last executing test programs: 55.886344985s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 55.682274869s ago: executing program 1 (id=6): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) write$P9_RREADDIR(r0, &(0x7f0000000200)={0xc3, 0x29, 0x2, {0xf, [{{0x4, 0x0, 0x1}, 0x0, 0x85, 0x7, './file2'}, {{0x1, 0x1, 0x4}, 0x23f, 0x72, 0x7, './file2'}, {{0x8, 0x4, 0x6}, 0x2, 0x6, 0x7, './file2'}, {{0x0, 0x4, 0x6}, 0x1, 0x90, 0x5, './bus'}, {{0x0, 0x3, 0x2}, 0x800, 0x4, 0x7, './file2'}, {{0x1, 0x1, 0x1}, 0xfffffffffffffffa, 0x7, 0x7, './file2'}]}}, 0xc3) 54.531654441s ago: executing program 1 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x40000000000000}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 52.55840172s ago: executing program 1 (id=65): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000240)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="64000000354fe5f1a3b5b64ba20ccfae5111ae75941fee062bd9142a18e41bd888aed516e859baf450e26054aa309e670e7ae6e8679474bf1fab64e7e87b0f7ca875869adf0a1124b8c99da390019f1e3a5d7181fddf3540e3c1b3c71a9cd08e70bda7561053aeff58da2bb56c7e770330035122761ebfdf3b380f54df6a5d", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2503000000340001800500020001000000080003007f000001080006000400000008000300ac1414aa060005004e230000080006000900000008000300000000000400018008000300080000000800030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x1) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x10001}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x5}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff7c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r4}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000005, 0x50032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r13 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r13) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r9}, 0x20) 52.55799851s ago: executing program 32 (id=65): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000240)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="64000000354fe5f1a3b5b64ba20ccfae5111ae75941fee062bd9142a18e41bd888aed516e859baf450e26054aa309e670e7ae6e8679474bf1fab64e7e87b0f7ca875869adf0a1124b8c99da390019f1e3a5d7181fddf3540e3c1b3c71a9cd08e70bda7561053aeff58da2bb56c7e770330035122761ebfdf3b380f54df6a5d", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2503000000340001800500020001000000080003007f000001080006000400000008000300ac1414aa060005004e230000080006000900000008000300000000000400018008000300080000000800030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x1) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x10001}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x5}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff7c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r4}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000005, 0x50032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r13 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r13) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r9}, 0x20) 42.396390749s ago: executing program 4 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000002000)=ANY=[@ANYRESOCT, @ANYBLOB="9ddf3eee0e5f0bb7c1f1403ba29cc9f6b466a5c86c85ced50cf87981e6a8274051a491374cc09aad674b764b2e"], 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 42.3682527s ago: executing program 4 (id=436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x915) 42.32441365s ago: executing program 4 (id=438): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x66be96ba}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,') 42.269927132s ago: executing program 4 (id=439): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r0 = creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) write$P9_RREADDIR(r0, &(0x7f0000000200)={0xc3, 0x29, 0x2, {0xf, [{{0x4, 0x0, 0x1}, 0x0, 0x85, 0x7, './file2'}, {{0x1, 0x1, 0x4}, 0x23f, 0x72, 0x7, './file2'}, {{0x8, 0x4, 0x6}, 0x2, 0x6, 0x7, './file2'}, {{0x0, 0x4, 0x6}, 0x1, 0x90, 0x5, './bus'}, {{0x0, 0x3, 0x2}, 0x800, 0x4, 0x7, './file2'}, {{0x1, 0x1, 0x1}, 0xfffffffffffffffa, 0x7, 0x7, './file2'}]}}, 0xc3) 41.578387775s ago: executing program 4 (id=453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001c00)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x9c}}, 0x0) 41.30399443s ago: executing program 4 (id=468): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10510, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x95bda107d86ebb57, @perf_config_ext={0xffff, 0xe}, 0x18, 0x10080, 0x6, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20801}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 41.272017701s ago: executing program 33 (id=468): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10510, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x95bda107d86ebb57, @perf_config_ext={0xffff, 0xe}, 0x18, 0x10080, 0x6, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20801}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1.666128087s ago: executing program 6 (id=2008): connect$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1.622480658s ago: executing program 5 (id=2010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="4b0003000000", 0x6) 1.610912348s ago: executing program 0 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020400) 1.603175888s ago: executing program 6 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000280)='system_u:object_r:dhcpd_unit_file_t:s0\x00', 0x27) 1.593371799s ago: executing program 5 (id=2013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}}], 0x2, 0x609d8d5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000001d40)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000280)=0x40) 1.51648172s ago: executing program 6 (id=2015): socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x28002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_bp={0x0, 0x7}, 0x1000, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 1.51590221s ago: executing program 0 (id=2016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.416520762s ago: executing program 6 (id=2017): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r1, 0x0, 0xeffd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.119509308s ago: executing program 3 (id=2020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pread64(r0, &(0x7f0000002200)=""/73, 0x49, 0x10000) 1.041775979s ago: executing program 0 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d11c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.026933709s ago: executing program 3 (id=2022): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) 984.246171ms ago: executing program 3 (id=2023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 983.856521ms ago: executing program 0 (id=2024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/20, 0x14}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) 908.563872ms ago: executing program 3 (id=2025): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x2c048044}, 0x40) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) 903.952822ms ago: executing program 3 (id=2026): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 778.390524ms ago: executing program 0 (id=2027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x908}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x0, 0x1ff, 0x10, 0x8, 0x0, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}}, 0x0) 731.796135ms ago: executing program 5 (id=2028): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xda, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 662.242157ms ago: executing program 0 (id=2029): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) 616.909858ms ago: executing program 5 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 576.641008ms ago: executing program 5 (id=2032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r2, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 546.858359ms ago: executing program 5 (id=2034): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/86, 0x56}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 293.309704ms ago: executing program 6 (id=2035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002d00)={0x53, 0x4, 0x6, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f00000007c0)="566e0f1a31f5", &(0x7f0000000800)=""/99, 0x100, 0x10, 0xffffffffffffffff, 0x0}) 292.782044ms ago: executing program 6 (id=2036): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)={0x69, 0x75, 0x2, {0x5e, "e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3af1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be98b6891a5b3e2127ef1bc89e84525d27"}}, 0x69) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 255.079475ms ago: executing program 3 (id=2039): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 113.719768ms ago: executing program 2 (id=2041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 88.651788ms ago: executing program 2 (id=2042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40080200000000000c001a80080005"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 78.805098ms ago: executing program 2 (id=2043): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r1, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 60.437608ms ago: executing program 2 (id=2044): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0xfffffffd}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x57) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 44.158709ms ago: executing program 2 (id=2045): fsopen(0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 0s ago: executing program 2 (id=2046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) kernel console output (not intermixed with test programs): T140] veth1_vlan: left promiscuous mode [ 40.023900][ T140] veth0_vlan: left promiscuous mode [ 40.120755][ T3677] loop4: detected capacity change from 0 to 512 [ 40.138199][ T140] team0 (unregistering): Port device team_slave_1 removed [ 40.146941][ T3677] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.175716][ T3677] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 40.237690][ T140] team0 (unregistering): Port device team_slave_0 removed [ 40.265268][ T3306] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 40.308203][ T3626] chnl_net:caif_netlink_parms(): no params data found [ 40.317202][ T3683] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 40.326219][ T3683] SELinux: failed to load policy [ 40.372965][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.380509][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.388388][ T3626] bridge_slave_0: entered allmulticast mode [ 40.395033][ T3626] bridge_slave_0: entered promiscuous mode [ 40.402142][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.409434][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.416665][ T3626] bridge_slave_1: entered allmulticast mode [ 40.424236][ T3626] bridge_slave_1: entered promiscuous mode [ 40.439064][ T3692] netlink: 'syz.2.85': attribute type 2 has an invalid length. [ 40.446790][ T3692] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 40.454385][ T3692] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.85'. [ 40.475050][ T3626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.495931][ T3626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.523182][ T3626] team0: Port device team_slave_0 added [ 40.530290][ T3626] team0: Port device team_slave_1 added [ 40.550142][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.557290][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.583564][ T3626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.598899][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.605952][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.632235][ T3626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.659779][ T3626] hsr_slave_0: entered promiscuous mode [ 40.667825][ T3626] hsr_slave_1: entered promiscuous mode [ 40.679328][ T3697] syz.2.87 (3697) used greatest stack depth: 10176 bytes left [ 40.744321][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 40.744341][ T29] audit: type=1400 audit(1758916891.769:231): avc: denied { ioctl } for pid=3700 comm="syz.2.88" path="socket:[6254]" dev="sockfs" ino=6254 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.804471][ T3701] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 40.831352][ T3703] loop0: detected capacity change from 0 to 256 [ 40.841668][ T3626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.852910][ T3626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.863700][ T3626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.869693][ T3705] loop2: detected capacity change from 0 to 128 [ 40.881122][ T3626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.928439][ T3626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.937637][ T3715] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 40.941862][ T3626] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.954571][ T3715] SELinux: failed to load policy [ 40.969899][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.977245][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.988971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.996129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.045553][ T3722] loop0: detected capacity change from 0 to 512 [ 41.052905][ T3722] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.066580][ T3722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.090360][ T3722] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.104736][ T3722] EXT4-fs (loop0): 1 truncate cleaned up [ 41.110899][ T3722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.132491][ T29] audit: type=1400 audit(1758916892.149:232): avc: denied { name_connect } for pid=3729 comm="wg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 41.164258][ T3626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.179295][ T29] audit: type=1400 audit(1758916892.199:233): avc: denied { shutdown } for pid=3729 comm="syz.2.97" laddr=fe80::f lport=43102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.235823][ T29] audit: type=1400 audit(1758916892.239:234): avc: denied { create } for pid=3721 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.255902][ T29] audit: type=1400 audit(1758916892.239:235): avc: denied { setattr } for pid=3721 comm="syz.0.95" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.302996][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.328606][ T29] audit: type=1400 audit(1758916892.349:236): avc: denied { connect } for pid=3742 comm="syz.4.98" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.349387][ T29] audit: type=1400 audit(1758916892.349:237): avc: denied { write } for pid=3742 comm="syz.4.98" path="socket:[6390]" dev="sockfs" ino=6390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.375765][ T3746] loop2: detected capacity change from 0 to 2048 [ 41.394943][ T29] audit: type=1326 audit(1758916892.419:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682deeec9 code=0x7ffc0000 [ 41.418420][ T29] audit: type=1326 audit(1758916892.419:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa682deeec9 code=0x7ffc0000 [ 41.441862][ T29] audit: type=1326 audit(1758916892.419:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682deeec9 code=0x7ffc0000 [ 41.474633][ T3746] loop2: p1 < > p4 [ 41.479558][ T3746] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.511213][ T3626] veth0_vlan: entered promiscuous mode [ 41.544992][ T3626] veth1_vlan: entered promiscuous mode [ 41.560723][ T3626] veth0_macvtap: entered promiscuous mode [ 41.580428][ T3626] veth1_macvtap: entered promiscuous mode [ 41.608536][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.631574][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.667866][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.681519][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.711887][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.734447][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.784778][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.792347][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.799990][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.810060][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.817665][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.825278][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.832738][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.840337][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.847933][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.855420][ T3379] hid-generic 0003:0000:0001.0001: unknown main item tag 0x0 [ 41.869813][ T3379] hid-generic 0003:0000:0001.0001: hidraw0: USB HID v8.00 Device [syz0] on syz1 [ 41.953675][ T3801] netlink: 76 bytes leftover after parsing attributes in process `syz.4.122'. [ 42.094382][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.106335][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.153052][ T3827] loop4: detected capacity change from 0 to 8192 [ 42.213347][ T3835] blk_print_req_error: 36 callbacks suppressed [ 42.213366][ T3835] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.230507][ T3835] FAT-fs (loop7): unable to read boot sector [ 42.276679][ T3841] loop3: detected capacity change from 0 to 1024 [ 42.286599][ T3841] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.140: Failed to acquire dquot type 0 [ 42.307327][ T3841] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.328381][ T3841] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.140: corrupted inode contents [ 42.341438][ T3841] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.140: mark_inode_dirty error [ 42.358489][ T3841] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.140: corrupted inode contents [ 42.370887][ T3841] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.140: mark_inode_dirty error [ 42.390809][ T3850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.144'. [ 42.391346][ T3841] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.140: corrupted inode contents [ 42.426155][ T3841] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 42.436715][ T3841] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.140: corrupted inode contents [ 42.449101][ T3841] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.140: mark_inode_dirty error [ 42.462199][ T3841] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 42.472558][ T3841] EXT4-fs (loop3): 1 truncate cleaned up [ 42.479488][ T3841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.515923][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.526756][ T3854] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 42.534544][ T3854] SELinux: failed to load policy [ 42.554858][ T3856] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 42.562704][ T3856] SELinux: failed to load policy [ 42.945024][ T3872] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.979643][ T3870] loop0: detected capacity change from 0 to 4096 [ 42.995685][ T3870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.056737][ T3883] 9pnet: p9_errstr2errno: server reported unknown error @c$ [ 43.181612][ T3891] ref_ctr_offset mismatch. inode: 0x38 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 43.261115][ T3897] tmpfs: Bad value for 'mpol' [ 43.287426][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.320788][ T3903] vlan2: entered allmulticast mode [ 43.326587][ T3903] dummy0: entered allmulticast mode [ 43.364054][ T3910] syz.0.169 uses obsolete (PF_INET,SOCK_PACKET) [ 43.404543][ T3903] Zero length message leads to an empty skb [ 43.477756][ T3920] Driver unsupported XDP return value 0 on prog (id 140) dev N/A, expect packet loss! [ 43.540328][ T3931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.561003][ T3930] netlink: 'syz.4.180': attribute type 6 has an invalid length. [ 43.614033][ T3940] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 43.621874][ T3940] SELinux: failed to load policy [ 43.632533][ T3945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.185'. [ 43.859185][ T3976] loop0: detected capacity change from 0 to 1024 [ 43.887312][ T3976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.909877][ T3976] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.930111][ T3976] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.199: lblock 1 mapped to illegal pblock 1 (length 15) [ 43.949464][ T3976] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 43.961995][ T3976] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.961995][ T3976] [ 43.988236][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.101846][ T4007] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 44.110070][ T4007] SELinux: failed to load policy [ 44.324133][ T4023] loop2: detected capacity change from 0 to 512 [ 44.331238][ T4023] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.344602][ T4023] EXT4-fs (loop2): 1 truncate cleaned up [ 44.350887][ T4023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.386625][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.493441][ T4037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.224'. [ 44.502429][ T4037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.224'. [ 44.568417][ T4053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 44.587654][ T4056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 44.590196][ T4053] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 44.629474][ T4062] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 44.637593][ T4062] SELinux: failed to load policy [ 44.876864][ T4089] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 44.884973][ T4089] SELinux: failed to load policy [ 44.904614][ T4091] netlink: 96 bytes leftover after parsing attributes in process `syz.4.249'. [ 44.992088][ T4097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.338187][ T4120] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 45.351130][ T4120] SELinux: failed to load policy [ 45.362648][ T4122] loop4: detected capacity change from 0 to 128 [ 45.376047][ T4122] syz.4.262: attempt to access beyond end of device [ 45.376047][ T4122] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 45.376650][ T4124] loop3: detected capacity change from 0 to 1024 [ 45.398537][ T4124] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.409620][ T4124] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.421392][ T4124] JBD2: no valid journal superblock found [ 45.427240][ T4124] EXT4-fs (loop3): Could not load journal inode [ 45.446922][ T4124] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 45.578062][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 45.587168][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 45.617316][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 45.626361][ T4138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.269'. [ 45.635363][ T4138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 45.647998][ T4138] netlink: 'syz.4.269': attribute type 6 has an invalid length. [ 45.739001][ T4152] syz.3.275 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.771597][ T4156] unsupported nlmsg_type 40 [ 45.776332][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 45.776357][ T29] audit: type=1400 audit(1758916896.789:446): avc: denied { write } for pid=4155 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.802667][ T29] audit: type=1400 audit(1758916896.789:447): avc: denied { nlmsg_write } for pid=4155 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.846454][ T4162] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 45.894658][ T29] audit: type=1326 audit(1758916896.909:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 45.918014][ T29] audit: type=1326 audit(1758916896.909:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 45.941381][ T29] audit: type=1326 audit(1758916896.909:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 45.966471][ T29] audit: type=1400 audit(1758916896.969:451): avc: denied { create } for pid=4169 comm="syz.5.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.986158][ T29] audit: type=1400 audit(1758916896.969:452): avc: denied { listen } for pid=4169 comm="syz.5.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.005839][ T29] audit: type=1400 audit(1758916896.969:453): avc: denied { ioctl } for pid=4169 comm="syz.5.285" path="socket:[7101]" dev="sockfs" ino=7101 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.030524][ T29] audit: type=1326 audit(1758916896.979:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 46.036581][ T4176] loop3: detected capacity change from 0 to 256 [ 46.053915][ T29] audit: type=1326 audit(1758916896.979:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 46.106376][ T4178] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 46.114629][ T4178] SELinux: failed to load policy [ 46.125748][ T4180] SELinux: failed to load policy [ 46.429287][ T4217] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 46.438213][ T4217] SELinux: failed to load policy [ 46.565992][ T4232] loop3: detected capacity change from 0 to 1024 [ 46.586242][ T4232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.628641][ T4240] loop4: detected capacity change from 0 to 1024 [ 46.645793][ T4240] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.656805][ T4240] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.727340][ T4240] JBD2: no valid journal superblock found [ 46.733370][ T4240] EXT4-fs (loop4): Could not load journal inode [ 46.751242][ T4240] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 46.754920][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.102956][ T4266] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 47.335849][ T4276] loop0: detected capacity change from 0 to 1024 [ 47.343890][ T4276] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.366120][ T4276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.417900][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.462406][ T4291] loop2: detected capacity change from 0 to 1024 [ 47.489768][ T4291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.490699][ T4298] loop0: detected capacity change from 0 to 256 [ 47.508969][ T4298] msdos: Bad value for 'fmask' [ 47.516897][ T4291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.336: inode #65079: comm syz.2.336: iget: illegal inode # [ 47.531025][ T4291] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.336: error while reading EA inode 65079 err=-117 [ 47.572421][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.930482][ T4352] SELinux: Context is not valid (left unmapped). [ 48.159702][ T4380] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 48.283472][ T4398] loop3: detected capacity change from 0 to 512 [ 48.294610][ T4398] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.457588][ T4414] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 48.566533][ T4436] loop3: detected capacity change from 0 to 128 [ 48.574967][ T4436] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.590757][ T4436] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.623848][ T4447] netlink: 'syz.0.407': attribute type 29 has an invalid length. [ 48.635404][ T4447] netlink: 'syz.0.407': attribute type 29 has an invalid length. [ 48.666185][ T4449] ALSA: seq fatal error: cannot create timer (-22) [ 48.670580][ T4452] loop0: detected capacity change from 0 to 512 [ 48.700447][ T4454] netlink: 'syz.3.408': attribute type 16 has an invalid length. [ 48.708360][ T4454] netlink: 'syz.3.408': attribute type 17 has an invalid length. [ 48.717414][ T4452] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.410: ea_inode file size=0 entry size=6 [ 48.731448][ T4452] ------------[ cut here ]------------ [ 48.736993][ T4452] EA inode 11 i_nlink=2 [ 48.737287][ T4452] WARNING: CPU: 1 PID: 4452 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 48.751964][ T4452] Modules linked in: [ 48.755969][ T4452] CPU: 1 UID: 0 PID: 4452 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.765900][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.776172][ T4452] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 48.783025][ T4452] Code: 90 49 8d 7e 40 e8 9c f8 b7 ff 4d 8b 6e 40 4c 89 e7 e8 b0 f3 b7 ff 41 8b 56 48 48 c7 c7 07 9c 54 86 4c 89 ee e8 bd de 66 ff 