: attempt to access beyond end of device [ 98.854690][ T7857] loop5: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 98.868604][ T7857] syz.5.1553: attempt to access beyond end of device [ 98.868604][ T7857] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 98.882481][ T7857] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 98.891764][ T7857] syz.5.1553: attempt to access beyond end of device [ 98.891764][ T7857] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 98.903835][ T7860] pim6reg: entered allmulticast mode [ 98.905223][ T7857] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 98.919096][ T7857] syz.5.1553: attempt to access beyond end of device [ 98.919096][ T7857] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 98.932765][ T7857] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 98.941346][ T7857] syz.5.1553: attempt to access beyond end of device [ 98.941346][ T7857] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 98.941571][ T7860] pim6reg: left allmulticast mode [ 98.955052][ T7857] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 98.955096][ T7857] syz.5.1553: attempt to access beyond end of device [ 98.955096][ T7857] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 98.982481][ T7857] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 98.991133][ T7857] syz.5.1553: attempt to access beyond end of device [ 98.991133][ T7857] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 99.004640][ T7857] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 99.013738][ T7857] syz.5.1553: attempt to access beyond end of device [ 99.013738][ T7857] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 99.027605][ T7857] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 99.036281][ T7857] syz.5.1553: attempt to access beyond end of device [ 99.036281][ T7857] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 99.049909][ T7857] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 99.058855][ T7857] syz.5.1553: attempt to access beyond end of device [ 99.058855][ T7857] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 99.072537][ T7857] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 99.090725][ T7857] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 99.135875][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1557'. [ 99.145928][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1557'. [ 99.325793][ T7898] loop5: detected capacity change from 0 to 128 [ 99.342632][ T7898] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.398227][ T7905] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.411552][ T7898] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.533519][ T7905] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.547972][ T4598] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.641808][ T7905] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.732854][ T7905] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.887828][ T7951] loop3: detected capacity change from 0 to 512 [ 99.895634][ T7951] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.906507][ T7951] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 99.926605][ T7951] netlink: zone id is out of range [ 99.931931][ T7951] netlink: zone id is out of range [ 99.937362][ T7951] netlink: zone id is out of range [ 99.942724][ T7951] netlink: zone id is out of range [ 99.947971][ T7951] netlink: zone id is out of range [ 99.953317][ T7951] netlink: zone id is out of range [ 99.958521][ T7951] netlink: zone id is out of range [ 99.963699][ T7951] netlink: zone id is out of range [ 99.968902][ T7951] netlink: zone id is out of range [ 99.974177][ T7951] netlink: zone id is out of range [ 99.989714][ T7959] syzkaller1: entered promiscuous mode [ 99.995438][ T7959] syzkaller1: entered allmulticast mode [ 100.130847][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 100.130866][ T29] audit: type=1326 audit(1753095880.523:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.163489][ T29] audit: type=1326 audit(1753095880.523:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.188041][ T29] audit: type=1326 audit(1753095880.523:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.212327][ T29] audit: type=1326 audit(1753095880.523:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.239386][ T29] audit: type=1326 audit(1753095880.523:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.264616][ T29] audit: type=1326 audit(1753095880.553:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.289690][ T29] audit: type=1326 audit(1753095880.553:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.315915][ T29] audit: type=1326 audit(1753095880.553:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.346269][ T29] audit: type=1326 audit(1753095880.553:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.373478][ T29] audit: type=1326 audit(1753095880.553:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 100.433660][ T7983] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 100.477678][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1611'. [ 100.521633][ T7998] loop0: detected capacity change from 0 to 512 [ 100.528691][ T7998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.535990][ T7998] ext4: Unknown parameter 'noacl' [ 100.865643][ T8016] netlink: 'syz.0.1620': attribute type 10 has an invalid length. [ 100.892580][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.921856][ T8016] bond0: (slave team0): Enslaving as an active interface with an up link [ 101.127639][ T8029] loop5: detected capacity change from 0 to 1024 [ 101.142736][ T8029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.169689][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.308054][ T8039] SELinux: ebitmap: truncated map [ 101.314653][ T8039] SELinux: failed to load policy [ 102.103439][ T8096] loop2: detected capacity change from 0 to 1024 [ 102.114967][ T8096] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 102.148102][ T8096] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 102.464156][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1655'. [ 102.476761][ T8109] erspan0: entered promiscuous mode [ 102.482704][ T8109] macvtap1: entered promiscuous mode [ 102.488246][ T8109] macvtap1: entered allmulticast mode [ 102.493766][ T8109] erspan0: entered allmulticast mode [ 102.503850][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1655'. [ 102.602312][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1664'. [ 102.612654][ T8121] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1664'. [ 102.644583][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 102.654295][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 102.700609][ T7905] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.723365][ T7905] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.771272][ T7905] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.782725][ T7905] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.825338][ T8140] loop0: detected capacity change from 0 to 256 [ 102.975941][ T8152] loop5: detected capacity change from 0 to 164 [ 103.296255][ T3381] IPVS: starting estimator thread 0... [ 103.401206][ T8167] IPVS: using max 2112 ests per chain, 105600 per kthread [ 103.553952][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1688'. [ 103.597556][ T8184] loop0: detected capacity change from 0 to 512 [ 103.609428][ T8184] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.625689][ T8184] EXT4-fs (loop0): 1 truncate cleaned up [ 103.632566][ T8184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.647577][ T8184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.700374][ T8195] loop7: detected capacity change from 0 to 1024 [ 103.703090][ T8187] syz_tun: entered allmulticast mode [ 103.732593][ T8187] syz_tun: left allmulticast mode [ 103.742967][ T8195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.750522][ T8198] netlink: 'syz.0.1695': attribute type 10 has an invalid length. [ 103.782183][ T8198] team0: Device hsr_slave_0 failed to register rx_handler [ 103.806645][ T8195] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.817355][ T8201] Unsupported xt match [ 103.817370][ T8201] unable to load match [ 103.905466][ T8217] xt_hashlimit: max too large, truncated to 1048576 [ 103.958584][ T8223] loop5: detected capacity change from 0 to 256 [ 104.070131][ T8237] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 104.151199][ T8242] SELinux: failed to load policy [ 104.242893][ T36] IPVS: starting estimator thread 0... [ 104.330301][ T8256] IPVS: using max 2352 ests per chain, 117600 per kthread [ 104.399858][ T8258] loop7: detected capacity change from 0 to 8192 [ 104.441780][ T8258] bio_check_eod: 9 callbacks suppressed [ 104.441799][ T8258] syz.7.1723: attempt to access beyond end of device [ 104.441799][ T8258] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 104.470811][ T8258] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 104.478708][ T8258] FAT-fs (loop7): Filesystem has been set read-only [ 104.479356][ T8274] loop3: detected capacity change from 0 to 128 [ 104.492805][ T8274] EXT4-fs: Ignoring removed nobh option [ 104.500982][ T8258] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 104.511622][ T8274] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.526221][ T8258] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 104.534893][ T8274] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.632503][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.663874][ T8286] SELinux: unknown common  [ 104.673360][ T8286] SELinux: failed to load policy [ 104.693198][ T8294] batadv_slave_0: entered promiscuous mode [ 104.702103][ T8294] __nla_validate_parse: 2 callbacks suppressed [ 104.702121][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1740'. [ 104.722619][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.736822][ T8294] batadv_slave_0 (unregistering): left promiscuous mode [ 104.744577][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.868234][ T8309] netlink: 'syz.2.1745': attribute type 1 has an invalid length. [ 104.893263][ T8313] program syz.5.1747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.912689][ T8313] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 105.011880][ T8331] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 105.131601][ T8340] netlink: 'syz.5.1760': attribute type 10 has an invalid length. [ 105.143509][ T8340] team0: Port device dummy0 added [ 105.152976][ T8340] netlink: 'syz.5.1760': attribute type 10 has an invalid length. [ 105.165217][ T8340] team0: Port device dummy0 removed [ 105.173471][ T8340] : (slave dummy0): Enslaving as an active interface with an up link [ 105.248007][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 105.281917][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 105.281932][ T29] audit: type=1400 audit(1753095885.673:1589): avc: denied { create } for pid=8355 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.311222][ T29] audit: type=1400 audit(1753095885.673:1590): avc: denied { connect } for pid=8355 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.331701][ T29] audit: type=1400 audit(1753095885.673:1591): avc: denied { write } for pid=8355 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.435037][ T8361] loop5: detected capacity change from 0 to 128 [ 105.442329][ T8361] EXT4-fs: Ignoring removed nobh option [ 105.449759][ T8361] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.462889][ T8361] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.527272][ T4598] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.546037][ T29] audit: type=1400 audit(1753095885.933:1592): avc: denied { read write } for pid=8370 comm="syz.0.1775" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.572079][ T29] audit: type=1400 audit(1753095885.933:1593): avc: denied { open } for pid=8370 comm="syz.0.1775" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.576581][ T8371] veth1_to_team: entered promiscuous mode [ 105.606697][ T8371] bond_slave_0: entered promiscuous mode [ 105.614077][ T8371] bond_slave_0: left promiscuous mode [ 105.622173][ T8371] veth1_to_team: left promiscuous mode [ 105.632866][ T8372] loop5: detected capacity change from 0 to 512 [ 105.641164][ T29] audit: type=1400 audit(1753095886.013:1594): avc: denied { ioctl } for pid=8370 comm="syz.0.1775" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.669682][ T8372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.684497][ T8372] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.703019][ T29] audit: type=1400 audit(1753095886.093:1595): avc: denied { setattr } for pid=8369 comm="syz.5.1774" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.726960][ T8372] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1774: corrupted inode contents [ 105.739125][ T8372] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1774: mark_inode_dirty error [ 105.751737][ T8372] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1774: corrupted inode contents [ 105.766044][ T29] audit: type=1400 audit(1753095886.163:1596): avc: denied { create } for pid=8369 comm="syz.5.1774" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.788034][ T8380] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1774: corrupted inode contents [ 105.830518][ T8380] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1774: mark_inode_dirty error [ 105.842521][ T29] audit: type=1400 audit(1753095886.203:1597): avc: denied { mount } for pid=8384 comm="syz.2.1779" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 105.847930][ T8380] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1774: corrupted inode contents [ 105.900464][ T8380] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1774: mark_inode_dirty error [ 105.916662][ T8380] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.1774: corrupted inode contents [ 105.932367][ T8380] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.1774: mark_inode_dirty error [ 105.989933][ T8397] loop7: detected capacity change from 0 to 128 [ 106.011837][ T8397] EXT4-fs: Ignoring removed nobh option [ 106.019406][ T8400] loop0: detected capacity change from 0 to 2048 [ 106.037443][ T8397] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.052949][ T8400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.065822][ T8397] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.067999][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.144093][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.160292][ T29] audit: type=1400 audit(1753095886.543:1598): avc: denied { read write } for pid=8407 comm="syz.3.1790" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.252421][ T8420] SELinux: syz.3.1792 (8420) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.269373][ T7383] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.289111][ T8418] vhci_hcd: invalid port number 96 [ 106.294345][ T8418] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 106.401723][ T8430] loop5: detected capacity change from 0 to 256 [ 106.499381][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 106.570820][ T8447] loop2: detected capacity change from 0 to 128 [ 106.610482][ T8447] EXT4-fs: Ignoring removed nobh option [ 106.620435][ T8450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1806'. [ 106.643176][ T5834] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.661836][ T5834] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.674498][ T8447] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.760522][ T8447] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.944263][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.970129][ T8466] loop9: detected capacity change from 0 to 7 [ 106.992488][ T8466] buffer_io_error: 8 callbacks suppressed [ 106.992507][ T8466] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.020828][ T8466] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.029881][ T8466] loop9: unable to read partition table [ 107.040974][ T8466] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 107.040974][ T8466] ) failed (rc=-5) [ 107.325491][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 107.335828][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 