last executing test programs: 1m35.901150618s ago: executing program 3 (id=3104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x101502}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 1m35.808762519s ago: executing program 3 (id=3107): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x8c8f, &(0x7f0000000040)="9e54d981aacd76e5141bbe985f72dacb947e89789460a316f1c72f") 1m35.71685408s ago: executing program 3 (id=3110): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x4a23, @broadcast}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002f00"], 0x14}}, 0x10) 1m35.68079094s ago: executing program 3 (id=3113): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@noquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) 1m35.55066667s ago: executing program 3 (id=3117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)={0x34, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x34}}, 0x0) 1m35.167884223s ago: executing program 3 (id=3136): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000200)={0x100080, 0x0, 0x100000, {r0}}, 0x20) 1m35.167849673s ago: executing program 32 (id=3136): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000200)={0x100080, 0x0, 0x100000, {r0}}, 0x20) 32.48754115s ago: executing program 2 (id=7205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0xffffffff}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x8}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffb}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0xd6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 32.43178509s ago: executing program 2 (id=7206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x1d, 0x0) 32.43142088s ago: executing program 2 (id=7209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/5565], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}, {@in=@private, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x8, {0x0, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) 32.373156411s ago: executing program 2 (id=7215): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x0, 0x296, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 32.239606602s ago: executing program 2 (id=7221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100000000000000}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk") 28.600564813s ago: executing program 2 (id=7390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x2, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 28.600502633s ago: executing program 33 (id=7390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x2, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 15.568984719s ago: executing program 0 (id=8027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="08001c00", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 15.568542999s ago: executing program 0 (id=8029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r2, &(0x7f0000000dc0), 0x0}, 0x20) 15.489872309s ago: executing program 0 (id=8032): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) sched_getparam(0x0, &(0x7f00000001c0)) 15.40859218s ago: executing program 0 (id=8037): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100040e, &(0x7f00000000c0)={[{@norecovery}, {@mblk_io_submit}, {@lazytime}, {}, {@block_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x3ed}}]}, 0x3, 0x449, &(0x7f0000000740)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801000, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000001c0)=@filename='./bus\x00', 0x0, &(0x7f0000000340)={0x3, 0x3, 0x1, 0x5}) 15.019472372s ago: executing program 0 (id=8052): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x10122, 0x0) 14.282282006s ago: executing program 0 (id=8072): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x2}, 0x0, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 14.251080247s ago: executing program 34 (id=8072): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x2}, 0x0, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 12.900476075s ago: executing program 6 (id=8120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) 12.860650455s ago: executing program 6 (id=8129): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000010c0)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x8dff, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) 12.607540396s ago: executing program 6 (id=8135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2007, &(0x7f0000000680)) 12.522678057s ago: executing program 6 (id=8138): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000007f80)='./bus\x00', 0x44142, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 12.402532428s ago: executing program 6 (id=8143): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000050900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xc8}}, 0x0) 12.03577242s ago: executing program 6 (id=8158): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4008662c, 0x0) 11.99135058s ago: executing program 35 (id=8158): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4008662c, 0x0) 1.040221444s ago: executing program 5 (id=8656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x0, 0x7ffc0001}]}) nanosleep(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200) 1.027780864s ago: executing program 5 (id=8658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008001540000000000800084000001d"], 0x48}}, 0x0) 995.711214ms ago: executing program 5 (id=8659): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x9}, &(0x7f00000002c0)=0x8) 907.861265ms ago: executing program 5 (id=8666): r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000080)="c105a48c77", 0x5}], 0x1}}], 0x1, 0x0) 528.554527ms ago: executing program 1 (id=8683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000001500000000000000010000c50000000e00210095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='locks_get_lock_context\x00', r0}, 0x10) r1 = io_uring_setup(0x168e, &(0x7f0000000000)) flock(r1, 0x1) 528.181827ms ago: executing program 1 (id=8684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008004000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 513.014237ms ago: executing program 1 (id=8685): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) fadvise64(r0, 0x9, 0xe79a, 0x4) 432.932758ms ago: executing program 1 (id=8687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x10080000f}) fcntl$lock(r0, 0x25, &(0x7f0000000180)) 432.826257ms ago: executing program 4 (id=8688): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) 432.598448ms ago: executing program 4 (id=8689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 428.564878ms ago: executing program 1 (id=8690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) msgget$private(0x0, 0x0) 417.796478ms ago: executing program 4 (id=8691): r0 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x14, 0x0) 402.531658ms ago: executing program 1 (id=8692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x308}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x3}}}}}]}}]}}, 0x0) 401.679348ms ago: executing program 4 (id=8693): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 385.765018ms ago: executing program 4 (id=8694): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 369.558218ms ago: executing program 4 (id=8695): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x2]}, 0x8) read$msr(r0, &(0x7f0000000680)=""/141, 0x8d) 293.918128ms ago: executing program 8 (id=8697): r0 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x2, 0x5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x30003d16, 0x74a5, 0x0, 0x0, 0x0) 279.367429ms ago: executing program 8 (id=8698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'bond_slave_1\x00', 0x200}) 225.618949ms ago: executing program 8 (id=8699): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x20000, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x0) 205.362559ms ago: executing program 8 (id=8700): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x24}, 0x60) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 191.232219ms ago: executing program 8 (id=8701): r0 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe017be00}) 141.910879ms ago: executing program 7 (id=8702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e22, 0x4e21, 0x8}}}}}, 0x0) 141.82411ms ago: executing program 8 (id=8703): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 117.217469ms ago: executing program 7 (id=8704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002003702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 105.728489ms ago: executing program 7 (id=8705): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00', 0x5, 0x0, 0x0, 0x0, 0x0, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00'}) 93.96855ms ago: executing program 7 (id=8706): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 63.74214ms ago: executing program 5 (id=8707): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 63.2434ms ago: executing program 7 (id=8717): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0xfffffffe, 0x101, 0xffff, 0x406, 0x9, 0x1}) 46.94718ms ago: executing program 5 (id=8708): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) mount(0x0, &(0x7f00000003c0)='.\x00', 0x0, 0x2012024, 0x0) 0s ago: executing program 7 (id=8709): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) kernel console output (not intermixed with test programs): r/w without journal. Quota mode: writeback. [ 139.242626][T18642] ext4 filesystem being mounted at /1428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.255338][T18642] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.7007: corrupted xattr block 32: invalid header [ 139.270530][T18642] EXT4-fs (loop1): Remounting filesystem read-only [ 139.277083][T18642] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 139.298868][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.317195][T18648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7010'. [ 139.326193][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7010'. [ 139.460046][T18669] loop5: detected capacity change from 0 to 512 [ 139.490993][T18669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.516723][T18669] ext4 filesystem being mounted at /823/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.543711][T10331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.629330][T18690] loop1: detected capacity change from 0 to 512 [ 139.678083][T18690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 139.686205][T18690] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.696872][T18690] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 139.713511][T18690] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 139.721580][T18690] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.7037: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 139.743595][T18690] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.7037: couldn't read orphan inode 13 (err -117) [ 139.757654][T18690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.773797][T18699] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.800157][T18690] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 139.840056][T18690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 139.852119][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7034'. [ 139.862705][T18690] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 139.890782][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.937141][T18714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7035'. [ 140.105678][T18737] loop5: detected capacity change from 0 to 764 [ 140.134519][T18739] vcan0 speed is unknown, defaulting to 1000 [ 140.160944][T18739] lo speed is unknown, defaulting to 1000 [ 140.338065][T18750] loop5: detected capacity change from 0 to 512 [ 140.349321][T18752] loop0: detected capacity change from 0 to 512 [ 140.360301][T18750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.369582][T18752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.373429][T18750] ext4 filesystem being mounted at /837/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.386197][T18752] ext4 filesystem being mounted at /1490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.415800][T10331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.433033][T18758] netlink: 'syz.5.7055': attribute type 3 has an invalid length. [ 140.441454][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.667413][T18772] SELinux: policydb version -1682183729 does not match my version range 15-33 [ 140.668877][T18774] syz.5.7064[18774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.676568][T18774] syz.5.7064[18774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.680014][T18772] SELinux: failed to load policy [ 140.688308][T18774] syz.5.7064[18774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.829601][T18794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 140.851100][T18803] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 140.887970][T18806] bridge_slave_0: left allmulticast mode [ 140.893855][T18806] bridge_slave_0: left promiscuous mode [ 140.899730][T18806] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.918947][T18806] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.952738][T18813] vcan0 speed is unknown, defaulting to 1000 [ 140.978587][T18813] lo speed is