90 <0f> 0b 90 90 e9 58 fe ff ff e8 ee 5c ad 03 66 66 66 66 66 2e 0f 1f [ 48.803155][ T4452] RSP: 0018:ffffc9000371f7c8 EFLAGS: 00010246 [ 48.809441][ T4452] RAX: 1dfd8c75809ce100 RBX: ffff88811a522010 RCX: 0000000000080000 [ 48.817614][ T4452] RDX: ffffc90001b32000 RSI: 0000000000004732 RDI: 0000000000004733 [ 48.825781][ T4452] RBP: 0000000000000002 R08: 0001c9000371f63f R09: 0000000000000000 [ 48.833845][ T4452] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a521fc0 [ 48.841961][ T4452] R13: 000000000000000b R14: ffff88811a521f78 R15: 0000000000000001 [ 48.841966][ T4466] loop5: detected capacity change from 0 to 2048 [ 48.856378][ T4452] FS: 00007f4358d7f6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 48.865359][ T4452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.872015][ T4452] CR2: 00007f77d7ab7dac CR3: 000000011ae4e000 CR4: 00000000003506f0 [ 48.880151][ T4452] Call Trace: [ 48.883525][ T4452] [ 48.886518][ T4452] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 48.892577][ T4452] ? errseq_check+0x2c/0x50 [ 48.897151][ T4452] ext4_xattr_delete_inode+0x6b7/0x790 [ 48.902763][ T4452] ? ext4_truncate+0x92e/0xae0 [ 48.907665][ T4452] ext4_evict_inode+0xa6a/0xd90 [ 48.912568][ T4452] ? __pfx_ext4_evict_inode+0x10/0x10 [ 48.918168][ T4452] evict+0x2e0/0x550 [ 48.922133][ T4452] ? __dquot_initialize+0x146/0x7c0 [ 48.927423][ T4452] iput+0x447/0x5b0 [ 48.931279][ T4452] ext4_process_orphan+0x1a9/0x1c0 [ 48.936592][ T4452] ext4_orphan_cleanup+0x6a8/0xa00 [ 48.941746][ T4452] ext4_fill_super+0x3260/0x35d0 [ 48.946757][ T4452] ? set_blocksize+0x1a8/0x310 [ 48.951582][ T4452] ? sb_set_blocksize+0xe3/0x100 [ 48.956665][ T4452] ? setup_bdev_super+0x30e/0x370 [ 48.961724][ T4452] ? __pfx_ext4_fill_super+0x10/0x10 [ 48.967138][ T4452] get_tree_bdev_flags+0x291/0x300 [ 48.972313][ T4452] ? __pfx_ext4_fill_super+0x10/0x10 [ 48.977656][ T4452] get_tree_bdev+0x1f/0x30 [ 48.982158][ T4452] ext4_get_tree+0x1c/0x30 [ 48.986717][ T4452] vfs_get_tree+0x54/0x1d0 [ 48.991221][ T4452] do_new_mount+0x207/0x5e0 [ 48.995767][ T4452] ? security_capable+0x83/0x90 [ 49.000657][ T4452] path_mount+0x4a4/0xb20 [ 49.005059][ T4452] ? user_path_at+0x109/0x130 [ 49.009771][ T4452] __se_sys_mount+0x28f/0x2e0 [ 49.014518][ T4452] __x64_sys_mount+0x67/0x80 [ 49.019150][ T4452] x64_sys_call+0x2b4d/0x2ff0 [ 49.023867][ T4452] do_syscall_64+0xd2/0x200 [ 49.028397][ T4452] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.034669][ T4452] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.040619][ T4452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.046705][ T4452] RIP: 0033:0x7f435a32066a [ 49.051250][ T4452] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.072070][ T4452] RSP: 002b:00007f4358d7ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.081470][ T4452] RAX: ffffffffffffffda RBX: 00007f4358d7eef0 RCX: 00007f435a32066a [ 49.090039][ T4452] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f4358d7eeb0 [ 49.098193][ T4452] RBP: 0000200000000180 R08: 00007f4358d7eef0 R09: 0000000000800700 [ 49.106294][ T4452] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 49.114427][ T4452] R13: 00007f4358d7eeb0 R14: 0000000000000473 R15: 0000200000000680 [ 49.122417][ T4452] [ 49.125488][ T4452] ---[ end trace 0000000000000000 ]--- [ 49.131370][ T4452] EXT4-fs (loop0): 1 orphan inode deleted [ 49.137264][ T4454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.138910][ T4452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.177930][ T4467] loop5: p1 < > p4 [ 49.187460][ T4467] loop5: p4 size 8388608 extends beyond EOD, truncated [ 49.210497][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.220128][ T4466] loop5: p1 < > p4 [ 49.229301][ T4466] loop5: p4 size 8388608 extends beyond EOD, truncated [ 49.469936][ T4504] loop0: detected capacity change from 0 to 512 [ 49.485661][ T4504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.494203][ T4506] loop2: detected capacity change from 0 to 2048 [ 49.502820][ T4504] EXT4-fs (loop0): 1 truncate cleaned up [ 49.510472][ T4504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.526080][ T4504] EXT4-fs (loop0): shut down requested (2) [ 49.550787][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.566801][ T4506] Alternate GPT is invalid, using primary GPT. [ 49.573244][ T4506] loop2: p1 p2 p3 [ 49.577088][ T4506] loop2: partition table partially beyond EOD, truncated [ 49.614700][ T4519] __nla_validate_parse: 8 callbacks suppressed [ 49.614717][ T4519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 49.629909][ T4519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 49.650266][ T4519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 49.659259][ T4519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 49.674141][ T4523] loop4: detected capacity change from 0 to 512 [ 49.692557][ T4519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 49.701642][ T4519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.437'. [ 49.716505][ T4523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.740222][ T4523] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.774511][ T36] hid_parser_main: 18 callbacks suppressed [ 49.774582][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.787961][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.795570][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.803168][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.803996][ T4523] loop4: detected capacity change from 512 to 0 [ 49.810584][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.819648][ C0] I/O error, dev loop4, sector 80 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 49.824537][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.834596][ C0] I/O error, dev loop4, sector 60 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 49.841404][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.851028][ T4537] EXT4-fs error (device loop4): ext4_write_dquot:6917: comm syz.4.439: Failed to commit dquot type 0 [ 49.858541][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.876929][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.877927][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 49.884473][ T36] hid-generic 0003:0000:0001.0002: unknown main item tag 0x0 [ 49.893977][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 49.902766][ T36] hid-generic 0003:0000:0001.0002: hidraw0: USB HID v8.00 Device [syz0] on syz1 [ 49.910849][ C0] buffer_io_error: 5 callbacks suppressed [ 49.910867][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 49.911112][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 49.941552][ C0] I/O error, dev loop4, sector 76 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 49.953673][ T4537] EXT4-fs error (device loop4): ext4_write_dquot:6917: comm syz.4.439: Failed to commit dquot type 1 [ 49.965921][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 49.975466][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 49.984956][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 49.993355][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 50.002364][ C1] I/O error, dev loop4, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.010752][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.012421][ C1] I/O error, dev loop4, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.021488][ T4539] FAT-fs (loop1): unable to read boot sector [ 50.031852][ T4537] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #18: block 35: comm syz.4.439: unable to read itable block [ 50.050208][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.058909][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 50.065876][ T4537] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 50.075110][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.084516][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 50.091504][ T4537] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #18: comm syz.4.439: mark_inode_dirty error [ 50.109375][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.118667][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 50.146768][ T4537] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #18: block 35: comm syz.4.439: unable to read itable block [ 50.162785][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.171178][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 50.178049][ T4537] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 50.199931][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.204244][ T4545] capability: warning: `syz.5.448' uses 32-bit capabilities (legacy support in use) [ 50.211013][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 50.224734][ T4537] EXT4-fs error (device loop4): ext4_truncate:4666: inode #18: comm syz.4.439: mark_inode_dirty error [ 50.242968][ T4550] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 50.242968][ T4550] program syz.0.458 not setting count and/or reply_len properly [ 50.252124][ T4549] loop3: detected capacity change from 0 to 4096 [ 50.268042][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.276789][ T4537] EXT4-fs (loop4): I/O error while writing superblock [ 50.289738][ T4549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.378890][ T3306] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 34: comm syz-executor: unable to read itable block [ 50.409112][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.417763][ T3306] EXT4-fs (loop4): I/O error while writing superblock [ 50.424615][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 50.453315][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 50.580126][ T4581] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 50.593493][ T4581] sel_write_load: 2 callbacks suppressed [ 50.593509][ T4581] SELinux: failed to load policy [ 50.629231][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.685094][ T4589] loop2: detected capacity change from 0 to 2048 [ 50.697022][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.710154][ T4590] loop0: detected capacity change from 0 to 2048 [ 50.718195][ T4589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.783935][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.818578][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.842480][ T3305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 50.860890][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.872525][ T3305] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 50.896168][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 50.896184][ T29] audit: type=1400 audit(1758916901.928:652): avc: denied { bind } for pid=4609 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.923523][ T29] audit: type=1400 audit(1758916901.948:653): avc: denied { unlink } for pid=3305 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.945720][ T29] audit: type=1400 audit(1758916901.958:654): avc: denied { write } for pid=4609 comm="syz.3.473" path="socket:[8038]" dev="sockfs" ino=8038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.947958][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.014438][ T12] bridge_slave_1: left allmulticast mode [ 51.020158][ T12] bridge_slave_1: left promiscuous mode [ 51.025891][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.036478][ T12] bridge_slave_0: left allmulticast mode [ 51.042197][ T12] bridge_slave_0: left promiscuous mode [ 51.047988][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.077199][ T29] audit: type=1400 audit(1758916902.108:655): avc: denied { mount } for pid=4620 comm="syz.3.478" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 51.099689][ T29] audit: type=1400 audit(1758916902.108:656): avc: denied { unmount } for pid=4620 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 51.160291][ T4629] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 51.168533][ T4629] SELinux: failed to load policy [ 51.176877][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.186835][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.197519][ T12] bond0 (unregistering): Released all slaves [ 51.207844][ T4593] chnl_net:caif_netlink_parms(): no params data found [ 51.242658][ T12] hsr_slave_0: left promiscuous mode [ 51.249605][ T12] hsr_slave_1: left promiscuous mode [ 51.257556][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.265024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.272983][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.280594][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.306297][ T12] veth1_macvtap: left promiscuous mode [ 51.311900][ T12] veth0_macvtap: left promiscuous mode [ 51.317573][ T12] veth1_vlan: left promiscuous mode [ 51.323255][ T12] veth0_vlan: left promiscuous mode [ 51.408967][ T12] team0 (unregistering): Port device team_slave_1 removed [ 51.418996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 51.467976][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.475127][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.482401][ T4593] bridge_slave_0: entered allmulticast mode [ 51.491418][ T4593] bridge_slave_0: entered promiscuous mode [ 51.498380][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.505534][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.512806][ T4593] bridge_slave_1: entered allmulticast mode [ 51.519536][ T4593] bridge_slave_1: entered promiscuous mode [ 51.536892][ T4593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.547702][ T4593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.568292][ T4593] team0: Port device team_slave_0 added [ 51.575095][ T4593] team0: Port device team_slave_1 added [ 51.592044][ T4593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.599159][ T4593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.625769][ T4593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.639229][ T4593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.646311][ T4593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.672419][ T4593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.717053][ T4593] hsr_slave_0: entered promiscuous mode [ 51.725049][ T4593] hsr_slave_1: entered promiscuous mode [ 51.736596][ T4593] debugfs: 'hsr0' already