last executing test programs: 522.240547ms ago: executing program 4 (id=2192): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x3, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 521.884367ms ago: executing program 0 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 368.20452ms ago: executing program 0 (id=2205): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e31, 0x5, @local, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0xfffffffd, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 346.594011ms ago: executing program 3 (id=2206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 346.247311ms ago: executing program 1 (id=2207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 319.104334ms ago: executing program 0 (id=2209): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) flock(r1, 0x1) 297.357556ms ago: executing program 3 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000180), &(0x7f0000000500)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 262.474348ms ago: executing program 0 (id=2211): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xe8142, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 260.344148ms ago: executing program 1 (id=2212): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 250.334659ms ago: executing program 3 (id=2214): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r1) 236.58313ms ago: executing program 4 (id=2215): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x100000000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 216.501122ms ago: executing program 1 (id=2216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'nicvf0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0x0, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x7, 0x3366}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f0000000800340004c4700008000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x2c}}, 0x80) 212.741043ms ago: executing program 2 (id=2217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01004217b92ba089d5f51a00000018000180140002006261746164765f736c6176655f31"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 208.750943ms ago: executing program 0 (id=2218): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xffffffff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x62882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2, 0xffffffff}, 0xc}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 195.796274ms ago: executing program 1 (id=2219): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r2, 0x1) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 170.901226ms ago: executing program 3 (id=2220): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 159.398686ms ago: executing program 2 (id=2221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 152.323378ms ago: executing program 0 (id=2222): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[], 0x53) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x7c8) 149.090987ms ago: executing program 4 (id=2223): r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0x6, r0, 0x15, {0x6, 0x3}, 0x7f}, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) 123.834609ms ago: executing program 4 (id=2224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 120.94255ms ago: executing program 2 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 100.087372ms ago: executing program 1 (id=2226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 84.566503ms ago: executing program 2 (id=2227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 68.025324ms ago: executing program 4 (id=2228): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7fffffff}) 63.038214ms ago: executing program 2 (id=2229): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xe8142, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 62.171015ms ago: executing program 1 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 46.485666ms ago: executing program 3 (id=2231): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 3.702549ms ago: executing program 3 (id=2232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01004217b92ba089d5f51a00000018000180140002006261746164765f736c6176655f31"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.260539ms ago: executing program 2 (id=2242): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48, 0x7, 0x29}, {0x6, 0xf8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) write(r0, &(0x7f0000000280)="4591", 0x2) 0s ago: executing program 4 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) kernel console output (not intermixed with test programs): d forwarding state [ 39.680667][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.701068][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.708201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.721319][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.728634][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.737893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.745068][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.760326][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.836602][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.861340][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.901505][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.908665][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.918332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.925457][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.945686][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.956273][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.973874][ T3305] veth0_vlan: entered promiscuous mode [ 39.999112][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.016896][ T3305] veth1_vlan: entered promiscuous mode [ 40.030773][ T3301] veth0_vlan: entered promiscuous mode [ 40.047022][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.056104][ T3301] veth1_vlan: entered promiscuous mode [ 40.075505][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.108821][ T3301] veth0_macvtap: entered promiscuous mode [ 40.127295][ T3305] veth0_macvtap: entered promiscuous mode [ 40.148969][ T3301] veth1_macvtap: entered promiscuous mode [ 40.162550][ T3305] veth1_macvtap: entered promiscuous mode [ 40.188511][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.196962][ T3309] veth0_vlan: entered promiscuous mode [ 40.215951][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.230942][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.241821][ T3309] veth1_vlan: entered promiscuous mode [ 40.252865][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.263572][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.273052][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.295584][ T115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.305528][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.318351][ T3309] veth0_macvtap: entered promiscuous mode [ 40.328148][ T3309] veth1_macvtap: entered promiscuous mode [ 40.343861][ T115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.359009][ T3302] veth0_vlan: entered promiscuous mode [ 40.370781][ T115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.386906][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.405734][ T3302] veth1_vlan: entered promiscuous mode [ 40.411761][ T115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.425115][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.445033][ T115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.458858][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.483602][ T115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497021][ T3306] veth0_vlan: entered promiscuous mode [ 40.531668][ T115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.543005][ T115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.552642][ T3306] veth1_vlan: entered promiscuous mode [ 40.567224][ T115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.580553][ T3302] veth0_macvtap: entered promiscuous mode [ 40.592316][ T3302] veth1_macvtap: entered promiscuous mode [ 40.615906][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 40.615923][ T29] audit: type=1326 audit(1754096834.208:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 40.660781][ T29] audit: type=1326 audit(1754096834.208:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 40.684002][ T29] audit: type=1326 audit(1754096834.248:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 40.707221][ T29] audit: type=1326 audit(1754096834.248:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 40.732268][ T29] audit: type=1400 audit(1754096834.248:110): avc: denied { map_write } for pid=3472 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.767096][ T29] audit: type=1326 audit(1754096834.308:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 40.790528][ T29] audit: type=1326 audit(1754096834.308:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 40.814196][ T29] audit: type=1326 audit(1754096834.308:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 40.861849][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.882667][ T3306] veth0_macvtap: entered promiscuous mode [ 40.889469][ T3487] mmap: syz.1.10 (3487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.920532][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.947187][ T3485] syzkaller0: entered promiscuous mode [ 40.954292][ T3485] syzkaller0: entered allmulticast mode [ 40.975583][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.985362][ T3306] veth1_macvtap: entered promiscuous mode [ 40.997836][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.004240][ T29] audit: type=1400 audit(1754096834.578:114): avc: denied { create } for pid=3490 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.037428][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.087203][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.107835][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.119669][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.146428][ T176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.160627][ T176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.188928][ T176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.211338][ T29] audit: type=1400 audit(1754096834.798:115): avc: denied { allowed } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.216194][ T176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.283438][ T3506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 41.292489][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 41.344983][ T3510] loop0: detected capacity change from 0 to 512 [ 41.448930][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.477740][ T3510] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.520916][ T3510] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 41.542589][ T3510] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 41.555296][ T3510] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.555296][ T3510] [ 41.565562][ T3510] EXT4-fs (loop0): Total free blocks count 0 [ 41.571618][ T3510] EXT4-fs (loop0): Free/Dirty block details [ 41.577853][ T3510] EXT4-fs (loop0): free_blocks=65280 [ 41.583513][ T3510] EXT4-fs (loop0): dirty_blocks=22 [ 41.588701][ T3510] EXT4-fs (loop0): Block reservation details [ 41.595022][ T3510] EXT4-fs (loop0): i_reserved_data_blocks=22 [ 41.619494][ T3510] syz.0.16 (3510) used greatest stack depth: 9768 bytes left [ 41.632409][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.665139][ T3545] gre0: Master is either lo or non-ether device [ 41.832047][ T3560] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 41.919362][ T3576] syz.2.46 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.043704][ T3590] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 42.068157][ T3592] netlink: 'syz.2.54': attribute type 3 has an invalid length. [ 42.079957][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 42.088881][ T3594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 42.106529][ T3573] SELinux: ebitmap: map size 149 does not match my size 64 (high bit was 0) [ 42.118707][ T3594] Zero length message leads to an empty skb [ 42.123969][ T3573] SELinux: failed to load policy [ 42.371624][ T3638] loop2: detected capacity change from 0 to 2048 [ 42.399345][ T3641] loop0: detected capacity change from 0 to 512 [ 42.410965][ T3641] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 42.419787][ T3638] loop2: p1 < > p4 [ 42.422057][ T3641] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 42.432077][ T3638] loop2: p4 size 8388608 extends beyond EOD, [ 42.435954][ T3641] EXT4-fs (loop0): group descriptors corrupted! [ 42.448551][ T3638] truncated [ 42.509940][ T3649] netlink: 268 bytes leftover after parsing attributes in process `syz.4.81'. [ 42.519246][ T3649] unsupported nla_type 65024 [ 42.539152][ T3404] kernel write not supported for file /47/attr/exec (pid: 3404 comm: kworker/0:5) [ 42.619274][ T3664] sock: sock_set_timeout: `syz.2.88' (pid 3664) tries to set negative timeout [ 42.814334][ T3688] netlink: '+}[@': attribute type 21 has an invalid length. [ 42.821863][ T3688] netlink: '+}[@': attribute type 1 has an invalid length. [ 42.829222][ T3688] netlink: 144 bytes leftover after parsing attributes in process `+}[@'. [ 42.840334][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 42.996473][ T3715] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 43.248283][ T3753] program syz.0.