107.551742][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1827'. [ 107.710511][ T8515] xt_hashlimit: size too large, truncated to 1048576 [ 107.935863][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 107.954754][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.669620][ T8534] loop3: detected capacity change from 0 to 1024 [ 108.725135][ T8534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.917015][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.948067][ T8551] serio: Serial port ptm0 [ 109.185109][ T8574] loop5: detected capacity change from 0 to 1024 [ 109.231143][ T8574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.242694][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1855'. [ 109.244259][ T8574] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 109.262878][ T8574] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 109.305753][ T8574] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 109.315936][ T8574] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: comm syz.5.1858: inode #1: comm syz.5.1858: iget: illegal inode # [ 109.352272][ T8586] loop3: detected capacity change from 0 to 128 [ 109.371183][ T8586] EXT4-fs: Ignoring removed nobh option [ 109.381488][ T8586] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.401857][ T8586] ext4 filesystem being mounted at /376/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.404976][ T8574] EXT4-fs (loop5): Remounting filesystem read-only [ 109.419042][ T8574] EXT4-fs (loop5): no journal found [ 109.734153][ T8605] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 109.743369][ T8605] team0: Port device dummy0 added [ 109.775783][ T8607] loop5: detected capacity change from 0 to 2048 [ 109.850823][ T8607] loop5: p1 < > p4 [ 109.855728][ T8607] loop5: p4 size 8388608 extends beyond EOD, truncated [ 110.012315][ T8621] bond_slave_0: entered promiscuous mode [ 110.012464][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.018069][ T8621] bond_slave_1: entered promiscuous mode [ 110.018093][ T8621] team_slave_0: entered promiscuous mode [ 110.018113][ T8621] team_slave_1: entered promiscuous mode [ 110.049692][ T8621] macvlan2: entered promiscuous mode [ 110.055255][ T8621] bond0: entered promiscuous mode [ 110.060961][ T8621] team0: entered promiscuous mode [ 110.067043][ T8621] macvlan2: entered allmulticast mode [ 110.072731][ T8621] bond0: entered allmulticast mode [ 110.078427][ T8621] bond_slave_0: entered allmulticast mode [ 110.084315][ T8621] bond_slave_1: entered allmulticast mode [ 110.090839][ T8621] team0: entered allmulticast mode [ 110.099629][ T8621] team_slave_0: entered allmulticast mode [ 110.105567][ T8621] team_slave_1: entered allmulticast mode [ 110.116797][ T8621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.126018][ T8621] bond0: left allmulticast mode [ 110.131042][ T8621] bond_slave_0: left allmulticast mode [ 110.136995][ T8621] bond_slave_1: left allmulticast mode [ 110.142823][ T8621] team0: left allmulticast mode [ 110.150238][ T8621] team_slave_0: left allmulticast mode [ 110.156077][ T8621] team_slave_1: left allmulticast mode [ 110.161737][ T8621] bond0: left promiscuous mode [ 110.166658][ T8621] team0: left promiscuous mode [ 110.182697][ T8621] bond_slave_0: left promiscuous mode [ 110.188163][ T8621] bond_slave_1: left promiscuous mode [ 110.193665][ T8621] team_slave_0: left promiscuous mode [ 110.199184][ T8621] team_slave_1: left promiscuous mode [ 110.236813][ T8633] loop5: detected capacity change from 0 to 128 [ 110.291245][ T8633] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 110.300439][ T8633] FAT-fs (loop5): Filesystem has been set read-only [ 110.317284][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 110.317351][ T29] audit: type=1326 audit(1753095890.703:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f736f655967 code=0x7ffc0000 [ 110.321330][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.326803][ T29] audit: type=1400 audit(1753095890.713:1769): avc: denied { read } for pid=8622 comm="syz.2.1880" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.352189][ T8633] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 110.357978][ T29] audit: type=1326 audit(1753095890.713:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f736f5fab89 code=0x7ffc0000 [ 110.358020][ T29] audit: type=1326 audit(1753095890.713:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f736f655967 code=0x7ffc0000 [ 110.358057][ T29] audit: type=1326 audit(1753095890.713:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f736f5fab89 code=0x7ffc0000 [ 110.358121][ T29] audit: type=1326 audit(1753095890.713:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 110.358157][ T29] audit: type=1326 audit(1753095890.713:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 110.384260][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.536342][ T8633] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 110.564843][ T29] audit: type=1326 audit(1753095890.783:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f736f65d217 code=0x7ffc0000 [ 110.592174][ T29] audit: type=1326 audit(1753095890.783:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 110.618856][ T29] audit: type=1326 audit(1753095890.783:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.3.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736f65e9a9 code=0x7ffc0000 [ 110.673750][ T8640] sit0: entered promiscuous mode [ 110.713494][ T8640] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 110.721900][ T8640] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1889'. [ 110.893375][ T8654] loop0: detected capacity change from 0 to 8192 [ 111.254203][ T8688] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1908'. [ 111.300455][ T8695] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1907'. [ 111.429975][ T8710] loop5: detected capacity change from 0 to 764 [ 111.626210][ T8729] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 111.634190][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1928'. [ 111.770682][ T8739] veth1_to_team: entered promiscuous mode [ 111.779322][ T8741] loop7: detected capacity change from 0 to 128 [ 111.786606][ T8739] bond_slave_0: entered promiscuous mode [ 111.803518][ T8739] bond_slave_0: left promiscuous mode [ 111.809398][ T8739] veth1_to_team: left promiscuous mode [ 111.818587][ T8741] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 111.828528][ T8741] FAT-fs (loop7): Filesystem has been set read-only [ 111.839447][ T8741] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 111.856885][ T8741] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 111.893163][ T8754] syz.7.1938 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.928710][ T8758] loop3: detected capacity change from 0 to 512 [ 111.973085][ T8764] loop5: detected capacity change from 0 to 1024 [ 111.988570][ T8760] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1941'. [ 111.999610][ T8758] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.1940: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 112.019890][ T8758] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1940: Bad quota inode: 3, type: 0 [ 112.031403][ T8758] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 112.033143][ T8764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.068376][ T8758] EXT4-fs (loop3): mount failed [ 112.079351][ T8764] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 112.092000][ T8764] EXT4-fs (loop5): This should not happen!! Data will be lost [ 112.092000][ T8764] [ 112.101937][ T8764] EXT4-fs (loop5): Total free blocks count 0 [ 112.108186][ T8764] EXT4-fs (loop5): Free/Dirty block details [ 112.114677][ T8764] EXT4-fs (loop5): free_blocks=0 [ 112.119782][ T8764] EXT4-fs (loop5): dirty_blocks=0 [ 112.125207][ T8764] EXT4-fs (loop5): Block reservation details [ 112.131344][ T8764] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 112.169751][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.209122][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'. [ 112.221545][ T8780] loop2: detected capacity change