exists in 'hsr' [ 51.742414][ T4593] Cannot create hsr debugfs directory [ 51.835188][ T4593] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.844838][ T4593] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.854817][ T4593] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.861831][ T29] audit: type=1400 audit(1758916902.888:657): avc: denied { setopt } for pid=4652 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.882493][ T29] audit: type=1400 audit(1758916902.888:658): avc: denied { block_suspend } for pid=4652 comm="syz.0.489" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.913699][ T4593] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.980542][ T4669] tmpfs: Bad value for 'mpol' [ 52.004568][ T29] audit: type=1326 audit(1758916903.028:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435a31eec9 code=0x7ffc0000 [ 52.009386][ T4593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.028172][ T29] audit: type=1326 audit(1758916903.028:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435a31eec9 code=0x7ffc0000 [ 52.028231][ T29] audit: type=1326 audit(1758916903.038:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4670 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435a31eec9 code=0x7ffc0000 [ 52.127588][ T4593] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.141453][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.148719][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.168083][ T4680] loop5: detected capacity change from 0 to 512 [ 52.174670][ T4593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.185443][ T4593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.208927][ T4680] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.210117][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.222472][ T4680] EXT4-fs (loop5): 1 truncate cleaned up [ 52.227038][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.234779][ T4680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.289713][ T4680] Invalid ELF header magic: != ELF [ 52.325217][ T4689] netlink: 3 bytes leftover after parsing attributes in process `syz.3.503'. [ 52.327217][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.334368][ T4689] 0X: renamed from caif0 [ 52.358382][ T4689] 0X: entered allmulticast mode [ 52.363707][ T4689] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 52.379736][ T4695] loop2: detected capacity change from 0 to 512 [ 52.399085][ T10] hid-generic 0000:0000:10001.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 52.406691][ T4593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.434260][ T4695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.478786][ T4695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.503271][ T4695] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.676087][ T4730] pimreg: entered allmulticast mode [ 52.699904][ T4593] veth0_vlan: entered promiscuous mode [ 52.715963][ T4730] pimreg: left allmulticast mode [ 52.725911][ T4593] veth1_vlan: entered promiscuous mode [ 52.747269][ T4593] veth0_macvtap: entered promiscuous mode [ 52.755499][ T4593] veth1_macvtap: entered promiscuous mode [ 52.775237][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.782471][ T4593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.798024][ T4593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.811816][ T140] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.830558][ T140] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.847511][ T140] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.869836][ T140] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.876289][ T4743] loop0: detected capacity change from 0 to 1024 [ 52.907256][ T4743] EXT4-fs: Ignoring removed bh option [ 52.912921][ T4743] EXT4-fs: inline encryption not supported [ 52.920107][ T4743] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.959283][ T4743] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.521: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.974385][ T4760] SELinux: policydb version 384 does not match my version range 15-35 [ 52.982738][ T4760] SELinux: failed to load policy [ 53.008448][ T4766] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 53.018793][ T4743] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.521: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.029175][ T4766] SELinux: failed to load policy [ 53.040722][ T4743] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.521: Failed to acquire dquot type 0 [ 53.056153][ T4770] pim6reg: entered allmulticast mode [ 53.064100][ T4770] pim6reg: left allmulticast mode [ 53.072381][ T4743] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 53.084613][ T4743] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.521: mark_inode_dirty error [ 53.100581][ T4743] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 53.112772][ T4743] EXT4-fs (loop0): 1 orphan inode deleted [ 53.123230][ T140] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.148337][ T4743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.162355][ T140] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 53.176798][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.187672][ T4743] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.521: Invalid inode table block 1 in block_group 0 [ 53.204076][ T4743] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 53.215484][ T4743] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.521: mark_inode_dirty error [ 53.310546][ T4787] loop2: detected capacity change from 0 to 128 [ 53.352178][ T4789] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 53.360557][ T4789] SELinux: failed to load policy [ 53.536198][ T4803] netlink: 'syz.3.544': attribute type 10 has an invalid length. [ 53.544392][ T4803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.544'. [ 53.554633][ T4803] dummy0: entered promiscuous mode [ 53.618651][ T4807] vhci_hcd: invalid port number 96 [ 53.624081][ T4807] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 53.934601][ T4846] loop0: detected capacity change from 0 to 164 [ 53.952262][ T4848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.565'. [ 53.965458][ T4846] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 53.979258][ C0] hrtimer: interrupt took 30864 ns [ 54.019261][ T4854] ref_ctr_offset mismatch. inode: 0x2e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 54.046477][ T4861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.570'. [ 54.087969][ T4867] tmpfs: Bad value for 'mpol' [ 54.132862][ T4871] loop5: detected capacity change from 0 to 512 [ 54.141815][ T4871] EXT4-fs: Ignoring removed oldalloc option [ 54.151489][ T4871] EXT4-fs (loop5): 1 truncate cleaned up [ 54.167988][ T4871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.181102][ T4883] loop0: detected capacity change from 0 to 512 [ 54.197833][ T140] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 54.211860][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.234164][ T4883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.253790][ T4883] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.302889][ T4883] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm +}[@: corrupted inode contents [ 54.327023][ T4883] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm +}[@: mark_inode_dirty error [ 54.346596][ T4883] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm +}[@: corrupted inode contents [ 54.358150][ T4900] loop3: detected capacity change from 0 to 512 [ 54.374625][ T4883] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm +}[@: mark_inode_dirty error [ 54.378318][ T4900] EXT4-fs: Ignoring removed i_version option [ 54.391505][ T4900] EXT4-fs: Ignoring removed bh option [ 54.443899][ T4906] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 54.455957][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.462204][ T4906] SELinux: failed to load policy [ 54.467891][ T4910] loop2: detected capacity change from 0 to 7 [ 54.477219][ T4900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.497427][ T4900] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.556894][ T4917] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4917 comm=syz.5.594 [ 54.559223][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.758239][ T4922] __nla_validate_parse: 2 callbacks suppressed [ 54.758304][ T4922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.596'. [ 54.880177][ T4941] sd 0:0:1:0: device reset [ 54.932892][ T4956] netlink: 19 bytes leftover after parsing attributes in process `syz.0.609'. [ 54.979733][ T4964] netlink: 'syz.5.612': attribute type 21 has an invalid length. [ 54.988542][ T4964] netlink: 132 bytes leftover after parsing attributes in process `syz.5.612'. [ 54.997781][ T4964] netlink: 'syz.5.612': attribute type 1 has an invalid length. [ 55.052269][ T4972] loop6: detected capacity change from 0 to 164 [ 55.066816][ T4972] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 55.092059][ T4973] can0: slcan on ttyS3. [ 55.196106][ T4978] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 55.204020][ T4978] SELinux: failed to load policy [ 55.373359][ T4973] can0 (unregistered): slcan off ttyS3. [ 55.392939][ T4976] can0: slcan on ttyS3. [ 55.457837][ T4988] loop2: detected capacity change from 0 to 1024 [ 55.473281][ T4970] can0 (unregistered): slcan off ttyS3. [ 55.508091][ T4988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.543632][ T4988] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.582261][ T4988] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.624: lblock 1 mapped to illegal pblock 1 (length 15) [ 55.597924][ T4988] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 55.610467][ T4988] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.610467][ T4988] [ 55.637154][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.659849][ T5011] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 55.667773][ T5011] SELinux: failed to load policy [ 55.685502][ T5015] hsr0: entered allmulticast mode [ 55.690604][ T5015] hsr_slave_0: entered allmulticast mode [ 55.696449][ T5015] hsr_slave_1: entered allmulticast mode [ 55.702964][ T5015] hsr_slave_0: left promiscuous mode [ 55.710016][ T5015] hsr_slave_1: left promiscuous mode [ 55.720020][ T5015] hsr0 (unregistering): left allmulticast mode [ 55.728529][ T5013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.634'. [ 55.766829][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.636'. [ 55.797711][ T5021] loop5: detected capacity change from 0 to 512 [ 55.821774][ T5021] EXT4-fs: Ignoring removed bh option [ 55.838546][ T5021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.861528][ T5021] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.954188][ T5029] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 55.955466][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.989905][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 55.989923][ T29] audit: type=1400 audit(1758916907.018:788): avc: denied { mounton } for pid=5030 comm="syz.5.641" path="/proc/186/task" dev="proc" ino=9855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.020195][ T5034] loop0: detected capacity change from 0 to 512 [ 56.028020][ T5034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.051613][ T5034] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.058911][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811abc5000: rx timeout, send abort [ 56.067215][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811abc4a00: rx timeout, send abort [ 56.075594][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811abc5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 56.089956][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811abc4a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 56.131977][ T5034] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.642: bg 0: block 248: padding at end of block bitmap is not set [ 56.171111][ T5034] Quota error (device loop0): write_blk: dquota write failed [ 56.178624][ T5034] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 56.188599][ T5034] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.642: Failed to acquire dquot type 1 [ 56.227329][ T5034] EXT4-fs (loop0): 1 truncate cleaned up [ 56.241252][ T5034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.258818][ T5047] netlink: 'syz.3.648': attribute type 21 has an invalid length. [ 56.291507][ T5034] syz.0.642 (5034) used greatest stack depth: 9280 bytes left [ 56.299675][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.320591][ T5054] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 56.329298][ T5054] SELinux: failed to load policy [ 56.336803][ T29] audit: type=1400 audit(1758916907.368:789): avc: denied { create } for pid=5055 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.365462][ T29] audit: type=1400 audit(1758916907.398:790): avc: denied { setopt } for pid=5055 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.437921][ T5062] loop5: detected capacity change from 0 to 2048 [ 56.466666][ T5071] program syz.0.659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.492223][ T5062] EXT4-fs (loop5): failed to initialize system zone (-117) [ 56.511032][ T5062] EXT4-fs (loop5): mount failed [ 56.605519][ T29] audit: type=1400 audit(1758916907.638:791): avc: denied { setopt } for pid=5083 comm="syz.6.