unknown, defaulting to 1000 [ 141.128259][T18833] syz.4.7090[18833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.196514][T18846] loop0: detected capacity change from 0 to 512 [ 141.258526][T18846] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm +}[p³: Failed to acquire dquot type 1 [ 141.270409][T18846] EXT4-fs (loop0): 1 truncate cleaned up [ 141.276807][T18846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.280309][T18858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18858 comm=syz.4.7103 [ 141.298741][T18846] ext4 filesystem being mounted at /1499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.332426][T18862] loop2: detected capacity change from 0 to 512 [ 141.352661][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.374570][T18862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.387713][T18862] ext4 filesystem being mounted at /1418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.400144][T18874] loop0: detected capacity change from 0 to 512 [ 141.406782][T18874] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.414544][T18831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.425591][T18831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.440331][T18874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.470592][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.493409][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.845461][T18916] loop0: detected capacity change from 0 to 512 [ 141.869267][T18916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.895782][T18916] ext4 filesystem being mounted at /1504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.940074][T18924] loop4: detected capacity change from 0 to 1024 [ 141.975667][T18924] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 141.996075][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.018923][T18924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.050447][T18936] loop2: detected capacity change from 0 to 512 [ 142.094468][T18924] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.4.7127: corrupted in-inode xattr: bad magic number in in-inode xattr [ 142.122695][T18943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 142.122853][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.129215][T18943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.129284][T18943] vhci_hcd vhci_hcd.0: Device attached [ 142.133085][T18936] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.7134: invalid indirect mapped block 256 (level 2) [ 142.145723][T18943] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 142.145741][T18943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.151976][T18936] EXT4-fs (loop2): 2 truncates cleaned up [ 142.164537][T18943] vhci_hcd vhci_hcd.0: Device attached [ 142.196748][T18943] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 142.203292][T18943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.208167][T18954] loop4: detected capacity change from 0 to 512 [ 142.210839][T18943] vhci_hcd vhci_hcd.0: Device attached [ 142.227000][T18955] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 142.233710][T18955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.241466][T18959] loop5: detected capacity change from 0 to 1024 [ 142.241780][T18955] vhci_hcd vhci_hcd.0: Device attached [ 142.262335][T18954] ext4 filesystem being mounted at /1433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.275792][T18951] vhci_hcd: connection closed [ 142.275883][T18944] vhci_hcd: connection closed [ 142.281528][ T781] vhci_hcd: stop threads [ 142.281536][ T781] vhci_hcd: release socket [ 142.281548][ T781] vhci_hcd: disconnect device [ 142.281709][T18956] vhci_hcd: connection closed [ 142.281900][T18947] vhci_hcd: connection closed [ 142.286863][ T781] vhci_hcd: stop threads [ 142.286872][ T781] vhci_hcd: release socket [ 142.286883][ T781] vhci_hcd: disconnect device [ 142.296181][ T781] vhci_hcd: stop threads [ 142.296189][ T781] vhci_hcd: release socket [ 142.296199][ T781] vhci_hcd: disconnect device [ 142.310204][ T781] vhci_hcd: stop threads [ 142.310213][ T781] vhci_hcd: release socket [ 142.310247][ T781] vhci_hcd: disconnect device [ 142.326625][ T3390] vhci_hcd: vhci_device speed not set [ 142.393683][T18977] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 142.395829][T18975] loop2: detected capacity change from 0 to 512 [ 142.419601][T18975] ext4 filesystem being mounted at /1432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.542445][T18999] bridge_slave_0: left allmulticast mode [ 142.548205][T18999] bridge_slave_0: left promiscuous mode [ 142.553927][T18999] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.564216][T18999] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 142.654619][T19009] loop5: detected capacity change from 0 to 128 [ 142.736628][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 142.736654][ T29] audit: type=1400 audit(1732151968.554:67445): avc: denied { mount } for pid=19017 comm="syz.2.7165" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 142.806591][ T29] audit: type=1400 audit(1732151968.594:67446): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 142.826824][ T29] audit: type=1400 audit(1732151968.624:67447): avc: denied { read } for pid=19021 comm="syz.1.7167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.878166][T19029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.919241][T19033] __nla_validate_parse: 8 callbacks suppressed [ 142.919257][T19033] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7172'. [ 142.945042][T19037] loop1: detected capacity change from 0 to 128 [ 142.945102][T19035] 9pnet_fd: Insufficient options for proto=fd [ 142.958772][T19029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.013762][T19045] netlink: 'syz.4.7178': attribute type 11 has an invalid length. [ 143.020211][T19047] loop1: detected capacity change from 0 to 2048 [ 143.021679][T19045] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7178'. [ 143.044214][ T29] audit: type=1400 audit(1732151968.864:67448): avc: denied { create } for pid=19048 comm="syz.0.7180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.068309][ T29] audit: type=1400 audit(1732151968.894:67449): avc: denied { setopt } for pid=19048 comm="syz.0.7180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.088330][ T29] audit: type=1400 audit(1732151968.894:67450): avc: denied { getopt } for pid=19048 comm="syz.0.7180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.109915][T19029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.125107][T19047] ext4 filesystem being mounted at /1452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.155123][T19060] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 143.196680][T19066] bpf: Bad value for 'uid' [ 143.203501][ T29] audit: type=1326 audit(1732151969.024:67451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.5.