from 0 to 1024 [ 112.228385][ T8780] EXT4-fs: Ignoring removed i_version option [ 112.240657][ T8780] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.256230][ T8780] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1948: Invalid block bitmap block 0 in block_group 0 [ 112.278118][ T8780] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1948: Failed to acquire dquot type 0 [ 112.291950][ T8780] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.1948: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.305725][ T8780] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1948: Invalid inode bitmap blk 0 in block_group 0 [ 112.319311][ T8780] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 112.320829][ T4375] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:62: Failed to release dquot type 0 [ 112.340359][ T8780] EXT4-fs (loop2): 1 orphan inode deleted [ 112.355916][ T8780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.374243][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 112.384229][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 112.421576][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.441321][ T4352] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:44: Failed to release dquot type 0 [ 112.540248][ T8799] loop2: detected capacity change from 0 to 8192 [ 112.553416][ T8807] tipc: Enabling of bearer rejected, failed to enable media [ 112.626830][ T8811] macvtap0: entered promiscuous mode [ 112.634212][ T8811] macvtap0: left promiscuous mode [ 112.729254][ T8821] loop7: detected capacity change from 0 to 128 [ 112.736281][ T8821] EXT4-fs: Ignoring removed nobh option [ 112.744720][ T8821] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.757327][ T8823] loop2: detected capacity change from 0 to 2048 [ 112.790461][ T8821] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.809303][ T8823] loop2: p1 < > p4 [ 112.813990][ T8823] loop2: p4 size 722688 extends beyond EOD, truncated [ 112.834226][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'. [ 113.629533][ T7383] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.748853][ T8838] loop2: detected capacity change from 0 to 512 [ 113.795673][ T8838] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.802443][ T8838] EXT4-fs: Ignoring removed bh option [ 113.817394][ T8854] loop3: detected capacity change from 0 to 1764 [ 113.826576][ T8838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.894132][ T8858] loop7: detected capacity change from 0 to 764 [ 113.901416][ T8838] EXT4-fs (loop2): 1 truncate cleaned up [ 113.908415][ T8838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.935224][ T8858] rock: directory entry would overflow storage [ 113.942435][ T8858] rock: sig=0x4f50, size=4, remaining=3 [ 113.950362][ T8858] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 114.003586][ T8865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8865 comm=syz.5.1982 [ 114.016738][ T8865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8865 comm=syz.5.1982 [ 114.045580][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.274914][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1987'. [ 114.426757][ T8883] netlink: 'syz.7.1989': attribute type 1 has an invalid length. [ 115.210601][ T8932] syzkaller1: entered promiscuous mode [ 115.216445][ T8932] syzkaller1: entered allmulticast mode [ 115.288504][ T8944] loop3: detected capacity change from 0 to 2048 [ 115.295937][ T8944] EXT4-fs: Ignoring removed bh option [ 115.313772][ T8944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.326357][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 115.326372][ T29] audit: type=1400 audit(1753095895.713:1896): avc: denied { mount } for pid=8943 comm="syz.3.2017" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.355148][ T29] audit: type=1400 audit(1753095895.723:1897): avc: denied { mount } for pid=8945 comm="syz.2.2018" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 115.377580][ T29] audit: type=1400 audit(1753095895.733:1898): avc: denied { add_name } for pid=8943 comm="syz.3.2017" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.396933][ T8944] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 115.398609][ T29] audit: type=1400 audit(1753095895.733:1899): avc: denied { create } for pid=8943 comm="syz.3.2017" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 115.398620][ T8944] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.398953][ T8944] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 115.407108][ T29] audit: type=1400 audit(1753095895.733:1900): avc: denied { read write } for pid=8943 comm="syz.3.2017" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.407147][ T29] audit: type=1400 audit(1753095895.733:1901): avc: denied { open } for pid=8943 comm="syz.3.2017" path="/412/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.428114][ T8944] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.428114][ T8944] [ 115.428139][ T8944] EXT4-fs (loop3): Total free blocks count 0 [ 115.449248][ T8951] loop2: detected capacity change from 0 to 512 [ 115.451004][ T8944] EXT4-fs (loop3): Free/Dirty block details [ 115.512048][ T8951] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2019: bg 0: block 248: padding at end of block bitmap is not set [ 115.514459][ T8944] EXT4-fs (loop3): free_blocks=2415919104 [ 115.523782][ T8951] Quota error (device loop2): write_blk: dquota write failed [ 115.526643][ T8944] EXT4-fs (loop3): dirty_blocks=656 [ 115.541182][ T8951] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 115.546888][ T8944] EXT4-fs (loop3): Block reservation details [ 115.546904][ T8944] EXT4-fs (loop3): i_reserved_data_blocks=41 [ 115.581950][ T8951] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2019: Failed to acquire dquot type 1 [ 115.597115][ T8951] EXT4-fs (loop2): 1 truncate cleaned up [ 115.604139][ T8951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.616944][ T8951] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.643632][ T29] audit: type=1400 audit(1753095896.033:1902): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.659416][ T8951] syz.2.2019 (8951) used greatest stack depth: 9096 bytes left [ 115.665379][ T4350] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 115.685488][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.694979][ T4350] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 115.704200][ T4350] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 1 [ 115.793413][ T8969] loop2: detected capacity change from 0 to 128 [ 115.802578][ T8969] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.826932][ T8969] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.871621][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.918149][ T8972] loop0: detected capacity change from 0 to 8192 [ 115.940892][ T8972] syz.0.2028: attempt to access beyond end of device [ 115.940892][ T8972] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.954869][ T8972] Buffer I/O error on dev loop0, logical block 57847, async page read [ 116.182282][ T8999] loop3: detected capacity change from 0 to 512 [ 116.195102][ T8999] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.202187][ T8999] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.2041: bad orphan inode 13 [ 116.214279][ T8999] ext4_test_bit(bit=12, block=18) = 1 [ 116.219767][ T8999] is_bad_inode(inode)=0 [ 116.224884][ T8999] NEXT_ORPHAN(inode)=2130706432 [ 116.229943][ T8999] max_ino=32 [ 116.233311][ T8999] i_nlink=1 [ 116.247707][ T8999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.318399][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.374075][ T9017] SELinux: failed to load policy [ 116.412461][ T9019] loop3: detected capacity change from 0 to 256 [ 116.436386][ T9019] vfat: Unknown parameter '1844674407370955161501777777777777777777777' [ 116.830459][ T9070] sd 0:0:1:0: device reset [ 116.964956][ T9082] netlink: 'syz.3.2077': attribute type 15 has an invalid length. [ 119.122462][ T9126] loop5: detected capacity change from 0 to 8192 [ 119.190715][ T9126] loop5: p1 p2 < > p3 p4 < p5 > [ 119.196532][ T9126] loop5: partition table partially beyond EOD, truncated [ 119.211775][ T9126] loop5: p1 size 100663296 extends beyond EOD, truncated [ 119.217069][ T9134] atomic_op ffff8881134d0128 conn xmit_atomic 0000000000000000 [ 119.229610][ T9126] loop5: p2 start 591104 is beyond EOD, truncated [ 119.236471][ T9126] loop5: p3 start 33572980 is beyond EOD, truncated [ 119.265223][ T9126] loop5: p5 size 100663296 extends beyond EOD, truncated [ 119.281617][ T9136] loop2: detected capacity change from 0 to 1024 [ 119.331965][ T9136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.358749][ T9136] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 119.371189][ T9136] EXT4-fs (loop2): This should not happen!! Data will be lost [ 119.371189][ T9136] [ 119.381049][ T9136] EXT4-fs (loop2): Total free blocks count 0 [ 119.387186][ T9136] EXT4-fs (loop2): Free/Dirty block details [ 119.393174][ T9136] EXT4-fs (loop2): free_blocks=0 [ 119.398846][ T9136] EXT4-fs (loop2): dirty_blocks=0 [ 119.404044][ T9136] EXT4-fs (loop2): Block reservation details [ 119.410289][ T9136] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 119.457176][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.469959][ T9151] loop7: detected capacity change from 0 to 128 [ 119.477757][ T9151] EXT4-fs: Ignoring removed nobh option [ 119.487066][ T9151] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.504061][ T9151] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.652602][ T7383] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.851042][ T9179] netlink: 'syz.0.2120': attribute type 1 has an invalid length. [ 120.094279][ T9202] __nla_validate_parse: 9 callbacks suppressed [ 120.094327][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'. [ 120.622029][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 120.622122][ T29] audit: type=1400 audit(1753095901.013:2052): avc: denied { create } for pid=9224 comm="syz.0.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.662313][ T29] audit: type=1400 audit(1753095901.053:2053): avc: denied { write } for pid=9224 comm="syz.0.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.734641][ T29] audit: type=1400 audit(1753095901.103:2054): avc: denied { sqpoll } for pid=9233 comm="syz.5.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.755548][ T29] audit: type=1400 audit(1753095901.103:2055): avc: denied { bind } for pid=9233 comm="syz.5.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.776256][ T29] audit: type=1400 audit(1753095901.113:2056): avc: denied { listen } for pid=9233 comm="syz.5.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.000642][ T29] audit: type=1326 audit(1753095901.373:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 121.027018][ T29] audit: type=1326 audit(1753095901.373:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 121.051629][ T29] audit: type=1326 audit(1753095901.383:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 121.076483][ T29] audit: type=1326 audit(1753095901.383:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 121.101838][ T29] audit: type=1326 audit(1753095901.383:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 121.141670][ T9257] loop3: detected capacity change from 0 to 764 [ 121.534091][ T9285] loop2: detected capacity change from 0 to 1764 [ 121.616797][ T9297] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 121.616797][ T9297] The task syz.3.2165 (9297) triggered the difference, watch for misbehavior. [ 121.726112][ T9304] syzkaller1: entered promiscuous mode [ 121.726139][ T9304] syzkaller1: entered allmulticast mode [ 122.224992][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2195'. [ 122.281121][ T9370] loop5: detected capacity change from 0 to 1764 [ 122.568021][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 122.676547][ T9400] loop3: detected capacity change from 0 to 1764 [ 122.717559][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 122.899695][ T9412] loop7: detected capacity change from 0 to 512 [ 122.923099][ T9412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.935815][ T9412] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.953057][ T9412] EXT4-fs (loop7): shut down requested (0) [ 122.971507][ T7383] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.403019][ T9421] loop2: detected capacity change from 0 to 256 [ 123.673856][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 123.886563][ T9447] loop5: detected capacity change from 0 to 2048 [ 123.931191][ T9447] loop5: p1 < > p4 [ 123.934083][ T9451] loop0: detected capacity change from 0 to 512 [ 123.943133][ T9447] loop5: p4 size 722688 extends beyond EOD, truncated [ 123.956649][ T9451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.957078][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.974124][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2234'. [ 123.982416][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.994537][ T9451] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.029952][ T9451] EXT4-fs (loop0): shut down requested (0) [ 124.052448][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.069250][ T9461] macvtap0: entered promiscuous mode [ 124.076082][ T9461] macvtap0: left promiscuous mode [ 124.088835][ T9463] loop0: detected capacity change from 0 to 1764 [ 124.154679][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2241'. [ 124.231746][ T36] kernel write not supported for file /837/attr/exec (pid: 36 comm: kworker/1:1) [ 124.253531][ T9475] loop5: detected capacity change from 0 to 512 [ 124.261049][ T9475] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.275058][ T9475] EXT4-fs (loop5): 1 truncate cleaned up [ 124.281599][ T9477] loop0: detected capacity change from 0 to 1024 [ 124.281879][ T9475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.293609][ T9477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.338806][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.339245][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.443319][ T9488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9488 comm=syz.0.2249 [ 124.457424][ T9488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9488 comm=syz.0.2249 [ 124.474921][ T9490] loop5: detected capacity change from 0 to 1764 [ 124.599410][ T5834] kernel write not supported for file /992/clear_refs (pid: 5834 comm: kworker/0:5) [ 124.684169][ T9516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9516 comm=syz.3.2263 [ 124.697342][ T9516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9516 comm=syz.3.2263 [ 124.734918][ T9522] macvtap0: entered promiscuous mode [ 124.741302][ T9522] macvtap0: left promiscuous mode [ 124.745168][ T9519] loop2: detected capacity change from 0 to 1764 [ 124.778969][ T9524] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.803449][ T9526] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2267'. [ 124.848495][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2272'. [ 124.889234][ T9541] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2274'. [ 125.407379][ T9554] syzkaller1: entered promiscuous mode [ 125.413286][ T9554] syzkaller1: entered allmulticast mode [ 125.418912][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2288'. [ 125.429511][ T9557] loop7: detected capacity change from 0 to 1764 [ 125.458077][ T9559] macvlan1: entered promiscuous mode [ 125.465640][ T9559] ipvlan0: entered promiscuous mode [ 125.474735][ T9559] ipvlan0: left promiscuous mode [ 125.481952][ T9559] macvlan1: left promiscuous mode [ 125.533741][ T9565] loop0: detected capacity change from 0 to 1024 [ 125.539976][ T9567] loop5: detected capacity change from 0 to 764 [ 125.543378][ T9565] EXT4-fs: Ignoring removed orlov option [ 125.562750][ T9565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.583157][ T9567] rock: directory entry would overflow storage [ 125.589873][ T9567] rock: sig=0x4f50, size=4, remaining=3 [ 125.595920][ T9567] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.094779][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 126.094811][ T29] audit: type=1400 audit(1753095906.483:2177): avc: denied { getopt } for pid=9579 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.104596][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2299'. [ 126.482613][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.550806][ T29] audit: type=1400 audit(1753095906.943:2178): avc: denied { getopt } for pid=9607 comm="syz.2.