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.258250][ T3753] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 43.281293][ T3751] loop1: detected capacity change from 0 to 8192 [ 43.289040][ T3751] FAT-fs (loop1): bogus sectors per cluster 0 [ 43.295299][ T3751] FAT-fs (loop1): Can't find a valid FAT filesystem [ 43.343144][ T3761] loop0: detected capacity change from 0 to 1024 [ 43.353934][ T3761] EXT4-fs: Ignoring removed bh option [ 43.359873][ T3761] EXT4-fs: inline encryption not supported [ 43.367016][ T3766] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.133'. [ 43.368435][ T3761] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.393571][ T3761] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 43.406428][ T3761] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.131: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.424447][ T3769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 43.436053][ T3761] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.131: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.466606][ T3761] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.131: Failed to acquire dquot type 0 [ 43.480655][ T3761] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 43.502417][ T3761] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.131: mark_inode_dirty error [ 43.507575][ T3780] vlan2: entered promiscuous mode [ 43.519933][ T3780] bond0: entered promiscuous mode [ 43.521611][ T3761] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 43.525170][ T3780] bond_slave_0: entered promiscuous mode [ 43.537109][ T3761] EXT4-fs (loop0): 1 orphan inode deleted [ 43.541718][ T3780] bond_slave_1: entered promiscuous mode [ 43.550527][ T3761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.574658][ T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.590033][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 43.617032][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.624639][ T1036] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.632335][ T3782] loop3: detected capacity change from 0 to 1024 [ 43.643417][ T1036] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [] on [ 43.643642][ T3782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.680185][ T3782] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.696901][ T3761] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.131: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.722603][ T3782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.790722][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.797588][ T3800] loop2: detected capacity change from 0 to 512 [ 43.807765][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.818739][ T3800] EXT4-fs: Ignoring removed nobh option [ 43.834168][ T3800] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.851733][ T3800] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.148: iget: bad i_size value: 38620345925642 [ 43.865809][ T3800] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.148: couldn't read orphan inode 15 (err -117) [ 43.880755][ T3800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.893423][ T3812] loop0: detected capacity change from 0 to 512 [ 43.908964][ T3812] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.911704][ T3800] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 43.933583][ T3800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.942015][ T3812] EXT4-fs (loop0): mount failed [ 43.948637][ T3800] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 44.005565][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.071431][ T3824] loop1: detected capacity change from 0 to 2048 [ 44.091632][ T3824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.111827][ T3824] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.158708][ T3824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.180627][ T3850] loop0: detected capacity change from 0 to 1024 [ 44.239846][ T3850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 44.248481][ T3850] System zones: 0-1, 3-36 [ 44.269672][ T3850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.282912][ T3859] sctp: [Deprecated]: syz.2.169 (pid 3859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.282912][ T3859] Use struct sctp_sack_info instead [ 44.303073][ T3863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 44.320119][ T3850] ======================================================= [ 44.320119][ T3850] WARNING: The mand mount option has been deprecated and [ 44.320119][ T3850] and is ignored by this kernel. Remove the mand [ 44.320119][ T3850] option from the mount to silence this warning. [ 44.320119][ T3850] ======================================================= [ 44.379844][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.438187][ T3873] loop2: detected capacity change from 0 to 512 [ 44.444899][ T3877] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3877 comm=syz.0.182 [ 44.457784][ T3873] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 44.475660][ T3879] loop1: detected capacity change from 0 to 512 [ 44.494907][ T3879] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 44.507763][ T3879] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #13: comm syz.1.183: iget: bad i_size value: 12154757448730 [ 44.523654][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 44.529602][ T3879] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.183: couldn't read orphan inode 13 (err -117) [ 44.545610][ T3879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.563077][ T3879] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 44.569211][ T3886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.582466][ T3886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.601748][ T3879] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 44.656181][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.791564][ T3358] kernel read not supported for file /input/event1 (pid: 3358 comm: kworker/1:2) [ 44.879000][ T3918] loop3: detected capacity change from 0 to 1024 [ 44.887141][ T3918] EXT4-fs: Ignoring removed orlov option [ 44.896760][ T3918] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.930255][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.949512][ T3918] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.201: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 44.970638][ T3918] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 44.989786][ T3928] hub 6-0:1.0: USB hub found [ 44.994650][ T3928] hub 6-0:1.0: 8 ports detected [ 45.025881][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.057953][ T3938] loop3: detected capacity change from 0 to 512 [ 45.065059][ T3938] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.072643][ T3938] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.085972][ T3938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.100934][ T3938] EXT4-fs (loop3): 1 truncate cleaned up [ 45.107017][ T3938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.141503][ T3943] Driver unsupported XDP return value 0 on prog (id 141) dev N/A, expect packet loss! [ 45.152829][ T3938] EXT4-fs (loop3): resizing filesystem from 256 to 1 blocks [ 45.160399][ T3938] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 45.213524][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.320555][ T3970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.351375][ T3970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.384471][ T3970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.393948][ T3970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.514479][ T3996] loop3: detected capacity change from 0 to 256 [ 45.637658][ T4014] loop1: detected capacity change from 0 to 1024 [ 45.646165][ T4014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.666969][ T4014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.700097][ T4024] geneve2: entered promiscuous mode [ 45.705424][ T4024] geneve2: entered allmulticast mode [ 45.708457][ T4012] loop3: detected capacity change from 0 to 8192 [ 45.717236][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 45.717249][ T29] audit: type=1400 audit(1754096839.308:402): avc: denied { read open } for pid=4013 comm="syz.1.247" path="/38/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.746328][ T29] audit: type=1400 audit(1754096839.308:403): avc: denied { write } for pid=4013 comm="syz.1.247" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.833822][ T29] audit: type=1400 audit(1754096839.418:404): avc: denied { mount } for pid=4028 comm="syz.0.254" name="/" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.857437][ T29] audit: type=1400 audit(1754096839.418:405): avc: denied { read } for pid=4028 comm="syz.0.254" name="/" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.880327][ T29] audit: type=1400 audit(1754096839.418:406): avc: denied { open } for pid=4028 comm="syz.0.254" path="/69/file0" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.903100][ T29] audit: type=1400 audit(1754096839.418:407): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.024349][ T4041] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 46.031172][ T4041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.038966][ T4041] vhci_hcd vhci_hcd.0: Device attached [ 46.051113][ T4045] loop0: detected capacity change from 0 to 1024 [ 46.058370][ T4045] EXT4-fs: inline encryption not supported [ 46.059602][ T4042] vhci_hcd: connection closed [ 46.074929][ T4045] EXT4-fs: Ignoring removed bh option [ 46.085753][ T2648] vhci_hcd: stop threads [ 46.090062][ T2648] vhci_hcd: release socket [ 46.094569][ T2648] vhci_hcd: disconnect device [ 46.098338][ T4045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.113631][ T4049] loop2: detected capacity change from 0 to 256 [ 46.128525][ T29] audit: type=1400 audit(1754096839.718:408): avc: denied { read write } for pid=4044 comm="syz.0.260" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.151134][ T29] audit: type=1400 audit(1754096839.718:409): avc: denied { open } for pid=4044 comm="syz.0.260" path="/72/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.174084][ T29] audit: type=1400 audit(1754096839.718:410): avc: denied { map } for pid=4044 comm="syz.0.260" path="/72/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.196822][ T29] audit: type=1400 audit(1754096839.718:411): avc: denied { execute } for pid=4044 comm="syz.0.260" path="/72/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.225886][ T4049] FAT-fs (loop2): Directory bread(block 64) failed [ 46.232733][ T4049] FAT-fs (loop2): Directory bread(block 65) failed [ 46.241208][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.250444][ T4049] FAT-fs (loop2): Directory bread(block 66) failed [ 46.257599][ T4049] FAT-fs (loop2): Directory bread(block 67) failed [ 46.264797][ T4049] FAT-fs (loop2): Directory bread(block 68) failed [ 46.277892][ T4049] FAT-fs (loop2): Directory bread(block 69) failed [ 46.284766][ T4049] FAT-fs (loop2): Directory bread(block 70) failed [ 46.291442][ T4049] FAT-fs (loop2): Directory bread(block 71) failed [ 46.298548][ T4049] FAT-fs (loop2): Directory bread(block 72) failed [ 46.305300][ T4049] FAT-fs (loop2): Directory bread(block 73) failed [ 46.377443][ T4057] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 46.396980][ T31] kworker/u8:1: attempt to access beyond end of device [ 46.396980][ T31] loop2: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 46.532972][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.548471][ T10] kernel write not supported for file /163/clear_refs (pid: 10 comm: kworker/0:1) [ 46.576950][ T4074] __nla_validate_parse: 4 callbacks suppressed [ 46.576970][ T4074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.271'. [ 46.582062][ T4076] loop4: detected capacity change from 0 to 512 [ 46.593358][ T4077] loop0: detected capacity change from 0 to 164 [ 46.619410][ T4076] ext4: Unknown parameter 'permit_directio' [ 46.636998][ T4077] Unable to read rock-ridge attributes [ 46.666675][ T4085] syzkaller1: entered promiscuous mode [ 46.672331][ T4085] syzkaller1: entered allmulticast mode [ 46.767473][ T4095] pim6reg1: entered promiscuous mode [ 46.773037][ T4095] pim6reg1: entered allmulticast mode [ 46.837506][ T4079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.837962][ T4105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 46.848587][ T4079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.990860][ T4132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.012072][ T4134] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 47.022235][ T4134] SELinux: failed to load policy [ 47.099688][ T4146] autofs4:pid:4146:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189375) [ 47.113007][ T4146] autofs4:pid:4146:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 47.333002][ T4171] pim6reg1: entered promiscuous mode [ 47.338492][ T4171] pim6reg1: entered allmulticast mode [ 47.390652][ T4175] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 47.409537][ T4177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 47.836000][ T4195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.847408][ T4195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.890831][ T4200] syzkaller1: entered promiscuous mode [ 47.896601][ T4200] syzkaller1: entered allmulticast mode [ 47.960669][ T4204] loop4: detected capacity change from 0 to 256 [ 48.062987][ T4215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.071569][ T4215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.081930][ T4215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.090584][ T4215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.620282][ T4241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.629006][ T4241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.659616][ T4240] hub 6-0:1.0: USB hub found [ 48.664815][ T4240] hub 6-0:1.0: 8 ports detected [ 48.691524][ T4249] autofs4:pid:4249:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189375) [ 48.704902][ T4249] autofs4:pid:4249:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 48.752363][ T4256] loop0: detected capacity change from 0 to 512 [ 48.760568][ T4256] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 48.787391][ T2648] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 48.819530][ T4264] loop2: detected capacity change from 0 to 512 [ 48.826382][ T4264] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.833299][ T4264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.845541][ T4264] EXT4-fs (loop2): 1 truncate cleaned up [ 48.851605][ T4264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.866944][ T4264] EXT4-fs (loop2): resizing filesystem from 256 to 1 blocks [ 48.874323][ T4264] EXT4-fs warning (device loop2): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 48.896361][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.913300][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.922323][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.933030][ T4268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.942895][ T4268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.051208][ T4273] loop0: detected capacity change from 0 to 512 [ 49.058351][ T4273] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.065156][ T4273] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.076469][ T4273] EXT4-fs (loop0): 1 truncate cleaned up [ 49.082618][ T4273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.098162][ T4273] EXT4-fs (loop0): resizing filesystem from 256 to 1 blocks [ 49.105802][ T4273] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 49.126777][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.148151][ T4277] hub 6-0:1.0: USB hub found [ 49.163105][ T4277] hub 6-0:1.0: 8 ports detected [ 49.180343][ T4279] loop3: detected capacity change from 0 to 1024 [ 49.210677][ T4279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 49.219014][ T4279] System zones: 0-1, 3-36 [ 49.224150][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.253852][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.277027][ T4292] loop3: detected capacity change from 0 to 512 [ 49.285300][ T4292] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 49.299919][ T4288] hub 6-0:1.0: USB hub found [ 49.306176][ T4288] hub 6-0:1.0: 8 ports detected [ 49.320696][ T2648] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 49.406631][ T4305] sctp: [Deprecated]: syz.4.370 (pid 4305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 49.406631][ T4305] Use struct sctp_sack_info instead [ 49.464461][ T4308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.473475][ T4308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.506971][ T4315] loop3: detected capacity change from 0 to 1024 [ 49.515182][ T4315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.526944][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.007100][ T4324] loop4: detected capacity change from 0 to 512 [ 50.015432][ T4324] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 50.074864][ T176] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 50.081291][ T4330] vlan2: entered promiscuous mode [ 50.089168][ T4330] bond0: entered promiscuous mode [ 50.094268][ T4330] bond_slave_0: entered promiscuous mode [ 50.100102][ T4330] bond_slave_1: entered promiscuous mode [ 50.172585][ T4337] loop1: detected capacity change from 0 to 512 [ 50.196459][ T4337] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.218521][ T4337] EXT4-fs (loop1): mount failed [ 50.258797][ T4346] loop4: detected capacity change from 0 to 1024 [ 50.268047][ T4349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.277091][ T4349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.285311][ T4346] EXT4-fs: Ignoring removed orlov option [ 50.291690][ T4346] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 50.303502][ T4349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.312527][ T4349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.316151][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.327825][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.335841][ T4351] loop0: detected capacity change from 0 to 1024 [ 50.342686][ T4351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.344713][ T3383] kernel read not supported for file /input/event1 (pid: 3383 comm: kworker/0:3) [ 50.360419][ T4346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.374222][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [] on [ 50.381028][ T4351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.420292][ T4346] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.390: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 50.438292][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.464572][ T4351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.509574][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.526225][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.535752][ T4367] loop3: detected capacity change from 0 to 512 [ 50.542959][ T4367] EXT4-fs: Ignoring removed nobh option [ 50.549831][ T4367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.560687][ T4367] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.401: iget: bad i_size value: 38620345925642 [ 50.576255][ T4367] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.401: couldn't read orphan inode 15 (err -117) [ 50.590155][ T4367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.612609][ T4370] loop4: detected capacity change from 0 to 512 [ 50.614281][ T4367] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 50.621124][ T4370] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 50.628935][ T4367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.639754][ T4370] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 50.658567][ T4370] EXT4-fs (loop4): group descriptors corrupted! [ 50.665312][ T4367] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.706566][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.763897][ T4381] loop3: detected capacity change from 0 to 512 [ 50.785149][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 50.785165][ T29] audit: type=1326 audit(1754096844.368:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8231b7eb69 code=0x0 [ 50.829303][ T4381] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 50.840950][ T4381] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.841082][ T4392] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.876253][ T4381] EXT4-fs (loop3): mount failed [ 50.876458][ T4392] SELinux: failed to load policy [ 50.925611][ T29] audit: type=1400 audit(1754096844.508:472): avc: denied { validate_trans } for pid=4397 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.946855][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 50.970216][ T29] audit: type=1400 audit(1754096844.558:473): avc: denied { create } for pid=4403 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.005660][ T29] audit: type=1400 audit(1754096844.578:474): avc: denied { create } for pid=4405 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.025829][ T29] audit: type=1400 audit(1754096844.578:475): avc: denied { connect } for pid=4405 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.037628][ T4412] loop4: detected capacity change from 0 to 128 [ 51.045560][ T29] audit: type=1400 audit(1754096844.578:476): avc: denied { ioctl } for pid=4405 comm="syz.4.416" path="socket:[7404]" dev="sockfs" ino=7404 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.081678][ T29] audit: type=1400 audit(1754096844.648:477): avc: denied { setopt } for pid=4403 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.101622][ T29] audit: type=1400 audit(1754096844.648:478): avc: denied { bind } for pid=4403 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.121384][ T29] audit: type=1400 audit(1754096844.648:479): avc: denied { listen } for pid=4403 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.132567][ T4408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.417'. [ 51.146476][ T4412] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.165286][ T4412] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.269807][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.278848][ T4434] loop3: detected capacity change from 0 to 2048 [ 51.286801][ T4432] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 51.321359][ T4442] loop2: detected capacity change from 0 to 512 [ 51.334873][ T4434] loop3: p1 < > p4 [ 51.340174][ T4434] loop3: p4 size 8388608 extends beyond EOD, truncated [ 51.356687][ T4442] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.375017][ T4448] sd 0:0:1:0: device reset [ 51.413588][ T4442] EXT4-fs (loop2): mount failed [ 51.480270][ T4462] SELinux: failed to load policy [ 51.512364][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 51.552186][ T4474] loop4: detected capacity change from 0 to 1024 [ 51.573126][ T4474] EXT4-fs: Ignoring removed bh option [ 51.578902][ T4474] EXT4-fs: inline encryption not supported [ 51.588461][ T4474] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.642234][ T4474] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.653546][ T4489] loop7: detected capacity change from 0 to 7 [ 51.755455][ T4474] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.447: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.795021][ T4474] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.447: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.810801][ T4474] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.447: Failed to acquire dquot type 0 [ 51.827125][ T4474] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 51.839549][ T4474] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.447: mark_inode_dirty error [ 51.868616][ C0] hrtimer: interrupt took 37296 ns [ 51.874524][ T4474] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 51.885961][ T4474] EXT4-fs (loop4): 1 orphan inode deleted [ 51.892338][ T4474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.905528][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.954100][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 51.986017][ T4474] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.447: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.009378][ T4509] process 'syz.0.465' launched '/dev/fd/5' with NULL argv: empty string added [ 52.025957][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.048985][ T4513] 9pnet_fd: Insufficient options for proto=fd [ 52.276434][ T4554] netlink: 144 bytes leftover after parsing attributes in process `syz.4.486'. [ 52.432770][ T4571] loop4: detected capacity change from 0 to 8192 [ 52.496468][ T4584] loop3: detected capacity change from 0 to 512 [ 52.505270][ T4584] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.523780][ T4584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.541291][ T4584] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.499: iget: bad i_size value: 38620345925642 [ 52.625312][ T4584] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.499: couldn't read orphan inode 15 (err -117) [ 52.685909][ T4584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.762217][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.771354][ T4592] loop1: detected capacity change from 0 to 8192 [ 52.805742][ T4592] msdos: Unknown parameter 'A' [ 52.866747][ T4622] loop3: detected capacity change from 0 to 1024 [ 52.884409][ T4622] EXT4-fs: Ignoring removed bh option [ 52.893282][ T4622] EXT4-fs: inline encryption not supported [ 52.904460][ T4622] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.929788][ T4622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 52.954577][ T4622] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.516: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.970056][ T4631] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 52.970056][ T4631] The task syz.0.514 (4631) triggered the difference, watch for misbehavior. [ 52.989374][ T4622] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.516: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.034705][ T4622] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.516: Failed to acquire dquot type 0 [ 53.062873][ T4622] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 53.095918][ T4622] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.516: mark_inode_dirty error [ 53.119074][ T4622] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 53.132197][ T4622] EXT4-fs (loop3): 1 orphan inode deleted [ 53.139337][ T4622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.152348][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.165192][ T4639] random: crng reseeded on system resumption [ 53.170289][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 53.208051][ T4622] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.516: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.239589][ T4643] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 53.249752][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.302980][ T4649] netlink: 64 bytes leftover after parsing attributes in process `syz.2.528'. [ 53.422031][ T4664] netlink: 'syz.1.535': attribute type 10 has an invalid length. [ 53.434418][ T4664] team0: Device hsr_slave_0 failed to register rx_handler [ 53.470722][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 53.509774][ T4674] capability: warning: `syz.3.541' uses deprecated v2 capabilities in a way that may be insecure [ 53.584723][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 53.686146][ T4689] netlink: 'syz.1.547': attribute type 3 has an invalid length. [ 53.699682][ T4695] openvswitch: netlink: Message has 6 unknown bytes. [ 53.745901][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 53.755015][ T4703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 53.764250][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 53.775342][ T4703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 53.784333][ T4703] netlink: 'syz.1.554': attribute type 6 has an invalid length. [ 53.809618][ T4707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.556'. [ 53.845837][ T4702] bridge_slave_0: left allmulticast mode [ 53.851561][ T4702] bridge_slave_0: left promiscuous mode [ 53.857517][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.883382][ T4702] bridge_slave_1: left allmulticast mode [ 53.889604][ T4702] bridge_slave_1: left promiscuous mode [ 53.895633][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.957181][ T4702] bond0: (slave bond_slave_0): Releasing backup interface [ 53.987217][ T4702] bond0: (slave bond_slave_1): Releasing backup interface [ 54.013644][ T4702] team0: Port device team_slave_0 removed [ 54.039016][ T4702] team0: Port device team_slave_1 removed [ 54.049596][ T4702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.057134][ T4702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.085304][ T4702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.092742][ T4702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.116957][ T4746] sctp: [Deprecated]: syz.1.569 (pid 4746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.116957][ T4746] Use struct sctp_sack_info instead [ 54.201079][ T4753] loop4: detected capacity change from 0 to 512 [ 54.209416][ T4753] EXT4-fs: Ignoring removed nobh option [ 54.231903][ T4753] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 54.253809][ T4753] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm +}[@: mark_inode_dirty error [ 54.266850][ T4753] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 54.282859][ T4753] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm +}[@: mark_inode_dirty error [ 54.304219][ T4753] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 54.324115][ T4753] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 54.344581][ T4753] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm +}[@: mark_inode_dirty error [ 54.378867][ T4753] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 54.416162][ T4753] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 54.419569][ T4775] loop0: detected capacity change from 0 to 2048 [ 54.428299][ T4753] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 54.447306][ T4753] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 54.457042][ T4753] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 54.457127][ T4777] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 54.470443][ T4753] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm +}[@: mark_inode_dirty error [ 54.491072][ T4753] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 54.525580][ T4753] EXT4-fs (loop4): 1 truncate cleaned up [ 54.532554][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.547161][ T4775] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082] [ 54.559322][ T4753] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.595486][ T4775] System zones: 0-7 [ 54.600065][ T4775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.622614][ T4787] sctp: [Deprecated]: syz.3.586 (pid 4787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.622614][ T4787] Use struct sctp_sack_info instead [ 54.655826][ T4753] +}[@ (4753) used greatest stack depth: 9760 bytes left [ 54.665258][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.701721][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.725267][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'. [ 54.734823][ T4793] netlink: 'syz.4.588': attribute type 6 has an invalid length. [ 54.754282][ T4798] program syz.1.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.891729][ T4820] sctp: [Deprecated]: syz.4.601 (pid 4820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.891729][ T4820] Use struct sctp_sack_info instead [ 54.917865][ T4823] loop3: detected capacity change from 0 to 512 [ 54.925354][ T4823] EXT4-fs: Ignoring removed nobh option [ 54.938728][ T4823] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 54.955797][ T4823] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm +}[@: mark_inode_dirty error [ 54.967612][ T4823] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 54.994468][ T4823] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm +}[@: mark_inode_dirty error [ 55.006316][ T4823] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 55.028209][ T4823] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 55.040382][ T4838] netlink: 'syz.0.604': attribute type 6 has an invalid length. [ 55.056369][ T4823] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm +}[@: mark_inode_dirty error [ 55.081289][ T4823] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 55.105381][ T4823] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 55.130993][ T4823] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 55.156952][ T4823] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 55.158864][ T4851] loop2: detected capacity change from 0 to 2048 [ 55.182761][ T4823] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 55.199896][ T4823] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm +}[@: mark_inode_dirty error [ 55.211509][ T4823] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 55.222863][ T4823] EXT4-fs (loop3): 1 truncate cleaned up [ 55.229517][ T4851] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082] [ 55.239300][ T4823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.245361][ T4851] System zones: 0-7 [ 55.254065][ T4823] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.257240][ T4851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.297383][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.322716][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.457422][ T4892] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.626859][ T4924] netlink: 'syz.2.650': attribute type 6 has an invalid length. [ 55.675745][ T4930] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 55.683520][ T4930] SELinux: failed to load policy [ 55.968420][ T4945] netlink: 'syz.3.661': attribute type 6 has an invalid length. [ 55.983007][ T4947] loop2: detected capacity change from 0 to 512 [ 55.989794][ T4947] EXT4-fs: Ignoring removed nobh option [ 56.016523][ T4947] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 56.030885][ T4947] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm +}[@: mark_inode_dirty error [ 56.044334][ T4947] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 56.058823][ T4957] netlink: 'syz.3.654': attribute type 3 has an invalid length. [ 56.063563][ T4947] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm +}[@: mark_inode_dirty error [ 56.079533][ T4947] __quota_error: 171 callbacks suppressed [ 56.079555][ T4947] Quota error (device loop2): write_blk: dquota write failed [ 56.093341][ T4947] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 56.103390][ T4947] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 56.116297][ T4947] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.128353][ T4947] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm +}[@: mark_inode_dirty error [ 56.137327][ T4961] program syz.3.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.141830][ T4947] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.177093][ T4947] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 56.192290][ T4947] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.206575][ T4947] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 56.220250][ T4947] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.238340][ T4947] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm +}[@: mark_inode_dirty error [ 56.257216][ T4947] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 56.266931][ T4947] EXT4-fs (loop2): 1 truncate cleaned up [ 56.267311][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.267406][ T4947] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.307215][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.376831][ T4989] program syz.2.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.391593][ T4987] loop1: detected capacity change from 0 to 2048 [ 56.403069][ T4987] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.428750][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.491326][ T5007] loop0: detected capacity change from 0 to 512 [ 56.498883][ T5007] EXT4-fs: Ignoring removed nobh option [ 56.519922][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.534862][ T5007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 56.555730][ T5007] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm +}[@: mark_inode_dirty error [ 56.578596][ T5007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm +}[@: corrupted inode contents [ 56.601537][ T5007] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm +}[@: mark_inode_dirty error [ 56.619601][ T5007] Quota error (device loop0): write_blk: dquota write failed [ 56.619796][ T5007] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 56.619843][ T5007] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 56.623325][ T5007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.625631][ T5007] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm +}[@: mark_inode_dirty error [ 56.625825][ T5007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.625998][ T5007] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm +}[@: mark_inode_dirty error [ 56.626227][ T5007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.626375][ T5007] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 56.626575][ T5007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm +}[@: corrupted inode contents [ 56.626806][ T5007] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm +}[@: mark_inode_dirty error [ 56.626939][ T5007] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 56.627141][ T5025] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 56.627413][ T5007] EXT4-fs (loop0): 1 truncate cleaned up [ 56.628133][ T5007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.628286][ T5007] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.680353][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.957053][ T5057] loop1: detected capacity change from 0 to 512 [ 56.966386][ T5055] loop0: detected capacity change from 0 to 1024 [ 56.982787][ T29] audit: type=1326 audit(1754096850.568:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.4.704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508631eb69 code=0x0 [ 57.006280][ T5059] loop2: detected capacity change from 0 to 2048 [ 57.013370][ T5059] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.016568][ T5055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.033681][ T5057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.046676][ T29] audit: type=1400 audit(1754096850.628:639): avc: denied { remove_name } for pid=5052 comm="syz.0.701" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.069397][ T29] audit: type=1400 audit(1754096850.628:640): avc: denied { rename } for pid=5052 comm="syz.0.701" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.091786][ T29] audit: type=1400 audit(1754096850.628:641): avc: denied { unlink } for pid=5052 comm="syz.0.701" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 57.091854][ T5057] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.129722][ T5059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.136346][ T5057] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 57.143311][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.158191][ T5057] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 57.177717][ T5057] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.177717][ T5057] [ 57.187606][ T5057] EXT4-fs (loop1): Total free blocks count 0 [ 57.193638][ T5057] EXT4-fs (loop1): Free/Dirty block details [ 57.199594][ T5057] EXT4-fs (loop1): free_blocks=65280 [ 57.204984][ T5057] EXT4-fs (loop1): dirty_blocks=22 [ 57.210119][ T5057] EXT4-fs (loop1): Block reservation details [ 57.216172][ T5057] EXT4-fs (loop1): i_reserved_data_blocks=22 [ 57.223506][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.268695][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.279679][ T29] audit: type=1326 audit(1754096850.878:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 57.306159][ T29] audit: type=1326 audit(1754096850.878:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5073 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 57.343202][ T5078] loop0: detected capacity change from 0 to 164 [ 57.352509][ T5078] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.362800][ T5078] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.371521][ T5078] Symlink component flag not implemented [ 57.377256][ T5078] Symlink component flag not implemented [ 57.385572][ T5078] Symlink component flag not implemented (7) [ 57.391600][ T5078] Symlink component flag not implemented (116) [ 57.430532][ T5088] __nla_validate_parse: 23 callbacks suppressed [ 57.430555][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.715'. [ 57.445904][ T5088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.715'. [ 57.488126][ T5094] loop0: detected capacity change from 0 to 1024 [ 57.577825][ T5110] loop2: detected capacity change from 0 to 1024 [ 57.632084][ T5122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'. [ 57.641862][ T5122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'. [ 57.687012][ T5129] loop1: detected capacity change from 0 to 1024 [ 57.773298][ T5145] loop3: detected capacity change from 0 to 1024 [ 57.779541][ T5147] netlink: 176 bytes leftover after parsing attributes in process `syz.0.741'. [ 57.800273][ T5145] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.817254][ T5145] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.740: bg 0: block 393: padding at end of block bitmap is not set [ 57.831968][ T5145] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 57.844622][ T5145] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.844622][ T5145] [ 57.858207][ T5145] syz.3.740 (5145) used greatest stack depth: 9736 bytes left [ 57.860568][ T5152] loop1: detected capacity change from 0 to 1024 [ 57.886750][ T5153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'. [ 57.895870][ T5153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'. [ 57.997322][ T5173] loop3: detected capacity change from 0 to 164 [ 58.011537][ T5170] loop2: detected capacity change from 0 to 1024 [ 58.026238][ T5173] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.039839][ T5173] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.048961][ T5173] Symlink component flag not implemented [ 58.054676][ T5173] Symlink component flag not implemented [ 58.062762][ T5173] Symlink component flag not implemented (7) [ 58.068982][ T5173] Symlink component flag not implemented (116) [ 58.145392][ T5186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.755'. [ 58.200291][ T5196] loop3: detected capacity change from 0 to 1024 [ 58.256379][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'. [ 58.297745][ T5216] loop0: detected capacity change from 0 to 512 [ 58.314932][ T5220] netlink: 268 bytes leftover after parsing attributes in process `syz.3.766'. [ 58.326868][ T5216] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.358635][ T5227] loop2: detected capacity change from 0 to 164 [ 58.388631][ T5227] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.406572][ T5216] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 58.425746][ T5216] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 58.434483][ T5227] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.438294][ T5216] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.438294][ T5216] [ 58.456269][ T5216] EXT4-fs (loop0): Total free blocks count 0 [ 58.462282][ T5216] EXT4-fs (loop0): Free/Dirty block details [ 58.468396][ T5216] EXT4-fs (loop0): free_blocks=65280 [ 58.468631][ T5227] Symlink component flag not implemented [ 58.473708][ T5216] EXT4-fs (loop0): dirty_blocks=22 [ 58.473755][ T5216] EXT4-fs (loop0): Block reservation details [ 58.479533][ T5227] Symlink component flag not implemented [ 58.496370][ T5227] Symlink component flag not implemented (7) [ 58.496670][ T5216] EXT4-fs (loop0): i_reserved_data_blocks=22 [ 58.502672][ T5227] Symlink component flag not implemented (116) [ 58.516342][ T5242] loop1: detected capacity change from 0 to 512 [ 58.544768][ T5242] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 58.556358][ T5242] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 58.566719][ T5242] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.781: Corrupt directory, running e2fsck is recommended [ 58.594213][ T5242] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 58.606341][ T5242] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.781: corrupted in-inode xattr: invalid ea_ino [ 58.650497][ T5242] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.781: couldn't read orphan inode 15 (err -117) [ 58.665797][ T5242] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 58.677669][ T5242] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 58.687875][ T5242] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.781: Corrupt directory, running e2fsck is recommended [ 58.702954][ T5242] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.781: path /153/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 58.723373][ T5262] loop0: detected capacity change from 0 to 1024 [ 58.741711][ T5242] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 64: comm syz.1.781: path /153/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 58.757906][ T5262] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.782843][ T5262] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.791: bg 0: block 393: padding at end of block bitmap is not set [ 58.818089][ T5262] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 58.830685][ T5262] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.830685][ T5262] [ 58.886321][ T5273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.904112][ T5279] loop2: detected capacity change from 0 to 512 [ 58.918582][ T5279] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.935260][ T5273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.937532][ T5279] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 58.960527][ T5279] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 58.973068][ T5279] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.973068][ T5279] [ 58.982889][ T5279] EXT4-fs (loop2): Total free blocks count 0 [ 58.988927][ T5279] EXT4-fs (loop2): Free/Dirty block details [ 58.994983][ T5279] EXT4-fs (loop2): free_blocks=65280 [ 59.000776][ T5279] EXT4-fs (loop2): dirty_blocks=22 [ 59.005984][ T5279] EXT4-fs (loop2): Block reservation details [ 59.012029][ T5279] EXT4-fs (loop2): i_reserved_data_blocks=22 [ 59.027874][ T5273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.098185][ T5273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.148908][ T5305] loop2: detected capacity change from 0 to 512 [ 59.152953][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.168260][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.183662][ T5305] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.195394][ T5305] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 59.205529][ T5305] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.807: Corrupt directory, running e2fsck is recommended [ 59.220751][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.229078][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.237504][ T5305] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 59.247506][ T5305] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.807: corrupted in-inode xattr: invalid ea_ino [ 59.263665][ T5305] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.807: couldn't read orphan inode 15 (err -117) [ 59.300539][ T5305] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.312682][ T5305] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 59.322849][ T5305] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.807: Corrupt directory, running e2fsck is recommended [ 59.360490][ T5305] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.807: path /187/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 59.390506][ T5305] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 64: comm syz.2.807: path /187/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 59.428893][ T5319] loop4: detected capacity change from 0 to 512 [ 59.446896][ T5319] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.468920][ T5319] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 59.490039][ T5319] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 59.502768][ T5319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.502768][ T5319] [ 59.512458][ T5319] EXT4-fs (loop4): Total free blocks count 0 [ 59.518534][ T5319] EXT4-fs (loop4): Free/Dirty block details [ 59.524487][ T5319] EXT4-fs (loop4): free_blocks=65280 [ 59.529800][ T5319] EXT4-fs (loop4): dirty_blocks=22 [ 59.534966][ T5319] EXT4-fs (loop4): Block reservation details [ 59.541111][ T5319] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 59.801912][ T5351] loop3: detected capacity change from 0 to 512 [ 59.872554][ T5351] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.898200][ T5363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.910092][ T5351] EXT4-fs (loop3): mount failed [ 59.996690][ T5363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.035375][ T5365] loop3: detected capacity change from 0 to 512 [ 60.106387][ T5363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.177484][ T5363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.191843][ T5365] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.468431][ T5365] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 60.510335][ T5365] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 60.522819][ T5365] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.522819][ T5365] [ 60.532514][ T5365] EXT4-fs (loop3): Total free blocks count 0 [ 60.538530][ T5365] EXT4-fs (loop3): Free/Dirty block details [ 60.544472][ T5365] EXT4-fs (loop3): free_blocks=65280 [ 60.549875][ T5365] EXT4-fs (loop3): dirty_blocks=22 [ 60.555014][ T5365] EXT4-fs (loop3): Block reservation details [ 60.561113][ T5365] EXT4-fs (loop3): i_reserved_data_blocks=22 [ 60.727239][ T2648] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.754503][ T2648] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.763634][ T2648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.794066][ T2648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.010877][ T5409] loop1: detected capacity change from 0 to 1024 [ 61.046824][ T5409] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.324876][ T5409] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 61.345851][ T5409] EXT4-fs (loop1): Remounting filesystem read-only [ 61.352519][ T2648] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 3: len 13: ext4_ext_map_blocks returned -30 [ 61.400256][ T5409] syz.1.846 (5409) used greatest stack depth: 9480 bytes left [ 