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.625352][ T5084] IPVS: stopping master sync thread 5085 ... [ 56.627209][ T5085] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 56.700849][ T5097] SELinux: failed to load policy [ 56.739681][ T29] audit: type=1326 audit(1758916907.768:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 56.783433][ T29] audit: type=1326 audit(1758916907.798:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 56.807382][ T29] audit: type=1326 audit(1758916907.798:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 56.830970][ T29] audit: type=1326 audit(1758916907.798:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 56.934013][ T5118] blk_print_req_error: 37 callbacks suppressed [ 56.934037][ T5118] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.949991][ T5118] FAT-fs (loop5): unable to read boot sector [ 56.955241][ T5120] loop6: detected capacity change from 0 to 512 [ 56.985928][ T5120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.022400][ T5120] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.097646][ T5120] syz.6.681 (5120) used greatest stack depth: 8960 bytes left [ 57.112212][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.129175][ T5135] loop5: detected capacity change from 0 to 1024 [ 57.147641][ T5135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.263216][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.376250][ T5159] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 57.384652][ T5159] SELinux: failed to load policy [ 57.442488][ T5166] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 57.515477][ T5170] loop0: detected capacity change from 0 to 512 [ 57.563696][ T5170] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.900594][ T5195] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 57.920522][ T5195] SELinux: failed to load policy [ 57.932745][ T5197] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 57.959982][ T5197] SELinux: failed to load policy [ 58.149547][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 58.168248][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 58.186302][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 58.196315][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 58.360516][ T5240] loop3: detected capacity change from 0 to 128 [ 58.367458][ T5240] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.380289][ T5240] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.412945][ T3327] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.544161][ T5249] loop3: detected capacity change from 0 to 512 [ 58.551476][ T5249] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.563785][ T5249] EXT4-fs (loop3): 1 truncate cleaned up [ 58.569817][ T5249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.601386][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.808856][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.818283][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.862548][ T5267] loop3: detected capacity change from 0 to 1024 [ 58.869167][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.735'. [ 58.879430][ T5267] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.896511][ T5267] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.734: Invalid block bitmap block 0 in block_group 0 [ 58.914692][ T5267] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.734: Failed to acquire dquot type 0 [ 58.930905][ T5276] sg_write: data in/out 987/8 bytes for SCSI command 0xfd-- guessing data in; [ 58.930905][ T5276] program syz.6.737 not setting count and/or reply_len properly [ 58.938202][ T5267] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.734: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.964170][ T5267] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.734: Invalid inode bitmap blk 0 in block_group 0 [ 58.979636][ T5267] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 58.988663][ T140] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 58.991177][ T5267] EXT4-fs (loop3): 1 orphan inode deleted [ 59.006985][ T5267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.021058][ T5267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.024997][ T5278] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.040794][ T5278] FAT-fs (loop11): unable to read boot sector [ 59.080029][ T5282] loop5: detected capacity change from 0 to 128 [ 59.088979][ T5282] FAT-fs (loop5): Directory bread(block 162) failed [ 59.096906][ T5282] FAT-fs (loop5): Directory bread(block 163) failed [ 59.103948][ T5267] loop3: detected capacity change from 0 to 256 [ 59.105828][ T5282] FAT-fs (loop5): Directory bread(block 164) failed [ 59.123014][ T5282] FAT-fs (loop5): Directory bread(block 165) failed [ 59.130103][ T5282] FAT-fs (loop5): Directory bread(block 166) failed [ 59.136988][ T5282] FAT-fs (loop5): Directory bread(block 167) failed [ 59.143937][ T5282] FAT-fs (loop5): Directory bread(block 168) failed [ 59.150896][ T5282] FAT-fs (loop5): Directory bread(block 169) failed [ 59.162308][ T5282] FAT-fs (loop5): Directory bread(block 162) failed [ 59.169319][ T5282] FAT-fs (loop5): Directory bread(block 163) failed [ 59.180681][ T5282] syz.5.740: attempt to access beyond end of device [ 59.180681][ T5282] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 59.196367][ T5282] syz.5.740: attempt to access beyond end of device [ 59.196367][ T5282] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 59.282762][ T5298] infiniband syz!: set active [ 59.287707][ T5298] infiniband syz!: added team_slave_0 [ 59.313230][ T5298] RDS/IB: syz!: added [ 59.317473][ T5298] smc: adding ib device syz! with port count 1 [ 59.325598][ T5298] smc: ib device syz! port 1 has pnetid [ 59.369509][ T5316] loop2: detected capacity change from 0 to 512 [ 59.380188][ T5314] loop6: detected capacity change from 0 to 2048 [ 59.404263][ T5316] journal_path: Non-blockdev passed as './bus' [ 59.410473][ T5316] EXT4-fs: error: could not find journal device path [ 59.444903][ T5314] Alternate GPT is invalid, using primary GPT. [ 59.451238][ T5314] loop6: p1 p2 p3 [ 59.455033][ T5314] loop6: partition table partially beyond EOD, truncated [ 59.586088][ T5330] loop5: detected capacity change from 0 to 1024 [ 59.602603][ T5330] EXT4-fs: Ignoring removed bh option [ 59.610750][ T5334] program syz.3.763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.615499][ T5330] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.663459][ T5330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.722608][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.762520][ T5351] SELinux: policydb version 1207 does not match my version range 15-35 [ 59.780989][ T5351] SELinux: failed to load policy [ 59.828897][ T5364] __nla_validate_parse: 6 callbacks suppressed [ 59.828918][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'. [ 59.844147][ T5364] netlink: 212 bytes leftover after parsing attributes in process `syz.3.779'. [ 59.914247][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 59.923347][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 59.932308][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 60.173219][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 60.182283][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 60.191359][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 60.585270][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 60.594319][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.784'. [ 61.884586][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 61.884603][ T29] audit: type=1400 audit(1758916912.918:862): avc: denied { execute_no_trans } for pid=5381 comm="syz.6.786" path="/56/file1" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.937433][ T5399] loop6: detected capacity change from 0 to 512 [ 61.946376][ T29] audit: type=1326 audit(1758916912.948:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 61.947537][ T5399] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.970163][ T29] audit: type=1326 audit(1758916912.948:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 62.005300][ T29] audit: type=1326 audit(1758916912.948:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 62.040856][ T29] audit: type=1400 audit(1758916913.018:866): avc: denied { mount } for pid=5398 comm="syz.6.793" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 62.062803][ T29] audit: type=1400 audit(1758916913.068:867): avc: denied { setopt } for pid=5396 comm="syz.5.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.144069][ T29] audit: type=1400 audit(1758916913.178:868): avc: denied { map } for pid=5408 comm="syz.2.798" path="socket:[11470]" dev="sockfs" ino=11470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.222399][ T5416] hsr_slave_0: left promiscuous mode [ 62.228582][ T5416] hsr_slave_1: left promiscuous mode [ 62.461115][ T29] audit: type=1400 audit(1758916913.488:869): avc: denied { create } for pid=5454 comm="syz.6.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 62.480756][ T29] audit: type=1400 audit(1758916913.488:870): avc: denied { sys_admin } for pid=5454 comm="syz.6.816" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 62.544056][ T29] audit: type=1400 audit(1758916913.578:871): avc: denied { write } for pid=5464 comm="syz.6.821" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 62.586457][ T5469] program syz.3.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.235952][ T5534] serio: Serial port ttyS3 [ 63.272334][ T5539] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.283324][ T5538] loop3: detected capacity change from 0 to 2048 [ 63.291905][ T5539] FAT-fs (loop13): unable to read boot sector [ 63.295752][ T5541] pimreg: entered allmulticast mode [ 63.315799][ T5541] pimreg: left allmulticast mode [ 63.316045][ T5538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.339768][ T5538] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.464479][ T5561] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.854: bg 0: block 345: padding at end of block bitmap is not set [ 63.473016][ T5565] netlink: 'syz.5.864': attribute type 2 has an invalid length. [ 63.479668][ T5561] EXT4-fs (loop3): Remounting filesystem read-only [ 63.497867][ T3327] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 63.567102][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.942528][ T5620] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5620 comm=syz.2.888 [ 64.093454][ T5626] SELinux: ebitmap: truncated map [ 64.104446][ T5626] SELinux: failed to load policy [ 64.416419][ T5646] mmap: syz.5.898 (5646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.501131][ T5658] ./file0: Can't lookup blockdev [ 64.502597][ T5660] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.527966][ T5664] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 64.628275][ T5681] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 64.628275][ T5681] program syz.6.915 not setting count and/or reply_len properly [ 64.961112][ T5740] batadv1: entered promiscuous mode [ 64.977100][ T5731] SELinux: failed to load policy [ 65.077439][ T5755] loop6: detected capacity change from 0 to 512 [ 65.086559][ T5749] loop5: detected capacity change from 0 to 8192 [ 65.096404][ T5755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.134772][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.225571][ T5772] loop6: detected capacity change from 0 to 2048 [ 65.285097][ T5778] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 65.292894][ T5778] SELinux: failed to load policy [ 65.448646][ T5790] __nla_validate_parse: 9 callbacks suppressed [ 65.448667][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 65.494424][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 65.641065][ T5810] netlink: 256 bytes leftover after parsing attributes in process `syz.3.975'. [ 65.743843][ T5827] loop3: detected capacity change from 0 to 1024 [ 65.757316][ T5827] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.982: Failed to acquire dquot type 0 [ 65.776015][ T5827] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 65.797660][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.982: corrupted inode contents [ 65.830727][ T5827] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.982: mark_inode_dirty error [ 65.846463][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.982: corrupted inode contents [ 65.875294][ T5827] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.982: mark_inode_dirty error [ 65.891673][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.982: corrupted inode contents [ 65.906435][ T5827] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 65.915621][ T5827] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.982: corrupted inode contents [ 65.929564][ T5827] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.982: mark_inode_dirty error [ 65.940799][ T5827] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 65.965040][ T5827] EXT4-fs (loop3): 1 truncate cleaned up [ 65.978237][ T5827] nfs: Bad value for 'source' [ 66.273004][ T5896] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1010'. [ 66.296652][ T5885] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1010'. [ 66.449157][ T5916] loop3: detected capacity change from 0 to 512 [ 66.471027][ T5916] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.486760][ T5920] random: crng reseeded on system resumption [ 66.549980][ T5926] syzkaller1: entered promiscuous mode [ 66.555590][ T5926] syzkaller1: entered allmulticast mode [ 66.782380][ T5963] loop3: detected capacity change from 0 to 512 [ 66.792271][ T5963] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.836781][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 66.836802][ T29] audit: type=1400 audit(1758916917.948:1101): avc: denied { append } for pid=5966 comm="syz.6.1042" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.868752][ T29] audit: type=1400 audit(1758916917.948:1102): avc: denied { map } for pid=5966 comm="syz.6.1042" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.935609][ T5975] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 66.947153][ T5976] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 66.948637][ T29] audit: type=1326 audit(1758916918.072:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c964eeec9 code=0x7ffc0000 [ 66.958902][ T5976] SELinux: failed to load policy [ 66.979112][ T29] audit: type=1326 audit(1758916918.102:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c964eeec9 code=0x7ffc0000 [ 67.008283][ T29] audit: type=1326 audit(1758916918.102:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f5c964eeec9 code=0x7ffc0000 [ 67.031900][ T29] audit: type=1326 audit(1758916918.102:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c964eeec9 code=0x7ffc0000 [ 67.055925][ T29] audit: type=1326 audit(1758916918.133:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.6.