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.681118][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2306'. [ 126.812980][ T29] audit: type=1400 audit(1753095907.203:2179): avc: denied { getopt } for pid=9624 comm="syz.3.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.022046][ T29] audit: type=1400 audit(1753095907.413:2180): avc: denied { cpu } for pid=9634 comm="syz.3.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 127.133228][ T9610] loop0: detected capacity change from 0 to 512 [ 127.140451][ T9610] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.147150][ T9610] EXT4-fs: Ignoring removed bh option [ 127.156480][ T9610] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.169868][ T9610] EXT4-fs (loop0): 1 truncate cleaned up [ 127.199375][ T9610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.216258][ T9642] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2315'. [ 127.288715][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.347190][ T9645] IPv6: Can't replace route, no match found [ 127.454335][ T9657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2321'. [ 127.522089][ T9660] loop5: detected capacity change from 0 to 1024 [ 127.529835][ T9660] EXT4-fs: Ignoring removed nobh option [ 127.535764][ T9660] EXT4-fs: Ignoring removed bh option [ 127.554010][ T9660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.653998][ T29] audit: type=1400 audit(1753095908.043:2181): avc: denied { map } for pid=9659 comm="syz.5.2322" path="/462/file1/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.683271][ T9673] sd 0:0:1:0: device reset [ 127.722585][ T29] audit: type=1400 audit(1753095908.113:2182): avc: denied { cmd } for pid=9670 comm="syz.2.2325" path="socket:[27165]" dev="sockfs" ino=27165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.723533][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.796197][ T29] audit: type=1400 audit(1753095908.173:2183): avc: denied { read } for pid=9677 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.926740][ T9684] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.938824][ T9684] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.974625][ T29] audit: type=1326 audit(1753095908.353:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.7.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fcece9a9 code=0x7ffc0000 [ 128.000103][ T29] audit: type=1326 audit(1753095908.353:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.7.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76fcece9a9 code=0x7ffc0000 [ 128.024452][ T29] audit: type=1326 audit(1753095908.353:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.7.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76fcece9a9 code=0x7ffc0000 [ 128.055412][ T9694] loop7: detected capacity change from 0 to 512 [ 128.063118][ T9694] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 128.075577][ T9694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082] [ 128.085305][ T9684] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.095339][ T9684] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.105283][ T9694] EXT4-fs (loop7): 1 truncate cleaned up [ 128.111711][ T9694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.146725][ T9684] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.156847][ T9684] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.233918][ T7383] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.250893][ T9684] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.260789][ T9684] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.288198][ T9708] netlink: 'syz.7.2341': attribute type 13 has an invalid length. [ 128.323273][ T9710] loop0: detected capacity change from 0 to 1024 [ 128.354817][ T9710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.444154][ T9708] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.452446][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.521643][ T9708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.545455][ T9708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.667664][ T9708] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.677119][ T9708] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.685779][ T9708] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.697000][ T9708] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.748571][ T9684] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.757545][ T9684] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.852197][ T9684] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.860887][ T9684] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.889027][ T9684] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.897816][ T9684] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.940195][ T9684] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.949553][ T9684] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.952423][ T9744] loop2: detected capacity change from 0 to 512 [ 128.980641][ T9744] EXT4-fs: Ignoring removed i_version option [ 128.986727][ T9744] EXT4-fs: Ignoring removed nobh option [ 128.998137][ T9710] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2344: Allocating blocks 497-513 which overlap fs metadata [ 129.016658][ T9744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.070436][ T9744] EXT4-fs (loop2): 1 truncate cleaned up [ 129.076801][ T9744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.094928][ T9744] EXT4-fs (loop2): shut down requested (2) [ 129.114667][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.128537][ T9709] EXT4-fs (loop0): pa ffff888106a7ba10: logic 272, phys. 385, len 8 [ 129.136726][ T9709] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 129.149938][ T9751] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 129.215742][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.274366][ T9763] loop2: detected capacity change from 0 to 128 [ 129.332990][ T9770] vlan2: entered allmulticast mode [ 129.426538][ T9784] serio: Serial port ptm0 [ 129.432036][ T9734] kernel write not supported for file /1044/attr/exec (pid: 9734 comm: kworker/1:15) [ 129.477854][ T9791] loop0: detected capacity change from 0 to 1024 [ 129.488159][ T9791] EXT4-fs: Ignoring removed nobh option [ 129.493839][ T9791] EXT4-fs: Ignoring removed bh option [ 129.513520][ T9791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.553410][ T9797] loop7: detected capacity change from 0 to 128 [ 129.636408][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.896771][ T9838] netlink: 'syz.2.2392': attribute type 21 has an invalid length. [ 129.905429][ T9838] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 129.913254][ T9838] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2392'. [ 129.996031][ T9845] netem: incorrect ge model size [ 130.201579][ T9728] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 130.210526][ T9728] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 130.279422][ T9869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2406'. [ 130.295442][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'. [ 130.304590][ T9869] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2406'. [ 130.313933][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 130.364846][ T9877] loop5: detected capacity change from 0 to 1024 [ 130.622834][ T9877] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2409: Allocating blocks 497-513 which overlap fs metadata [ 130.696749][ T9876] EXT4-fs (loop5): pa ffff888106a9c5b0: logic 272, phys. 385, len 8 [ 130.704921][ T9876] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 130.765443][ T9903] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.775433][ T9903] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.788904][ T9905] loop3: detected capacity change from 0 to 128 [ 130.812302][ T9903] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.822305][ T9903] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.832244][ T9907] loop2: detected capacity change from 0 to 1024 [ 130.853366][ T9907] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.868753][ T9907] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm syz.2.2421: lblock 1 mapped to illegal pblock 1 (length 7) [ 130.889567][ T9903] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.899628][ T9903] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.910421][ T9907] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 130.923089][ T9907] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.923089][ T9907] [ 130.944880][ T57] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 3: invalid block bitmap [ 130.958090][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117 [ 130.970730][ T57] EXT4-fs (loop2): This should not happen!! Data will be lost [ 130.970730][ T57] [ 130.983972][ T9903] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.994084][ T9903] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.997631][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2424'. [ 131.017368][ T9916] team1: entered promiscuous mode [ 131.022876][ T9916] team1: entered allmulticast mode [ 131.069122][ T9903] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.074804][ T9920] loop2: detected capacity change from 0 to 1024 [ 131.077473][ T9903] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.096207][ T9903] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.099519][ T9920] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 131.104640][ T9903] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.116929][ T9920] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.116929][ T9920] [ 131.129525][ T9903] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.134962][ T9920] EXT4-fs (loop2): Total free blocks count 0 [ 131.143182][ T9903] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.149175][ T9920] EXT4-fs (loop2): Free/Dirty block details [ 131.161367][ T9903] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.163304][ T9920] EXT4-fs (loop2): free_blocks=0 [ 131.171772][ T9903] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.176695][ T9920] EXT4-fs (loop2): dirty_blocks=0 [ 131.190305][ T9920] EXT4-fs (loop2): Block reservation details [ 131.196365][ T9920] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 131.275243][ T3305] EXT4-fs unmount: 5 callbacks suppressed [ 131.275262][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.300367][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'. [ 131.347299][ T9932] loop2: detected capacity change from 0 to 1024 [ 131.363012][ T9932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.438932][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 131.438951][ T29] audit: type=1400 audit(1753095911.823:2286): avc: denied { setopt } for pid=9940 comm="syz.0.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.533898][ T9945] pim6reg: entered allmulticast mode [ 131.552150][ T9945] pim6reg: left allmulticast mode [ 131.682923][ T9932] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.2430: Allocating blocks 497-513 which overlap fs metadata [ 131.732938][ T29] audit: type=1326 audit(1753095912.113:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 131.756629][ T29] audit: type=1326 audit(1753095912.113:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 131.781780][ T29] audit: type=1326 audit(1753095912.113:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 131.805617][ T29] audit: type=1326 audit(1753095912.113:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 131.829188][ T29] audit: type=1326 audit(1753095912.113:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 131.852929][ T29] audit: type=1326 audit(1753095912.113:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 131.876343][ T29] audit: type=1326 audit(1753095912.113:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.0.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa32f31e9a9 code=0x7ffc0000 [ 131.926301][ T9931] EXT4-fs (loop2): pa ffff888106a9c540: logic 272, phys. 385, len 8 [ 131.934757][ T9931] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 131.982831][ T9965] netlink: 'syz.3.2446': attribute type 13 has an invalid length. [ 131.999425][ T29] audit: type=1326 audit(1753095912.223:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 132.023125][ T29] audit: type=1326 audit(1753095912.223:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f975d8be9a9 code=0x7ffc0000 [ 132.077141][ T9974] net_ratelimit: 65 callbacks suppressed [ 132.077190][ T9974] openvswitch: netlink: Message has 6 unknown bytes. [ 132.090552][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.203754][ T9982] loop2: detected capacity change from 0 to 2048 [ 132.216303][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.223593][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.276280][ T9965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.287344][ T9965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.351597][ T9965] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.360114][ T9965] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.368594][ T9965] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.376996][ T9965] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.415415][ T9965] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.424110][ T9965] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.432640][ T9965] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.441126][ T9965] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.507173][ T9999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9999 comm=syz.3.2457 [ 132.533570][ T9999] netlink: 'syz.3.2457': attribute type 1 has an invalid length. [ 132.555431][T10006] loop0: detected capacity change from 0 to 1024 [ 132.556960][ T9999] bond2: (slave bridge2): making interface the new active one [ 132.569775][ T9999] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 132.582504][T10006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.601558][T10006] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.2460: lblock 1 mapped to illegal pblock 1 (length 7) [ 132.616422][T10006] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 132.628958][T10006] EXT4-fs (loop0): This should not happen!! Data will be lost [ 132.628958][T10006] [ 132.652037][ T4350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:42: bg 0: block 3: invalid block bitmap [ 132.665411][ T4350] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117 [ 132.678062][ T4350] EXT4-fs (loop0): This should not happen!! Data will be lost [ 132.678062][ T4350] [ 132.691022][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.710811][T10016] loop3: detected capacity change from 0 to 512 [ 132.718945][T10016] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.733382][T10016] EXT4-fs (loop3): 1 truncate cleaned up [ 132.739549][T10016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.810011][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.999375][T10034] loop5: detected capacity change from 0 to 1024 [ 133.018473][T10039] IPv6: Can't replace route, no match found [ 133.056214][T10034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.076060][T10040] loop2: detected capacity change from 0 to 512 [ 133.092286][T10040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.105945][T10034] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm syz.5.2473: lblock 1 mapped to illegal pblock 1 (length 7) [ 133.111870][T10046] loop3: detected capacity change from 0 to 512 [ 133.130078][T10040] EXT4-fs (loop2): failed to initialize system zone (-117) [ 133.138428][T10034] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117 [ 133.139515][T10040] EXT4-fs (loop2): mount failed [ 133.151068][T10034] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.151068][T10034] [ 133.173016][T10046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.186210][T10051] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2479'. [ 