61.473653][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 61.473671][ T29] audit: type=1400 audit(1754096855.058:710): avc: denied { bind } for pid=5430 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.474722][ T5429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.597838][ T5429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.680192][ T5429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.695058][ T5444] loop0: detected capacity change from 0 to 512 [ 61.697524][ T5444] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.697556][ T5444] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 61.697644][ T5444] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.862: Corrupt directory, running e2fsck is recommended [ 61.697787][ T5444] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 61.697902][ T5444] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.862: corrupted in-inode xattr: invalid ea_ino [ 61.712405][ T5444] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.862: couldn't read orphan inode 15 (err -117) [ 61.715271][ T5444] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.715303][ T5444] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 61.715330][ T5444] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.862: Corrupt directory, running e2fsck is recommended [ 61.715572][ T5444] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.862: path /178/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 61.715875][ T5444] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 64: comm syz.0.862: path /178/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 61.717480][ T5429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.797693][ T2648] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.801389][ T2648] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.809585][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.809655][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.076488][ T5474] sctp: [Deprecated]: syz.4.874 (pid 5474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.076488][ T5474] Use struct sctp_sack_info instead [ 62.124959][ T5471] tap0: tun_chr_ioctl cmd 1074025675 [ 62.130300][ T5471] tap0: persist enabled [ 62.139059][ T5471] tap0: tun_chr_ioctl cmd 1074025675 [ 62.144555][ T5471] tap0: persist disabled [ 62.271939][ T29] audit: type=1326 audit(1754096855.858:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5489 comm="syz.0.881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8231b7eb69 code=0x0 [ 62.423442][ T5499] tap0: tun_chr_ioctl cmd 1074025675 [ 62.423467][ T5499] tap0: persist enabled [ 62.423608][ T5499] tap0: tun_chr_ioctl cmd 1074025675 [ 62.423627][ T5499] tap0: persist disabled [ 62.738098][ T5520] loop1: detected capacity change from 0 to 512 [ 62.779230][ T5520] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 62.789614][ T5520] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.812538][ T5525] __nla_validate_parse: 3 callbacks suppressed [ 62.812636][ T5525] netlink: 268 bytes leftover after parsing attributes in process `syz.2.896'. [ 62.829263][ T5520] EXT4-fs (loop1): mount failed [ 62.900944][ T29] audit: type=1326 audit(1754096856.488:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5530 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 62.924362][ T29] audit: type=1326 audit(1754096856.488:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5530 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 62.949972][ T29] audit: type=1326 audit(1754096856.488:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5530 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 62.973574][ T29] audit: type=1326 audit(1754096856.488:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5530 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 62.997782][ T29] audit: type=1326 audit(1754096856.488:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5530 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 63.546184][ T29] audit: type=1326 audit(1754096857.138:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 63.570012][ T29] audit: type=1326 audit(1754096857.138:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 63.942086][ T5579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.976965][ T5579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.027896][ T5579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.056751][ T5587] loop3: detected capacity change from 0 to 1024 [ 64.068508][ T5579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.086458][ T5587] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.104384][ T5587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 64.119930][ T5587] EXT4-fs (loop3): Remounting filesystem read-only [ 64.128029][ T31] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 4: len 12: ext4_ext_map_blocks returned -30 [ 64.149423][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.161719][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.174204][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.186021][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.186713][ T5592] netlink: 268 bytes leftover after parsing attributes in process `syz.3.923'. [ 64.272115][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 64.318025][ T5611] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 64.367379][ T5618] sd 0:0:1:0: device reset [ 64.513237][ T5642] netlink: 'syz.0.946': attribute type 1 has an invalid length. [ 64.544535][ T5649] sd 0:0:1:0: device reset [ 64.714528][ T5676] SELinux: failed to load policy [ 64.955906][ T5716] SELinux: failed to load policy [ 65.092685][ T5736] 9pnet_fd: Insufficient options for proto=fd [ 65.367177][ T5759] SELinux: failed to load policy [ 65.543296][ T5781] loop3: detected capacity change from 0 to 8192 [ 65.605482][ T5794] SELinux: failed to load policy [ 65.614715][ T5793] loop7: detected capacity change from 0 to 7 [ 65.621569][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 65.680181][ T5803] 9pnet_fd: Insufficient options for proto=fd [ 65.906249][ T5824] SELinux: failed to load policy [ 65.915641][ T5828] loop7: detected capacity change from 0 to 7 [ 66.183715][ T5856] SELinux: failed to load policy [ 66.338930][ T5872] random: crng reseeded on system resumption [ 66.390918][ T5867] loop0: detected capacity change from 0 to 8192 [ 66.399123][ T5867] msdos: Unknown parameter 'A' [ 66.499347][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 66.499363][ T29] audit: type=1326 audit(1754096860.088:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.551416][ T29] audit: type=1326 audit(1754096860.128:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.574870][ T29] audit: type=1326 audit(1754096860.128:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.598317][ T29] audit: type=1326 audit(1754096860.128:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.621864][ T29] audit: type=1326 audit(1754096860.128:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.645378][ T29] audit: type=1326 audit(1754096860.128:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.669249][ T29] audit: type=1326 audit(1754096860.128:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.692616][ T29] audit: type=1326 audit(1754096860.128:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.716232][ T29] audit: type=1326 audit(1754096860.128:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.739810][ T29] audit: type=1326 audit(1754096860.128:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 66.793696][ T5899] loop2: detected capacity change from 0 to 128 [ 66.819667][ T5899] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.863970][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 66.919076][ T5910] loop0: detected capacity change from 0 to 128 [ 66.938828][ T5910] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.075426][ T5934] random: crng reseeded on system resumption [ 67.140404][ T5942] loop0: detected capacity change from 0 to 512 [ 67.165471][ T5942] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.176347][ T5942] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.183704][ T5942] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1083: iget: bad i_size value: 38620345925642 [ 67.200262][ T5942] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1083: couldn't read orphan inode 15 (err -117) [ 67.275761][ T5959] openvswitch: netlink: Message has 6 unknown bytes. [ 67.321780][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 67.782391][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 67.816871][ T5983] loop1: detected capacity change from 0 to 512 [ 67.836666][ T5983] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 67.845233][ T5983] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.854802][ T5983] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1104: iget: bad i_size value: 38620345925642 [ 67.877840][ T5983] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1104: couldn't read orphan inode 15 (err -117) [ 68.190581][ T6016] dummy0: entered promiscuous mode [ 68.198405][ T6016] dummy0: left promiscuous mode [ 68.258581][ T6032] loop0: detected capacity change from 0 to 1024 [ 68.289153][ T6032] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.307273][ T6032] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 68.322670][ T6032] EXT4-fs (loop0): Remounting filesystem read-only [ 68.330722][ T2648] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 4: len 12: ext4_ext_map_blocks returned -30 [ 68.512494][ T6070] loop2: detected capacity change from 0 to 1024 [ 68.558104][ T6075] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 68.571607][ T6070] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1145: Allocating blocks 497-513 which overlap fs metadata [ 68.587082][ T6070] EXT4-fs (loop2): pa ffff888106f152a0: logic 256, phys. 385, len 8 [ 68.595284][ T6070] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 68.641066][ T6079] loop2: detected capacity change from 0 to 1024 [ 68.648599][ T6079] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.659589][ T6079] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.671335][ T6079] JBD2: no valid journal superblock found [ 68.677455][ T6079] EXT4-fs (loop2): Could not load journal inode [ 68.708845][ T6085] sctp: [Deprecated]: syz.2.1151 (pid 6085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.708845][ T6085] Use struct sctp_sack_info instead [ 68.973354][ T6116] netlink: 'syz.1.1162': attribute type 13 has an invalid length. [ 69.038420][ T6116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.225353][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1181'. [ 69.330798][ T6162] loop0: detected capacity change from 0 to 1024 [ 69.358152][ T6162] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1186: Failed to acquire dquot type 0 [ 69.371882][ T6162] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 69.427661][ T6162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1186: corrupted inode contents [ 69.491572][ T6162] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.1186: mark_inode_dirty error [ 69.515483][ T6169] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.523150][ T6169] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.531681][ T6162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1186: corrupted inode contents [ 69.548742][ T6162] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.1186: mark_inode_dirty error [ 69.560534][ T6162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1186: corrupted inode contents [ 69.579964][ T6162] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 69.593079][ T6162] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.1186: corrupted inode contents [ 69.607608][ T6162] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.1186: mark_inode_dirty error [ 69.620227][ T6162] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 69.634848][ T6162] EXT4-fs (loop0): 1 truncate cleaned up [ 69.645336][ T6162] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.664966][ T6162] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1186: Failed to acquire dquot type 0 [ 69.742180][ T6183] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1196'. [ 69.922114][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'. [ 69.931400][ T6202] netlink: 'syz.1.1205': attribute type 7 has an invalid length. [ 69.939177][ T6202] netlink: 'syz.1.1205': attribute type 8 has an invalid length. [ 69.946953][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'. [ 69.961228][ T6202] gretap0: entered promiscuous mode [ 69.967979][ T6202] batadv_slave_1: entered promiscuous mode [ 70.002571][ T6207] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 70.023661][ T6207] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 70.053090][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1212'. [ 70.158403][ T6232] loop3: detected capacity change from 0 to 512 [ 70.337771][ T6254] syzkaller1: entered promiscuous mode [ 70.343403][ T6254] syzkaller1: entered allmulticast mode [ 70.352305][ T6232] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.376911][ T6232] EXT4-fs (loop3): shut down requested (0) [ 70.462695][ T6261] bond1: entered promiscuous mode [ 70.467854][ T6261] bond1: entered allmulticast mode [ 70.480117][ T6261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.499379][ T6261] bond1 (unregistering): Released all slaves [ 70.564662][ T6278] macvtap0: refused to change device tx_queue_len [ 70.644770][ T6290] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 70.649674][ T6289] loop3: detected capacity change from 0 to 1024 [ 70.662303][ T6287] IPVS: stopping master sync thread 6290 ... [ 70.706108][ T6289] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.717290][ T6289] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.732007][ T6289] JBD2: no valid journal superblock found [ 70.737909][ T6289] EXT4-fs (loop3): Could not load journal inode [ 70.754404][ T6289] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 70.754591][ T6300] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1250'. [ 70.918224][ T6321] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1259'. [ 71.065986][ T6347] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6347 comm=syz.3.1271 [ 71.137936][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1277'. [ 71.901385][ T6416] netem: incorrect gi model size [ 71.906573][ T6416] netem: change failed [ 72.176345][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 72.176371][ T29] audit: type=1400 audit(1754096865.768:973): avc: denied { setopt } for pid=6418 comm="syz.4.