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c964eeec9 code=0x7ffc0000 [ 67.082487][ T29] audit: type=1400 audit(1758916918.184:1108): avc: denied { read } for pid=5981 comm="syz.2.1049" name="event3" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.106750][ T29] audit: type=1400 audit(1758916918.184:1109): avc: denied { open } for pid=5981 comm="syz.2.1049" path="/dev/input/event3" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.152984][ T29] audit: type=1326 audit(1758916918.266:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5984 comm="syz.6.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c964eeec9 code=0x7ffc0000 [ 67.201212][ T5989] loop6: detected capacity change from 0 to 1024 [ 67.311613][ T12] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 67.335814][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 67.348499][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 67.348499][ T12] [ 67.358238][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 67.364238][ T12] EXT4-fs (loop6): Free/Dirty block details [ 67.370177][ T12] EXT4-fs (loop6): free_blocks=68451041280 [ 67.376127][ T12] EXT4-fs (loop6): dirty_blocks=320 [ 67.381500][ T12] EXT4-fs (loop6): Block reservation details [ 67.387536][ T12] EXT4-fs (loop6): i_reserved_data_blocks=20 [ 67.452399][ T6002] loop5: detected capacity change from 0 to 8192 [ 67.517873][ T6018] loop5: detected capacity change from 0 to 512 [ 67.527446][ T6018] EXT4-fs: Ignoring removed i_version option [ 67.533690][ T6018] EXT4-fs: Ignoring removed bh option [ 67.553490][ T6018] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.715895][ T6039] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 67.726238][ T6039] SELinux: failed to load policy [ 67.923961][ T6053] IPv6: Can't replace route, no match found [ 68.044915][ T6064] SELinux: failed to load policy [ 68.112237][ T6075] Invalid ELF header magic: != ELF [ 68.162879][ T6080] sd 0:0:1:0: device reset [ 68.168851][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 68.181599][ T6083] sd 0:0:1:0: device reset [ 68.313553][ T6105] rdma_op ffff888102417580 conn xmit_rdma 0000000000000000 [ 68.368729][ T6114] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 68.377686][ T6114] SELinux: failed to load policy [ 68.441225][ T6123] rdma_op ffff888119eb6d80 conn xmit_rdma 0000000000000000 [ 68.509859][ T6127] SELinux: failed to load policy [ 68.632769][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'. [ 69.243251][ T6160] lo speed is unknown, defaulting to 1000 [ 69.250000][ T6160] lo speed is unknown, defaulting to 1000 [ 69.256041][ T6160] lo speed is unknown, defaulting to 1000 [ 69.263495][ T6160] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.271379][ T6160] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.282628][ T6160] lo speed is unknown, defaulting to 1000 [ 69.288911][ T6160] lo speed is unknown, defaulting to 1000 [ 69.294947][ T6160] lo speed is unknown, defaulting to 1000 [ 69.301369][ T6160] lo speed is unknown, defaulting to 1000 [ 69.307539][ T6160] lo speed is unknown, defaulting to 1000 [ 69.481888][ T6187] sd 0:0:1:0: device reset [ 70.139358][ T6231] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 70.249137][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1166'. [ 70.278443][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1166'. [ 70.356104][ T6262] 9pnet_fd: Insufficient options for proto=fd [ 70.532556][ T6290] vhci_hcd: invalid port number 11 [ 70.537720][ T6290] vhci_hcd: default hub control req: 6031 v0000 i000b l2 [ 70.589484][ T6296] loop6: detected capacity change from 0 to 512 [ 70.602787][ T6293] SELinux: ebitmap: truncated map [ 70.610376][ T6293] SELinux: failed to load policy [ 70.622132][ T6296] EXT4-fs mount: 8 callbacks suppressed [ 70.622149][ T6296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.738219][ T6296] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.818863][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.938052][ T6336] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 70.945913][ T6336] SELinux: failed to load policy [ 71.144887][ T6350] loop5: detected capacity change from 0 to 1764 [ 71.558491][ T6397] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 71.638468][ T6402] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.646268][ T6402] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 71.740632][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 71.740649][ T29] audit: type=1326 audit(1758916922.970:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 71.781249][ T29] audit: type=1326 audit(1758916923.001:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 71.804839][ T29] audit: type=1326 audit(1758916923.001:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 71.828334][ T29] audit: type=1326 audit(1758916923.001:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.2.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 71.880591][ T29] audit: type=1400 audit(1758916923.103:1452): avc: denied { bind } for pid=6420 comm="syz.6.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.900607][ T29] audit: type=1400 audit(1758916923.103:1453): avc: denied { name_bind } for pid=6420 comm="syz.6.1240" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 71.921945][ T29] audit: type=1400 audit(1758916923.103:1454): avc: denied { node_bind } for pid=6420 comm="syz.6.1240" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 71.965520][ T6423] SELinux: failed to load policy [ 72.040906][ T29] audit: type=1400 audit(1758916923.266:1455): avc: denied { ioctl } for pid=6435 comm="syz.3.1244" path="socket:[15103]" dev="sockfs" ino=15103 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.074224][ T6437] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.094107][ T6437] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 72.103894][ T29] audit: type=1400 audit(1758916923.337:1456): avc: denied { create } for pid=6438 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.123762][ T29] audit: type=1400 audit(1758916923.337:1457): avc: denied { write } for pid=6438 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.162159][ T6444] loop3: detected capacity change from 0 to 512 [ 72.188458][ T6444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.201466][ T6444] EXT4-fs (loop3): 1 truncate cleaned up [ 72.207582][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.344012][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.381125][ T6473] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1261'. [ 72.392082][ T6473] hsr_slave_0: left promiscuous mode [ 72.401953][ T6473] hsr_slave_1: left promiscuous mode [ 72.583789][ T6516] loop6: detected capacity change from 0 to 128 [ 72.667091][ T6530] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 72.669925][ T6528] loop6: detected capacity change from 0 to 1024 [ 72.677723][ T6530] SELinux: failed to load policy [ 72.690324][ T6528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.721185][ T6528] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 72.729504][ T6528] System zones: 0-1, 3-12 [ 72.741279][ T6528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.891291][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.040057][ T6561] capability: warning: `syz.6.1296' uses deprecated v2 capabilities in a way that may be insecure [ 73.134952][ T6570] netlink: 'syz.2.1300': attribute type 2 has an invalid length. [ 73.142767][ T6570] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 73.150498][ T6570] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1300'. [ 73.196937][ T6574] loop6: detected capacity change from 0 to 164 [ 73.280584][ T6585] hub 1-0:1.0: USB hub found [ 73.285692][ T6585] hub 1-0:1.0: 8 ports detected [ 73.375985][ T6599] loop6: detected capacity change from 0 to 128 [ 73.396053][ T6599] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 73.403776][ T6599] FAT-fs (loop6): Filesystem has been set read-only [ 73.617636][ T6629] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 73.767449][ T6638] loop6: detected capacity change from 0 to 8192 [ 74.221790][ T6699] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1354'. [ 74.391435][ T6717] loop6: detected capacity change from 0 to 1024 [ 74.409935][ T6717] EXT4-fs: Ignoring removed oldalloc option [ 74.517907][ T6717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.555098][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.610959][ T6731] netlink: 'syz.6.1367': attribute type 3 has an invalid length. [ 74.737593][ T6740] bridge0: port 3(batadv1) entered blocking state [ 74.744191][ T6740] bridge0: port 3(batadv1) entered disabled state [ 74.781514][ T6740] batadv1: entered allmulticast mode [ 74.799160][ T6740] batadv1: entered promiscuous mode [ 75.158145][ T6777] loop5: detected capacity change from 0 to 128 [ 75.194359][ T6777] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.236642][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 75.245967][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 75.319288][ T6779] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 75.327019][ T6779] SELinux: failed to load policy [ 75.879405][ T6836] IPv6: Can't replace route, no match found [ 75.951141][ T6844] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1414'. [ 75.999522][ T6852] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 76.117143][ T6869] loop3: detected capacity change from 0 to 1024 [ 76.133077][ T6869] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.139659][ T6869] EXT4-fs: Ignoring removed bh option [ 76.172897][ T6869] ext3: Unknown parameter 'subj_type' [ 76.197073][ T6869] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 76.331917][ T6887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.348825][ T6887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.377647][ T6894] loop6: detected capacity change from 0 to 512 [ 76.384764][ T6894] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 76.395605][ T6894] EXT4-fs (loop6): invalid journal inode [ 76.401681][ T6894] EXT4-fs (loop6): can't get journal size [ 76.409755][ T6894] EXT4-fs (loop6): 1 truncate cleaned up [ 76.415993][ T6894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.421247][ C0] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 76.438311][ T6872] EXT4-fs (loop1): unable to read superblock [ 76.455801][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.472512][ T6900] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1440'. [ 76.483052][ T6900] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1440'. [ 76.939131][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 76.939184][ T29] audit: type=1326 audit(77.154:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 76.971499][ T29] audit: type=1326 audit(77.154:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 76.994365][ T29] audit: type=1326 audit(77.154:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.017283][ T29] audit: type=1326 audit(77.154:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.040419][ T29] audit: type=1326 audit(77.154:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.063709][ T29] audit: type=1326 audit(77.154:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.086714][ T29] audit: type=1326 audit(77.154:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.092617][ T6942] openvswitch: netlink: Message has 6 unknown bytes. [ 77.109532][ T29] audit: type=1326 audit(77.154:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.109570][ T29] audit: type=1326 audit(77.154:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.109599][ T29] audit: type=1326 audit(77.154:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.3.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 77.219555][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1461'. [ 77.228749][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1461'. [ 77.277943][ T6957] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 77.289171][ T6957] SELinux: failed to load policy [ 77.361907][ T6967] loop5: detected capacity change from 0 to 256 [ 77.788940][ T7011] loop6: detected capacity change from 0 to 2048 [ 77.799747][ T7011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.827040][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.842530][ T7017] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 77.972201][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 78.262466][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.284070][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.346244][ T7073] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.358323][ T7073] SELinux: failed to load policy [ 78.364769][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1517'. [ 78.431575][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1522'. [ 78.482136][ T7090] random: crng reseeded on system resumption [ 78.695356][ T7103] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 78.782224][ T7117] netlink: 'syz.0.1536': attribute type 6 has an invalid length. [ 78.811320][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 78.852882][ T7128] loop6: detected capacity change from 0 to 1024 [ 78.888982][ T7128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.906325][ T7137] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 78.976764][ T7135] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 480: padding at end of block bitmap is not set [ 78.997223][ T7135] EXT4-fs (loop6): Remounting filesystem read-only [ 79.006583][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.129675][ T7166] binfmt_misc: register: failed to install interpreter file ./file2 [ 79.285815][ T7182] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1561'. [ 79.385010][ T7196] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 79.409657][ T7201] netlink: 'syz.2.1569': attribute type 4 has an invalid length. [ 79.419426][ T7199] hub 9-0:1.0: USB hub found [ 79.419521][ T7199] hub 9-0:1.0: 8 ports detected [ 79.451721][ T3393] lo speed is unknown, defaulting to 1000 [ 79.451758][ T3393] syz2: Port: 1 Link DOWN [ 79.593704][ T7228] SELinux: failed to load policy [ 79.644851][ T7239] loop3: detected capacity change from 0 to 512 [ 79.652015][ T7239] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.655385][ T7240] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 79.665923][ T7239] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 79.688555][ T7239] EXT4-fs (loop3): 1 truncate cleaned up [ 79.694607][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.723411][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.737865][ T7247] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 79.748269][ T3349] IPVS: starting estimator thread 0... [ 79.779255][ T7255] loop5: detected capacity change from 0 to 1024 [ 79.797584][ T7258] loop3: detected capacity change from 0 to 512 [ 79.804870][ T7258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.816752][ T7255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.831921][ T7258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.844819][ T7251] IPVS: using max 2208 ests per chain, 110400 per kthread [ 79.865130][ T7255] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1594: bg 0: block 393: padding at end of block bitmap is not set [ 79.880749][ T7255] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 79.893469][ T7255] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.893469][ T7255] [ 79.907911][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.922382][ T7267] serio: Serial port ttyS3 [ 79.949750][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.983731][ T7274] loop9: detected capacity change from 0 to 7 [ 79.991579][ T7274] buffer_io_error: 5 callbacks suppressed [ 79.991595][ T7274] Buffer I/O error on dev loop9, logical block 0, async page read [ 80.005793][ T7274] Buffer I/O error on dev loop9, logical block 0, async page read [ 80.013694][ T7274] loop9: unable to read partition table [ 80.020999][ T7274] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 80.020999][ T7274] ) failed (rc=-5) [ 80.059869][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 80.062092][ T7282] loop5: detected capacity change from 0 to 1024 [ 80.087925][ T7282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.115154][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.154533][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 80.163577][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'. [ 80.193316][ T7293] syzkaller1: entered promiscuous mode [ 80.198916][ T7293] syzkaller1: entered allmulticast mode [ 80.338337][ T7309] loop5: detected capacity change from 0 to 512 [ 80.345333][ T7309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.358382][ T7309] EXT4-fs (loop5): 1 truncate cleaned up [ 80.364524][ T7309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.399248][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.440473][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1622'. [ 80.454430][ T7319] bond_slave_0: entered promiscuous mode [ 80.460276][ T7319] bond_slave_1: entered promiscuous mode [ 80.468941][ T7319] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 80.480311][ T7319] bond_slave_0: left promiscuous mode [ 80.485851][ T7319] bond_slave_1: left promiscuous mode [ 80.499910][ T7321] vhci_hcd: invalid port number 96 [ 80.505080][ T7321] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 80.533839][ T7326] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 80.543759][ T7326] SELinux: failed to load policy [ 80.563800][ T7328] loop6: detected capacity change from 0 to 512 [ 80.570791][ T7328] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.583228][ T7328] EXT4-fs (loop6): 1 truncate cleaned up [ 80.589542][ T7328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.659934][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.688894][ T7333] vhci_hcd: invalid port number 96 [ 80.694310][ T7333] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 80.728510][ T7335] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 80.728510][ T7335] program syz.2.1627 not setting count and/or reply_len properly [ 80.917451][ T7347] SELinux: failed to load policy [ 81.180166][ T7383] sd 0:0:1:0: device reset [ 81.308368][ T7406] smc: net device bond0 applied user defined pnetid SYZ0 [ 81.317582][ T7406] smc: net device bond0 erased user defined pnetid SYZ0 [ 81.399900][ T7417] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 81.399900][ T7417] program syz.6.1659 not setting count and/or reply_len properly [ 81.575622][ T7441] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 81.587810][ T7441] SELinux: failed to load policy [ 81.657882][ T7448] loop3: detected capacity change from 0 to 1024 [ 81.665891][ T7448] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 82.057612][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 82.057631][ T29] audit: type=1326 audit(82.274:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.090242][ T29] audit: type=1326 audit(82.304:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.113203][ T29] audit: type=1326 audit(82.304:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.136204][ T29] audit: type=1326 audit(82.304:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.158978][ T29] audit: type=1326 audit(82.304:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.182080][ T29] audit: type=1326 audit(82.304:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.205074][ T29] audit: type=1326 audit(82.304:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.228094][ T29] audit: type=1326 audit(82.304:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.251305][ T29] audit: type=1326 audit(82.304:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.5.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d785eec9 code=0x7ffc0000 [ 82.400163][ T7492] netlink: 'syz.5.1692': attribute type 3 has an invalid length. [ 82.546097][ T7500] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 82.581913][ T29] audit: type=1400 audit(82.794:1795): avc: denied { read write } for pid=7506 comm="syz.5.1700" name="event3" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.680374][ T7517] random: crng reseeded on system resumption [ 82.684855][ T7437] syz.6.1668 (7437) used greatest stack depth: 7096 bytes left [ 82.693722][ T7517] Restarting kernel threads ... [ 82.700910][ T7517] Done restarting kernel threads. [ 82.738559][ T7519] loop6: detected capacity change from 0 to 512 [ 82.769388][ T7519] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 82.789267][ T7527] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 82.789267][ T7527] program syz.0.1708 not setting count and/or reply_len properly [ 82.807706][ T7519] EXT4-fs (loop6): 1 truncate cleaned up [ 82.813846][ T7519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.839161][ T7531] netlink: 'syz.2.1710': attribute type 6 has an invalid length. [ 82.880684][ T7539] loop5: detected capacity change from 0 to 512 [ 82.918904][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.953321][ T7539] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 82.970511][ T7539] System zones: 0-2, 18-18, 34-35 [ 82.997705][ T7539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.024913][ T7539] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1712: corrupted inode contents [ 83.074256][ T7539] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.1712: mark_inode_dirty error [ 83.109022][ T7539] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1712: corrupted inode contents [ 83.150053][ T7539] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1712: mark_inode_dirty error [ 83.150222][ T7557] loop6: detected capacity change from 0 to 128 [ 83.171445][ T7557] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.183683][ T7557] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.235580][ T7539] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1712: mark inode dirty (error -117) [ 83.277099][ T7539] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 83.320458][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.348297][ T7563] ALSA: seq fatal error: cannot create timer (-22) [ 83.433323][ T7570] loop6: detected capacity change from 0 to 2048 [ 83.466189][ T7570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.623216][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.650579][ T7595] loop6: detected capacity change from 0 to 128 [ 83.658030][ T7595] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 83.783654][ T7611] vhci_hcd: default hub control req: 8001 v0000 i0003 l14 [ 83.815962][ T7615] random: crng reseeded on system resumption [ 83.835202][ T7617] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 83.882520][ T7623] SELinux: policydb string S does not match my string SE Linux [ 83.890527][ T7623] SELinux: failed to load policy [ 84.085924][ T7643] random: crng reseeded on system resumption [ 84.100628][ T7643] Restarting kernel threads ... [ 84.106065][ T7643] Done restarting kernel threads. [ 84.371095][ T7664] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 84.379124][ T7664] __nla_validate_parse: 3 callbacks suppressed [ 84.379142][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1770'. [ 84.398272][ T7664] batman_adv: batadv0: Adding interface: veth1_vlan [ 84.405105][ T7664] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.437902][ T7664] batman_adv: batadv0: Interface activated: veth1_vlan [ 84.561318][ T7678] loop5: detected capacity change from 0 to 128 [ 84.716046][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.716046][ T7678] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 84.736809][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.736809][ T7678] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 84.750791][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.750791][ T7678] loop5: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 84.793118][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.793118][ T7678] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 84.806835][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.806835][ T7678] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 84.821982][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.821982][ T7678] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 84.866627][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.866627][ T7678] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 84.881137][ T7694] ALSA: seq fatal error: cannot create timer (-19) [ 84.893836][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.893836][ T7678] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 84.909840][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.909840][ T7678] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 84.930579][ T7678] syz.5.1777: attempt to access beyond end of device [ 84.930579][ T7678] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 84.948438][ T7701] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1789'. [ 85.018410][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1790'. [ 85.128588][ T7726] loop5: detected capacity change from 0 to 128 [ 85.149169][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1802'. [ 85.173730][ T7729] netem: change failed [ 85.367718][ T7764] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1816'. [ 85.431396][ T7774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1819'. [ 86.101544][ T7815] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 86.111409][ T7815] SELinux: failed to load policy [ 86.229912][ T7824] loop5: detected capacity change from 0 to 512 [ 86.238977][ T7824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.276033][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.360853][ T7836] loop6: detected capacity change from 0 to 1024 [ 86.391999][ T7836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.422108][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1847'. [ 86.459210][ T7836] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 86.532478][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.673015][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1859'. [ 86.700649][ T7876] netlink: 'syz.6.1862': attribute type 12 has an invalid length. [ 86.708866][ T7876] netlink: 'syz.6.1862': attribute type 29 has an invalid length. [ 86.716783][ T7876] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1862'. [ 86.726054][ T7876] netlink: 'syz.6.1862': attribute type 1 has an invalid length. [ 86.736804][ T7876] netlink: 15 bytes leftover after parsing attributes in process `syz.6.1862'. [ 86.897195][ T7892] loop5: detected capacity change from 0 to 512 [ 86.905269][ T7892] EXT4-fs (loop5): orphan cleanup on readonly fs [ 86.913358][ T7883] loop6: detected capacity change from 0 to 32768 [ 86.914265][ T7892] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.1869: inode #218103808: comm syz.5.1869: iget: illegal inode # [ 86.933731][ T7892] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.1869: Bad quota inode: 218103808, type: 2 [ 86.954867][ T7892] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 86.972590][ T7883] loop6: p1 p3 < > [ 86.973568][ T7892] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 86.984026][ T7892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.000014][ T7892] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 87.027598][ T7892] EXT4-fs error (device loop5): ext4_quota_enable:7128: comm syz.5.1869: inode #218103808: comm syz.5.1869: iget: illegal inode # [ 87.042767][ T7892] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.1869: Bad quota inode: 218103808, type: 2 [ 87.055192][ T7892] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 87.084087][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.133902][ T7905] SELinux: policydb version 0 does not match my version range 15-35 [ 87.142345][ T7905] SELinux: failed to load policy [ 87.164917][ T7910] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 87.177696][ T7909] IPVS: stopping backup sync thread 7910 ... [ 87.282804][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 87.282822][ T29] audit: type=1326 audit(87.494:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 87.318330][ T29] audit: type=1326 audit(87.494:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 87.341077][ T29] audit: type=1326 audit(87.494:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 87.364074][ T29] audit: type=1326 audit(87.504:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7919 comm="syz.3.