133.195663][T10051] gretap0: entered promiscuous mode [ 133.201804][T10051] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2479'. [ 133.210989][T10051] 0{X: renamed from gretap0 [ 133.219602][T10051] 0{X: left promiscuous mode [ 133.225090][T10051] 0{X: entered allmulticast mode [ 133.301105][T10051] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 133.344070][ T4344] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 133.359391][ T4344] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 133.373013][ T4344] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.373013][ T4344] [ 133.382988][ T4344] EXT4-fs (loop3): Total free blocks count 0 [ 133.389127][ T4344] EXT4-fs (loop3): Free/Dirty block details [ 133.395525][ T4344] EXT4-fs (loop3): free_blocks=65280 [ 133.400995][ T4344] EXT4-fs (loop3): dirty_blocks=1025 [ 133.406916][ T4344] EXT4-fs (loop3): Block reservation details [ 133.413149][ T4344] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 133.421293][ T57] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 3: invalid block bitmap [ 133.436431][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.449624][ T57] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117 [ 133.462814][ T57] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.462814][ T57] [ 133.474026][ T4598] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.506686][T10066] loop7: detected capacity change from 0 to 1024 [ 133.515371][T10066] EXT4-fs: Ignoring removed orlov option [ 133.526053][T10066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.612628][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2489'. [ 133.783981][T10094] wireguard0: entered promiscuous mode [ 133.789545][T10094] wireguard0: entered allmulticast mode [ 133.832472][T10079] ================================================================== [ 133.840649][T10079] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 133.848596][T10079] [ 133.850938][T10079] write to 0xffff888100624b3c of 4 bytes by task 10066 on cpu 0: [ 133.858672][T10079] xas_set_mark+0x12b/0x140 [ 133.863191][T10079] __folio_start_writeback+0x1dd/0x440 [ 133.868670][T10079] ext4_bio_write_folio+0x5ad/0x9f0 [ 133.874067][T10079] mpage_submit_folio+0xe4/0x170 [ 133.879199][T10079] mpage_process_page_bufs+0x39b/0x4a0 [ 133.884774][T10079] mpage_prepare_extent_to_map+0x741/0xaa0 [ 133.890614][T10079] ext4_do_writepages+0xa1a/0x21c0 [ 133.895749][T10079] ext4_writepages+0x176/0x300 [ 133.900533][T10079] do_writepages+0x1c3/0x310 [ 133.905161][T10079] file_write_and_wait_range+0x156/0x2c0 [ 133.910928][T10079] generic_buffers_fsync_noflush+0x45/0x120 [ 133.916862][T10079] ext4_sync_file+0x1ab/0x690 [ 133.921564][T10079] vfs_fsync_range+0x10d/0x130 [ 133.926381][T10079] ext4_buffered_write_iter+0x34f/0x3c0 [ 133.932040][T10079] ext4_file_write_iter+0x383/0xf00 [ 133.937268][T10079] iter_file_splice_write+0x5f2/0x970 [ 133.942687][T10079] direct_splice_actor+0x156/0x2a0 [ 133.947932][T10079] splice_direct_to_actor+0x312/0x680 [ 133.953416][T10079] do_splice_direct+0xda/0x150 [ 133.958206][T10079] do_sendfile+0x380/0x650 [ 133.962728][T10079] __x64_sys_sendfile64+0x105/0x150 [ 133.967963][T10079] x64_sys_call+0xb39/0x2fb0 [ 133.973188][T10079] do_syscall_64+0xd2/0x200 [ 133.977744][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.983655][T10079] [ 133.985985][T10079] read to 0xffff888100624b3c of 4 bytes by task 10079 on cpu 1: [ 133.993807][T10079] __writeback_single_inode+0x1f9/0x7c0 [ 133.999496][T10079] writeback_single_inode+0x167/0x3e0 [ 134.004985][T10079] sync_inode_metadata+0x5b/0x90 [ 134.009977][T10079] generic_buffers_fsync_noflush+0xd9/0x120 [ 134.015896][T10079] ext4_sync_file+0x1ab/0x690 [ 134.020598][T10079] vfs_fsync_range+0x10d/0x130 [ 134.025396][T10079] ext4_buffered_write_iter+0x34f/0x3c0 [ 134.030966][T10079] ext4_file_write_iter+0x383/0xf00 [ 134.036183][T10079] iter_file_splice_write+0x5f2/0x970 [ 134.041577][T10079] direct_splice_actor+0x156/0x2a0 [ 134.046724][T10079] splice_direct_to_actor+0x312/0x680 [ 134.052120][T10079] do_splice_direct+0xda/0x150 [ 134.056914][T10079] do_sendfile+0x380/0x650 [ 134.061348][T10079] __x64_sys_sendfile64+0x105/0x150 [ 134.066651][T10079] x64_sys_call+0xb39/0x2fb0 [ 134.071259][T10079] do_syscall_64+0xd2/0x200 [ 134.075781][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.081686][T10079] [ 134.084019][T10079] value changed: 0x0a000021 -> 0x04000021 [ 134.089746][T10079] [ 134.092110][T10079] Reported by Kernel Concurrency Sanitizer on: [ 134.098390][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.7.2484 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 134.109190][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.119256][T10079] ================================================================== [ 134.235400][T10079] ================================================================== [ 134.243539][T10079] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 134.250702][T10079] [ 134.253035][T10079] write to 0xffff888100624b3c of 4 bytes by task 10066 on cpu 1: [ 134.260765][T10079] xas_set_mark+0x12b/0x140 [ 134.265279][T10079] __folio_start_writeback+0x1dd/0x440 [ 134.270762][T10079] ext4_bio_write_folio+0x5ad/0x9f0 [ 134.275971][T10079] mpage_submit_folio+0xe4/0x170 [ 134.281011][T10079] mpage_process_page_bufs+0x39b/0x4a0 [ 134.286506][T10079] mpage_prepare_extent_to_map+0x741/0xaa0 [ 134.292334][T10079] ext4_do_writepages+0xa1a/0x21c0 [ 134.297545][T10079] ext4_writepages+0x176/0x300 [ 134.302325][T10079] do_writepages+0x1c3/0x310 [ 134.306930][T10079] file_write_and_wait_range+0x156/0x2c0 [ 134.312629][T10079] generic_buffers_fsync_noflush+0x45/0x120 [ 134.318655][T10079] ext4_sync_file+0x1ab/0x690 [ 134.323352][T10079] vfs_fsync_range+0x10d/0x130 [ 134.328150][T10079] ext4_buffered_write_iter+0x34f/0x3c0 [ 134.333731][T10079] ext4_file_write_iter+0x383/0xf00 [ 134.338964][T10079] iter_file_splice_write+0x5f2/0x970 [ 134.344452][T10079] direct_splice_actor+0x156/0x2a0 [ 134.349584][T10079] splice_direct_to_actor+0x312/0x680 [ 134.354986][T10079] do_splice_direct+0xda/0x150 [ 134.359769][T10079] do_sendfile+0x380/0x650 [ 134.364299][T10079] __x64_sys_sendfile64+0x105/0x150 [ 134.369529][T10079] x64_sys_call+0xb39/0x2fb0 [ 134.374160][T10079] do_syscall_64+0xd2/0x200 [ 134.378685][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.384610][T10079] [ 134.386952][T10079] read to 0xffff888100624b3c of 4 bytes by task 10079 on cpu 0: [ 134.394660][T10079] xas_find_marked+0x5dc/0x620 [ 134.399481][T10079] find_get_entry+0x5d/0x380 [ 134.404099][T10079] filemap_get_folios_tag+0x92/0x210 [ 134.409415][T10079] filemap_fdatawait_range+0x88/0x1d0 [ 134.414819][T10079] __writeback_single_inode+0xdb/0x7c0 [ 134.420312][T10079] writeback_single_inode+0x167/0x3e0 [ 134.425742][T10079] sync_inode_metadata+0x5b/0x90 [ 134.430791][T10079] generic_buffers_fsync_noflush+0xd9/0x120 [ 134.436813][T10079] ext4_sync_file+0x1ab/0x690 [ 134.441511][T10079] vfs_fsync_range+0x10d/0x130 [ 134.446353][T10079] ext4_buffered_write_iter+0x34f/0x3c0 [ 134.451917][T10079] ext4_file_write_iter+0x383/0xf00 [ 134.457155][T10079] iter_file_splice_write+0x5f2/0x970 [ 134.462558][T10079] direct_splice_actor+0x156/0x2a0 [ 134.467761][T10079] splice_direct_to_actor+0x312/0x680 [ 134.473196][T10079] do_splice_direct+0xda/0x150 [ 134.477993][T10079] do_sendfile+0x380/0x650 [ 134.482456][T10079] __x64_sys_sendfile64+0x105/0x150 [ 134.487668][T10079] x64_sys_call+0xb39/0x2fb0 [ 134.492369][T10079] do_syscall_64+0xd2/0x200 [ 134.496893][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.502801][T10079] [ 134.505133][T10079] value changed: 0x0a000021 -> 0x04000021 [ 134.510877][T10079] [ 134.513223][T10079] Reported by Kernel Concurrency Sanitizer on: [ 134.519485][T10079] CPU: 0 UID: 0 PID: 10079 Comm: syz.7.2484 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 134.530278][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.540370][T10079] ================================================================== [ 134.631837][ T7383] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.