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.233007][ T6424] loop2: detected capacity change from 0 to 1024 [ 72.262065][ T6428] loop3: detected capacity change from 0 to 1024 [ 72.269774][ T6428] journal_path: Non-blockdev passed as './file1' [ 72.276218][ T6428] EXT4-fs: error: could not find journal device path [ 72.284355][ T6424] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.297636][ T6424] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.327740][ T6424] JBD2: no valid journal superblock found [ 72.333509][ T6424] EXT4-fs (loop2): Could not load journal inode [ 72.380345][ T6424] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 72.496495][ T29] audit: type=1400 audit(1754096866.088:974): avc: denied { write } for pid=6444 comm="syz.2.1317" path="socket:[14677]" dev="sockfs" ino=14677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.652125][ T29] audit: type=1326 audit(1754096866.238:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 72.687750][ T29] audit: type=1326 audit(1754096866.268:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 72.711429][ T29] audit: type=1326 audit(1754096866.268:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe472bbeb69 code=0x7ffc0000 [ 72.835919][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1335'. [ 72.877842][ T6493] loop1: detected capacity change from 0 to 128 [ 72.888322][ T6493] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.900907][ T6493] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.928511][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.979480][ T29] audit: type=1326 audit(1754096866.568:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 73.005208][ T29] audit: type=1326 audit(1754096866.568:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 73.028729][ T29] audit: type=1326 audit(1754096866.568:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 73.052203][ T29] audit: type=1326 audit(1754096866.568:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 73.075631][ T29] audit: type=1326 audit(1754096866.588:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 73.140563][ T6511] Invalid logical block size (9) [ 73.280131][ T6533] netlink: 'syz.1.1367': attribute type 3 has an invalid length. [ 73.316245][ T6542] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1360'. [ 73.335238][ T6545] netem: incorrect gi model size [ 73.340348][ T6545] netem: change failed [ 73.647758][ T6585] netem: incorrect gi model size [ 73.652766][ T6585] netem: change failed [ 73.925900][ T6605] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 73.960194][ T6610] netlink: 'syz.0.1395': attribute type 13 has an invalid length. [ 73.971968][ T6610] gretap0: refused to change device tx_queue_len [ 73.996118][ T6610] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.043132][ T6618] bond1: entered promiscuous mode [ 74.048336][ T6618] bond1: entered allmulticast mode [ 74.053817][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.065379][ T6618] bond1 (unregistering): Released all slaves [ 74.114773][ T6623] loop2: detected capacity change from 0 to 512 [ 74.175073][ T6623] EXT4-fs mount: 50 callbacks suppressed [ 74.175096][ T6623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.194714][ T6623] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.227028][ T6623] EXT4-fs (loop2): shut down requested (0) [ 74.271030][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.370335][ T6647] loop2: detected capacity change from 0 to 2048 [ 74.436629][ T6647] Alternate GPT is invalid, using primary GPT. [ 74.442990][ T6647] loop2: p1 p2 p3 [ 74.687918][ T6663] SELinux: failed to load policy [ 74.697081][ T6665] loop3: detected capacity change from 0 to 2048 [ 74.761190][ T6665] Alternate GPT is invalid, using primary GPT. [ 74.767670][ T6665] loop3: p1 p2 p3 [ 74.819817][ T6670] loop2: detected capacity change from 0 to 164 [ 74.840336][ T6670] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 74.967364][ T6686] loop3: detected capacity change from 0 to 164 [ 74.988200][ T6686] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.301103][ T6709] netlink: 'syz.0.1438': attribute type 3 has an invalid length. [ 75.470942][ T6713] bond1: entered promiscuous mode [ 75.476115][ T6713] bond1: entered allmulticast mode [ 75.502023][ T6713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.534716][ T6713] bond1 (unregistering): Released all slaves [ 75.717054][ T6740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6740 comm=syz.2.1450 [ 75.990002][ T6759] bond1: entered promiscuous mode [ 75.995150][ T6759] bond1: entered allmulticast mode [ 76.000674][ T6759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.010927][ T6759] bond1 (unregistering): Released all slaves [ 76.446741][ T6772] netlink: 'syz.4.1467': attribute type 3 has an invalid length. [ 76.455496][ T6770] __nla_validate_parse: 1 callbacks suppressed [ 76.455512][ T6770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1465'. [ 76.758502][ T6795] netlink: 'syz.2.1475': attribute type 13 has an invalid length. [ 76.870131][ T6795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.978271][ T6797] netlink: 'syz.3.1477': attribute type 13 has an invalid length. [ 76.999896][ T6797] gretap0: refused to change device tx_queue_len [ 77.012741][ T6797] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.085675][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 77.094898][ T6805] netlink: 'syz.3.1478': attribute type 7 has an invalid length. [ 77.102935][ T6805] netlink: 'syz.3.1478': attribute type 8 has an invalid length. [ 77.110998][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1478'. [ 77.151817][ T6805] gretap0: entered promiscuous mode [ 77.165526][ T6805] batadv_slave_1: entered promiscuous mode [ 77.190187][ T6805] debugfs: 'hsr1' already exists in 'hsr' [ 77.196040][ T6805] Cannot create hsr debugfs directory [ 77.511421][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 77.511440][ T29] audit: type=1326 audit(1754096871.098:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 77.547082][ T29] audit: type=1326 audit(1754096871.098:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 77.605967][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1493'. [ 77.664396][ T29] audit: type=1326 audit(1754096871.138:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 77.688164][ T29] audit: type=1326 audit(1754096871.138:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 77.712337][ T29] audit: type=1326 audit(1754096871.138:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.0.1491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8231b7eb69 code=0x7ffc0000 [ 77.934966][ T6868] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 78.083007][ T6872] netlink: 'syz.3.1510': attribute type 13 has an invalid length. [ 78.098328][ T6872] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 78.181529][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1514'. [ 78.408584][ T29] audit: type=1400 audit(1754096871.988:1014): avc: denied { accept } for pid=6897 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.557999][ T6908] netlink: 'syz.4.1525': attribute type 13 has an invalid length. [ 78.564109][ T29] audit: type=1326 audit(1754096872.148:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e9feeb69 code=0x7ffc0000 [ 78.570879][ T6908] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 78.589413][ T29] audit: type=1326 audit(1754096872.148:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e9feeb69 code=0x7ffc0000 [ 78.629149][ T29] audit: type=1326 audit(1754096872.218:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e9feeb69 code=0x7ffc0000 [ 78.652698][ T29] audit: type=1326 audit(1754096872.218:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.3.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e9feeb69 code=0x7ffc0000 [ 78.727303][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'. [ 78.905906][ T6950] SELinux: Context is not valid (left unmapped). [ 78.913364][ T6950] SELinux: Context attr is not valid (left unmapped). [ 78.943728][ T6952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.667671][ T6983] netlink: 368 bytes leftover after parsing attributes in process `syz.3.1558'. [ 79.820616][ C1] sd 0:0:1:0: [sda] tag#7613 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 79.831226][ C1] sd 0:0:1:0: [sda] tag#7613 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 79.908487][ T7010] 9p: Unknown uid 00000000004294967295 [ 80.017646][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1581'. [ 80.026909][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 80.105383][ T7027] netlink: 'syz.2.1580': attribute type 29 has an invalid length. [ 80.234012][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.245820][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.605517][ T7087] 9pnet_fd: Insufficient options for proto=fd [ 80.872309][ C1] sd 0:0:1:0: [sda] tag#7615 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 80.882742][ C1] sd 0:0:1:0: [sda] tag#7615 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 81.010108][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1617'. [ 81.064781][ C1] sd 0:0:1:0: [sda] tag#7552 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 81.075332][ C1] sd 0:0:1:0: [sda] tag#7552 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 81.154986][ T7149] Invalid ELF header magic: != ELF [ 81.157093][ T7151] tmpfs: Too small a size for current use [ 81.222654][ T7162] 9pnet_fd: Insufficient options for proto=fd [ 81.305614][ C1] sd 0:0:1:0: [sda] tag#7553 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 81.316018][ C1] sd 0:0:1:0: [sda] tag#7553 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 81.440025][ T7200] team_slave_0: entered promiscuous mode [ 81.445758][ T7200] team_slave_1: entered promiscuous mode [ 81.452241][ T7200] macsec1: entered promiscuous mode [ 81.457508][ T7200] team0: entered promiscuous mode [ 81.463056][ T7200] macsec1: entered allmulticast mode [ 81.468436][ T7200] team0: entered allmulticast mode [ 81.473572][ T7200] team_slave_0: entered allmulticast mode [ 81.479369][ T7200] team_slave_1: entered allmulticast mode [ 81.487267][ T7200] team0: Device macsec1 is already an upper device of the team interface [ 81.515767][ T7200] team0: left allmulticast mode [ 81.520762][ T7200] team_slave_0: left allmulticast mode [ 81.526343][ T7200] team_slave_1: left allmulticast mode [ 81.531852][ T7200] team0: left promiscuous mode [ 81.536901][ T7200] team_slave_0: left promiscuous mode [ 81.542363][ T7200] team_slave_1: left promiscuous mode [ 81.595260][ T7208] syzkaller1: entered promiscuous mode [ 81.600848][ T7208] syzkaller1: entered allmulticast mode [ 81.938615][ T7263] __nla_validate_parse: 2 callbacks suppressed [ 81.938634][ T7263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1680'. [ 82.511272][ T7304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7304 comm=syz.1.1696 [ 82.523824][ T7304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7304 comm=syz.1.1696 [ 82.551784][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 82.551802][ T29] audit: type=1400 audit(1754096876.138:1194): avc: denied { node_bind } for pid=7305 comm="syz.1.1697" saddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.588333][ T29] audit: type=1326 audit(1754096876.178:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.613109][ T29] audit: type=1326 audit(1754096876.178:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.636929][ T29] audit: type=1326 audit(1754096876.178:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.660504][ T29] audit: type=1326 audit(1754096876.178:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.684181][ T29] audit: type=1326 audit(1754096876.178:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.707857][ T29] audit: type=1326 audit(1754096876.178:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.731534][ T29] audit: type=1326 audit(1754096876.178:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.755110][ T29] audit: type=1326 audit(1754096876.178:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.778678][ T29] audit: type=1326 audit(1754096876.178:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7307 comm="syz.1.