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcf80feec9 code=0x7ffc0000 [ 87.403420][ T29] audit: type=1400 audit(87.614:2037): avc: denied { write } for pid=7923 comm="syz.3.1883" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.444291][ T7926] netlink: 'syz.5.1884': attribute type 3 has an invalid length. [ 87.489605][ T29] audit: type=1326 audit(87.704:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 87.529895][ T7938] 9pnet: p9_errstr2errno: server reported unknown error [ 87.548947][ T29] audit: type=1326 audit(87.704:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 87.549337][ T7933] rdma_op ffff88811b94cd80 conn xmit_rdma 0000000000000000 [ 87.572283][ T29] audit: type=1326 audit(87.734:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 87.572318][ T29] audit: type=1326 audit(87.734:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz.2.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2194f4eec9 code=0x7ffc0000 [ 87.625898][ T29] audit: type=1400 audit(87.744:2042): avc: denied { bind } for pid=7934 comm="syz.0.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.749079][ T7956] netlink: 'syz.5.1898': attribute type 1 has an invalid length. [ 87.757224][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.805296][ T7965] loop5: detected capacity change from 0 to 512 [ 87.841405][ T7965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.854356][ T7964] loop6: detected capacity change from 0 to 8192 [ 87.860694][ T7965] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1902: corrupted inode contents [ 87.873261][ T7965] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1902: mark_inode_dirty error [ 87.885350][ T7965] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1902: corrupted inode contents [ 87.899320][ T7965] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1902: corrupted inode contents [ 87.916514][ T7965] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1902: mark_inode_dirty error [ 87.928698][ T7965] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1902: corrupted inode contents [ 87.946712][ T7965] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1902: mark_inode_dirty error [ 87.970979][ T7965] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.1902: corrupted inode contents [ 87.983196][ T7965] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.1902: mark_inode_dirty error [ 88.009284][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.032922][ T7980] loop5: detected capacity change from 0 to 512 [ 88.040957][ T7980] EXT4-fs: Ignoring removed bh option [ 88.047228][ T7980] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.060583][ T7980] EXT4-fs (loop5): 1 truncate cleaned up [ 88.067046][ T7980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.091089][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.128135][ T7989] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 88.159037][ T7993] loop6: detected capacity change from 0 to 512 [ 88.175215][ T7993] EXT4-fs warning (device loop6): ext4_xattr_inode_get:556: inode #11: comm syz.6.1914: EA inode hash validation failed [ 88.188908][ T7993] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.1914: corrupted inode contents [ 88.201530][ T7993] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #15: comm syz.6.1914: mark_inode_dirty error [ 88.213418][ T7993] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.1914: corrupted inode contents [ 88.227260][ T7993] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #15: comm syz.6.1914: mark_inode_dirty error [ 88.239521][ T8000] loop5: detected capacity change from 0 to 1024 [ 88.240819][ T7993] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #15: comm syz.6.1914: mark inode dirty (error -117) [ 88.246218][ T8000] EXT4-fs: Ignoring removed orlov option [ 88.260265][ T7993] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 88.264473][ T8000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.273969][ T7993] EXT4-fs (loop6): 1 orphan inode deleted [ 88.286755][ T7993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.288220][ T8000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.322911][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.333017][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.352136][ T8004] sctp: [Deprecated]: syz.6.1918 (pid 8004) Use of int in max_burst socket option deprecated. [ 88.352136][ T8004] Use struct sctp_assoc_value instead [ 88.372476][ T8006] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 88.450350][ T8015] SELinux: policydb string SE Li does not match my string SE Linux [ 88.458632][ T8015] SELinux: failed to load policy [ 88.592808][ T8029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.799585][ T8054] SELinux: failed to load policy [ 88.853024][ T8062] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 88.862912][ T8062] SELinux: failed to load policy [ 88.886126][ T8069] sg_write: data in/out 63015/8 bytes for SCSI command 0x7e-- guessing data in; [ 88.886126][ T8069] program syz.2.1948 not setting count and/or reply_len properly [ 88.950308][ T8077] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 89.040557][ T8084] SELinux: ebitmap: truncated map [ 89.047013][ T8084] SELinux: failed to load policy [ 89.207540][ T8094] loop6: detected capacity change from 0 to 1024 [ 89.214357][ T8094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.238803][ T8094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.260222][ T8103] program syz.2.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.295149][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.395777][ T8119] __nla_validate_parse: 5 callbacks suppressed [ 89.395854][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1971'. [ 89.411509][ T8119] IPVS: Error connecting to the multicast addr [ 89.474356][ T8127] SELinux: ebitmap: truncated map [ 89.483430][ T8127] SELinux: failed to load policy [ 89.518039][ T8133] SELinux: policydb string SE Li does not match my string SE Linux [ 89.527339][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1978'. [ 89.538784][ T8133] SELinux: failed to load policy [ 89.569272][ T8141] loop6: detected capacity change from 0 to 2048 [ 89.589217][ T8141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.668182][ T8153] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.678073][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.696599][ T8153] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 89.835785][ T8168] netlink: 8 bytes leftover after parsing attributes in process `'. [ 89.892988][ T8174] loop5: detected capacity change from 0 to 512 [ 89.908454][ T8174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.942484][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.980805][ T8182] loop5: detected capacity change from 0 to 512 [ 89.983739][ T8184] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.017902][ T8182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.072396][ T3626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.202235][ T8192] lo speed is unknown, defaulting to 1000 [ 90.214367][ T8203] loop5: detected capacity change from 0 to 164 [ 90.222497][ T8203] ISOFS: unable to read i-node block [ 90.225953][ T8205] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2007'. [ 90.227909][ T8203] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 90.277600][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2008'. [ 90.585335][ T8231] SELinux: policydb version 512 does not match my version range 15-35 [ 90.608194][ T8231] SELinux: failed to load policy [ 90.795707][ T8236] pim6reg1: entered promiscuous mode [ 90.801157][ T8236] pim6reg1: entered allmulticast mode [ 91.649600][ T8271] loop6: detected capacity change from 0 to 512 [ 91.693378][ T8271] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.703379][ T8271] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 91.716170][ T8271] EXT4-fs (loop6): 1 truncate cleaned up [ 91.724494][ T8271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.772452][ T8281] serio: Serial port ttyS3 [ 91.943911][ T8282] ================================================================== [ 91.952132][ T8282] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 91.960522][ T8282] [ 91.962867][ T8282] write to 0xffff88811a4df6ac of 4 bytes by task 8271 on cpu 0: [ 91.970511][ T8282] xas_set_mark+0x12b/0x140 [ 91.975034][ T8282] __folio_start_writeback+0x1dd/0x440 [ 91.980510][ T8282] ext4_bio_write_folio+0x5ad/0x9f0 [ 91.985740][ T8282] mpage_process_page_bufs+0x4a1/0x620 [ 91.991216][ T8282] mpage_prepare_extent_to_map+0x786/0xc00 [ 91.997047][ T8282] ext4_do_writepages+0xa05/0x2750 [ 92.002189][ T8282] ext4_writepages+0x176/0x300 [ 92.006999][ T8282] do_writepages+0x1c6/0x310 [ 92.011613][ T8282] file_write_and_wait_range+0x156/0x2c0 [ 92.017374][ T8282] generic_buffers_fsync_noflush+0x45/0x120 [ 92.023285][ T8282] ext4_sync_file+0x1ab/0x690 [ 92.027987][ T8282] vfs_fsync_range+0x10d/0x130 [ 92.032769][ T8282] ext4_buffered_write_iter+0x34f/0x3c0 [ 92.038347][ T8282] ext4_file_write_iter+0xdbf/0xf00 [ 92.043564][ T8282] iter_file_splice_write+0x663/0xa60 [ 92.048958][ T8282] direct_splice_actor+0x153/0x2a0 [ 92.054092][ T8282] splice_direct_to_actor+0x30f/0x680 [ 92.059474][ T8282] do_splice_direct+0xda/0x150 [ 92.064243][ T8282] do_sendfile+0x380/0x650 [ 92.068694][ T8282] __x64_sys_sendfile64+0x105/0x150 [ 92.073973][ T8282] x64_sys_call+0x2bb0/0x2ff0 [ 92.078670][ T8282] do_syscall_64+0xd2/0x200 [ 92.083222][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.089121][ T8282] [ 92.091446][ T8282] read to 0xffff88811a4df6ac of 4 bytes by task 8282 on cpu 1: [ 92.099089][ T8282] filemap_write_and_wait_range+0xfc/0x340 [ 92.104958][ T8282] filemap_invalidate_pages+0xa4/0x1a0 [ 92.110430][ T8282] kiocb_invalidate_pages+0x6e/0x80 [ 92.115642][ T8282] __iomap_dio_rw+0x5d4/0x1250 [ 92.120431][ T8282] iomap_dio_rw+0x40/0x90 [ 92.124781][ T8282] ext4_file_write_iter+0xad9/0xf00 [ 92.130010][ T8282] iter_file_splice_write+0x663/0xa60 [ 92.135481][ T8282] direct_splice_actor+0x153/0x2a0 [ 92.140600][ T8282] splice_direct_to_actor+0x30f/0x680 [ 92.145990][ T8282] do_splice_direct+0xda/0x150 [ 92.150758][ T8282] do_sendfile+0x380/0x650 [ 92.155194][ T8282] __x64_sys_sendfile64+0x105/0x150 [ 92.160411][ T8282] x64_sys_call+0x2bb0/0x2ff0 [ 92.165112][ T8282] do_syscall_64+0xd2/0x200 [ 92.169634][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.175535][ T8282] [ 92.177878][ T8282] value changed: 0x0a000021 -> 0x04000021 [ 92.183609][ T8282] [ 92.185927][ T8282] Reported by Kernel Concurrency Sanitizer on: [ 92.192079][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.6.2036 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.203370][ T8282] Tainted: [W]=WARN [ 92.207194][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.217280][ T8282] ================================================================== [ 92.417753][ T8282] ================================================================== [ 92.425897][ T8282] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_clear_mark [ 92.434373][ T8282] [ 92.436715][ T8282] write to 0xffff88811a4df6ac of 4 bytes by task 8271 on cpu 0: [ 92.444375][ T8282] xas_clear_mark+0x16b/0x180 [ 92.449073][ T8282] __folio_start_writeback+0x2ce/0x440 [ 92.454550][ T8282] ext4_bio_write_folio+0x5ad/0x9f0 [ 92.459777][ T8282] mpage_process_page_bufs+0x4a1/0x620 [ 92.465242][ T8282] mpage_prepare_extent_to_map+0x786/0xc00 [ 92.471054][ T8282] ext4_do_writepages+0xa05/0x2750 [ 92.476201][ T8282] ext4_writepages+0x176/0x300 [ 92.480984][ T8282] do_writepages+0x1c6/0x310 [ 92.485622][ T8282] file_write_and_wait_range+0x156/0x2c0 [ 92.491307][ T8282] generic_buffers_fsync_noflush+0x45/0x120 [ 92.497590][ T8282] ext4_sync_file+0x1ab/0x690 [ 92.502288][ T8282] vfs_fsync_range+0x10d/0x130 [ 92.507153][ T8282] ext4_buffered_write_iter+0x34f/0x3c0 [ 92.512868][ T8282] ext4_file_write_iter+0xdbf/0xf00 [ 92.518113][ T8282] iter_file_splice_write+0x663/0xa60 [ 92.523503][ T8282] direct_splice_actor+0x153/0x2a0 [ 92.528725][ T8282] splice_direct_to_actor+0x30f/0x680 [ 92.534102][ T8282] do_splice_direct+0xda/0x150 [ 92.538905][ T8282] do_sendfile+0x380/0x650 [ 92.543443][ T8282] __x64_sys_sendfile64+0x105/0x150 [ 92.548743][ T8282] x64_sys_call+0x2bb0/0x2ff0 [ 92.553434][ T8282] do_syscall_64+0xd2/0x200 [ 92.557962][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.563912][ T8282] [ 92.566240][ T8282] read to 0xffff88811a4df6ac of 4 bytes by task 8282 on cpu 1: [ 92.573791][ T8282] filemap_write_and_wait_range+0xfc/0x340 [ 92.579619][ T8282] filemap_invalidate_pages+0xa4/0x1a0 [ 92.585129][ T8282] kiocb_invalidate_pages+0x6e/0x80 [ 92.590350][ T8282] __iomap_dio_rw+0x5d4/0x1250 [ 92.595139][ T8282] iomap_dio_rw+0x40/0x90 [ 92.599575][ T8282] ext4_file_write_iter+0xad9/0xf00 [ 92.604851][ T8282] iter_file_splice_write+0x663/0xa60 [ 92.610233][ T8282] direct_splice_actor+0x153/0x2a0 [ 92.615796][ T8282] splice_direct_to_actor+0x30f/0x680 [ 92.621192][ T8282] do_splice_direct+0xda/0x150 [ 92.626220][ T8282] do_sendfile+0x380/0x650 [ 92.630647][ T8282] __x64_sys_sendfile64+0x105/0x150 [ 92.635888][ T8282] x64_sys_call+0x2bb0/0x2ff0 [ 92.640572][ T8282] do_syscall_64+0xd2/0x200 [ 92.645113][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.651010][ T8282] [ 92.653330][ T8282] value changed: 0x0e000021 -> 0x04000021 [ 92.659039][ T8282] [ 92.661365][ T8282] Reported by Kernel Concurrency Sanitizer on: [ 92.667718][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.6.2036 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.679211][ T8282] Tainted: [W]=WARN [ 92.683015][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.693073][ T8282] ================================================================== [ 92.715569][ T4593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.