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 82.822570][ T7316] 9pnet_fd: Insufficient options for proto=fd [ 82.914135][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 82.923254][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 82.956300][ T7338] program syz.1.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.139752][ T7366] program syz.3.1727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.278866][ T7387] smc: net device bond0 applied user defined pnetid SYZ0 [ 83.294401][ T7387] smc: net device bond0 erased user defined pnetid SYZ0 [ 83.512428][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1750'. [ 83.513065][ T7421] smc: net device bond0 applied user defined pnetid SYZ0 [ 83.521687][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 83.549698][ T7421] smc: net device bond0 erased user defined pnetid SYZ0 [ 83.721320][ T7453] validate_nla: 1 callbacks suppressed [ 83.721337][ T7453] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 83.734831][ T7453] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1764'. [ 83.977625][ T7495] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1785'. [ 84.005423][ T7500] 9pnet_fd: Insufficient options for proto=fd [ 84.058041][ T7507] capability: warning: `syz.0.1791' uses 32-bit capabilities (legacy support in use) [ 84.170395][ T7517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.208519][ T7517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.267313][ T7517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.327284][ T7517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.391980][ T115] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.406070][ T2648] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.428900][ T115] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.440106][ T115] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.717202][ T7538] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1805'. [ 84.795481][ T7554] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1813'. [ 84.795970][ T7555] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1812'. [ 84.900644][ T7567] openvswitch: netlink: Message has 6 unknown bytes. [ 84.989183][ T7575] can0: slcan on ttyS3. [ 85.044400][ T7575] can0 (unregistered): slcan off ttyS3. [ 85.231809][ T7613] can0: slcan on ttyS3. [ 85.284302][ T7613] can0 (unregistered): slcan off ttyS3. [ 85.310314][ T7623] Invalid ELF header magic: != ELF [ 85.418474][ T7633] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.418474][ T7633] program syz.2.1850 not setting count and/or reply_len properly [ 85.680115][ T7661] atomic_op ffff8881220d1d28 conn xmit_atomic 0000000000000000 [ 85.706216][ T7665] loop3: detected capacity change from 0 to 128 [ 85.748028][ T7665] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.761600][ T7665] ext4 filesystem being mounted at /353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.809699][ T7665] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.1865: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 85.837849][ T7665] EXT4-fs error (device loop3) in do_split:2029: Corrupt filesystem [ 85.887062][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.039915][ T7718] netlink: 'syz.2.1887': attribute type 3 has an invalid length. [ 86.265820][ T7756] atomic_op ffff8881220d0128 conn xmit_atomic 0000000000000000 [ 86.356371][ T7772] random: crng reseeded on system resumption [ 86.392788][ T7782] 9pnet: p9_errstr2errno: server reported unknown error @ [ 86.500262][ T7801] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 86.507130][ T7801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.514601][ T7801] vhci_hcd vhci_hcd.0: Device attached [ 86.520895][ T7802] vhci_hcd: connection closed [ 86.521236][ T115] vhci_hcd: stop threads [ 86.530308][ T115] vhci_hcd: release socket [ 86.534786][ T115] vhci_hcd: disconnect device [ 86.906235][ T7841] 9pnet: p9_errstr2errno: server reported unknown error @ [ 86.981668][ T7852] __nla_validate_parse: 7 callbacks suppressed [ 86.981691][ T7852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1958'. [ 87.055378][ T7860] loop3: detected capacity change from 0 to 512 [ 87.062628][ T7860] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.075051][ T7860] EXT4-fs (loop3): 1 truncate cleaned up [ 87.081424][ T7860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.109393][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.121519][ T7871] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.133681][ T7871] bond0: (slave lo): Error: Device can not be enslaved while up [ 87.147671][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1953'. [ 87.202305][ T7882] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 87.259437][ T7888] netlink: 'syz.4.1966': attribute type 3 has an invalid length. [ 87.269600][ T7890] random: crng reseeded on system resumption [ 87.308024][ T7898] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.320100][ T7898] bond0: (slave lo): Error: Device can not be enslaved while up [ 87.571827][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 87.571925][ T29] audit: type=1326 audit(1754096881.158:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 87.620380][ T29] audit: type=1326 audit(1754096881.158:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 87.676893][ T7926] random: crng reseeded on system resumption [ 87.693457][ T29] audit: type=1326 audit(1754096881.278:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7922 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 87.717141][ T29] audit: type=1326 audit(1754096881.278:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7922 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 87.740976][ T29] audit: type=1326 audit(1754096881.278:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7922 comm="syz.1.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5746eb69 code=0x7ffc0000 [ 87.779046][ T29] audit: type=1400 audit(1754096881.368:1589): avc: denied { write } for pid=7927 comm="syz.4.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.810248][ T29] audit: type=1400 audit(1754096881.398:1590): avc: denied { create } for pid=7934 comm="syz.1.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.841488][ T29] audit: type=1400 audit(1754096881.418:1591): avc: denied { write } for pid=7934 comm="syz.1.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.883280][ T29] audit: type=1400 audit(1754096881.468:1592): avc: denied { setopt } for pid=7940 comm="syz.4.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.928645][ T29] audit: type=1400 audit(1754096881.468:1593): avc: denied { write } for pid=7940 comm="syz.4.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.029917][ T7961] netlink: 'syz.0.2000': attribute type 3 has an invalid length. [ 88.069835][ T3358] kernel read not supported for file /input/event1 (pid: 3358 comm: kworker/1:2) [ 88.184674][ T7978] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2007'. [ 88.518671][ T8026] SELinux: policydb version -144527734 does not match my version range 15-35 [ 88.528806][ T8026] SELinux: failed to load policy [ 88.631835][ T8047] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2031'. [ 88.675692][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 88.684843][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 88.768583][ T8065] binfmt_misc: register: failed to install interpreter file ./file2 [ 88.929774][ T3404] kernel read not supported for file /input/event1 (pid: 3404 comm: kworker/0:5) [ 89.026266][ T8105] netlink: 'syz.0.2059': attribute type 9 has an invalid length. [ 89.129490][ T8117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2063'. [ 89.324534][ T8157] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2077'. [ 89.341163][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 89.350252][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 89.905269][ T8248] binfmt_misc: register: failed to install interpreter file ./file0 [ 90.632987][ T8363] usb usb1: usbfs: process 8363 (syz.2.2167) did not claim interface 0 before use [ 90.835664][ T8390] usb usb1: usbfs: process 8390 (syz.1.2179) did not claim interface 0 before use [ 91.034854][ T8421] tipc: Started in network mode [ 91.039823][ T8421] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 91.051407][ T8421] tipc: New replicast peer: fe80:0000:0000:0000:0000:7f00:0000:0000 [ 91.059680][ T8421] tipc: Enabled bearer , priority 10 [ 91.318277][ T3358] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.340590][ T3358] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.451670][ T8483] vhci_hcd: invalid port number 96 [ 91.456980][ T8483] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 91.532166][ T3358] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 91.551143][ T3358] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.655434][ T8521] netlink: 'syz.4.2233': attribute type 21 has an invalid length. [ 91.663476][ T8521] ================================================================== [ 91.671582][ T8521] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 91.679345][ T8521] [ 91.681677][ T8521] write to 0xffffffff86a1f7c8 of 8 bytes by task 8519 on cpu 0: [ 91.689321][ T8521] console_flush_all+0x35a/0x730 [ 91.694271][ T8521] console_unlock+0xa1/0x330 [ 91.698890][ T8521] vprintk_emit+0x388/0x650 [ 91.703421][ T8521] vprintk_default+0x26/0x30 [ 91.708027][ T8521] vprintk+0x1d/0x30 [ 91.711943][ T8521] _printk+0x79/0xa0 [ 91.715860][ T8521] __netdev_printk+0x321/0x3e0 [ 91.720665][ T8521] netdev_printk+0x96/0xc0 [ 91.725103][ T8521] __ppp_xmit_process+0xb30/0xe40 [ 91.730333][ T8521] ppp_xmit_process+0x7d/0x120 [ 91.735118][ T8521] ppp_write+0x297/0x310 [ 91.739397][ T8521] vfs_write+0x266/0x8e0 [ 91.743650][ T8521] ksys_write+0xda/0x1a0 [ 91.747908][ T8521] __x64_sys_write+0x40/0x50 [ 91.752508][ T8521] x64_sys_call+0x27fe/0x2ff0 [ 91.757197][ T8521] do_syscall_64+0xd2/0x200 [ 91.761803][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.767707][ T8521] [ 91.770035][ T8521] read to 0xffffffff86a1f7c8 of 8 bytes by task 8521 on cpu 1: [ 91.777578][ T8521] console_flush_all+0x563/0x730 [ 91.782528][ T8521] console_unlock+0xa1/0x330 [ 91.787126][ T8521] vprintk_emit+0x388/0x650 [ 91.791646][ T8521] vprintk_default+0x26/0x30 [ 91.796348][ T8521] vprintk+0x1d/0x30 [ 91.800258][ T8521] _printk+0x79/0xa0 [ 91.804172][ T8521] __nla_validate_parse+0x1227/0x1d00 [ 91.809559][ T8521] __nla_validate+0x40/0x60 [ 91.814096][ T8521] rtm_to_fib_config+0x79/0x950 [ 91.818970][ T8521] inet_rtm_newroute+0x75/0x140 [ 91.823839][ T8521] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 91.828796][ T8521] netlink_rcv_skb+0x123/0x220 [ 91.833686][ T8521] rtnetlink_rcv+0x1c/0x30 [ 91.838174][ T8521] netlink_unicast+0x5bd/0x690 [ 91.842957][ T8521] netlink_sendmsg+0x58b/0x6b0 [ 91.847759][ T8521] __sock_sendmsg+0x142/0x180 [ 91.852453][ T8521] ____sys_sendmsg+0x31e/0x4e0 [ 91.857241][ T8521] ___sys_sendmsg+0x17b/0x1d0 [ 91.861941][ T8521] __x64_sys_sendmsg+0xd4/0x160 [ 91.866815][ T8521] x64_sys_call+0x191e/0x2ff0 [ 91.871509][ T8521] do_syscall_64+0xd2/0x200 [ 91.876029][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.881940][ T8521] [ 91.884266][ T8521] value changed: 0x0000000000000b25 -> 0x0000000000000b26 [ 91.891424][ T8521] [ 91.893800][ T8521] Reported by Kernel Concurrency Sanitizer on: [ 91.899969][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz.4.2233 Not tainted 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) [ 91.912046][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.922144][ T8521] ================================================================== [ 91.938479][ T8521] netlink: 'syz.4.2233': attribute type 1 has an invalid length. [ 92.174103][ T1036] tipc: Node number set to 1