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 143.208586][T19068] loop0: detected capacity change from 0 to 2048 [ 143.227655][ T29] audit: type=1326 audit(1732151969.024:67452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.5.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 143.257503][ T29] audit: type=1326 audit(1732151969.024:67453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.5.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 143.281181][ T29] audit: type=1326 audit(1732151969.024:67454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19071 comm="syz.5.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 143.306625][T19029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.350633][T19086] loop5: detected capacity change from 0 to 256 [ 143.357839][T19080] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.379897][T19029] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.392338][T19029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.413671][T19029] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.428050][T19094] RDS: rds_bind could not find a transport for ::1811:0:300:0, load rds_tcp or rds_rdma? [ 143.435562][T19029] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.452170][T19096] netlink: 'syz.1.7201': attribute type 11 has an invalid length. [ 143.460098][T19096] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7201'. [ 143.482946][T19098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7202'. [ 143.530072][T19110] program syz.5.7208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.595122][T19121] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7213'. [ 143.612815][T19121] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7213'. [ 143.616691][T19124] loop2: detected capacity change from 0 to 128 [ 143.643181][T19127] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.663623][T19128] loop4: detected capacity change from 0 to 512 [ 143.675245][T19128] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7217: invalid indirect mapped block 256 (level 2) [ 143.690308][T19128] EXT4-fs (loop4): 2 truncates cleaned up [ 143.697920][ T3320] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 143.705763][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 143.717542][ T3320] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 143.718636][T19127] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.725127][ T3320] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 143.799726][T19127] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.839910][T19127] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.892583][T19127] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.918346][T19127] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.934575][T19127] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.955435][T19127] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.956345][T19150] loop4: detected capacity change from 0 to 512 [ 144.022938][T19150] ext4 filesystem being mounted at /1456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.068198][T19169] bpf: Bad value for 'uid' [ 144.834333][T19218] loop4: detected capacity change from 0 to 128 [ 144.859710][T19218] bio_check_eod: 13918 callbacks suppressed [ 144.859725][T19218] syz.4.7257: attempt to access beyond end of device [ 144.859725][T19218] loop4: rw=0, sector=121, nr_sectors = 112 limit=128 [ 144.892902][ T40] kworker/u8:2: attempt to access beyond end of device [ 144.892902][ T40] loop4: rw=1, sector=233, nr_sectors = 808 limit=128 [ 144.919945][T19221] SELinux: failed to load policy [ 144.941430][T19224] loop4: detected capacity change from 0 to 128 [ 144.975977][T19228] netlink: 'syz.5.7261': attribute type 11 has an invalid length. [ 144.983935][T19228] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7261'. [ 145.046559][T19236] loop4: detected capacity change from 0 to 1024 [ 145.053679][T19236] EXT4-fs: Ignoring removed bh option [ 145.070612][T19236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c028, mo2=0002] [ 145.084619][T19236] System zones: 0-1, 3-12 [ 145.098251][T19236] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.7266: attempt to clear invalid blocks 1886221359 len 1 [ 145.098390][T19236] EXT4-fs (loop4): Remounting filesystem read-only [ 145.113150][T19248] loop1: detected capacity change from 0 to 1024 [ 145.140091][T19248] bpf_get_probe_write_proto: 2 callbacks suppressed [ 145.140105][T19248] syz.1.7271[19248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.146837][T19248] syz.1.7271[19248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.158413][T19248] syz.1.7271[19248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.185675][T19248] 9pnet: Could not find request transport: f [ 145.213561][T19257] netlink: 'syz.4.7274': attribute type 4 has an invalid length. [ 145.221422][T19257] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7274'. [ 145.300195][T19269] loop4: detected capacity change from 0 to 512 [ 145.341100][T19269] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 145.349288][T19269] System zones: 0-2, 18-18, 34-35 [ 145.354952][T19269] ext4 filesystem being mounted at /1478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.663338][T19343] @: renamed from vlan0 (while UP) [ 145.701323][T19348] loop0: detected capacity change from 0 to 764 [ 145.713035][T19348] Symlink component flag not implemented [ 145.720203][T19348] Symlink component flag not implemented (129) [ 145.728480][T19348] rock: directory entry would overflow storage [ 145.734637][T19348] rock: sig=0x4f50, size=4, remaining=3 [ 145.740251][T19348] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 145.795361][T19365] wireguard0: entered promiscuous mode [ 145.800963][T19365] wireguard0: entered allmulticast mode [ 145.809363][T19370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7327'. [ 145.821662][T19368] netlink: 'syz.1.7326': attribute type 1 has an invalid length. [ 145.829588][T19368] netlink: 'syz.1.7326': attribute type 2 has an invalid length. [ 145.889936][T19384] loop1: detected capacity change from 0 to 512 [ 145.899444][T19384] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7334: Invalid inode bitmap blk 4 in block_group 0 [ 145.963801][T19389] loop1: detected capacity change from 0 to 2048 [ 146.006832][T19389] loop1: p3 < > p4 < > [ 146.011084][T19389] loop1: partition table partially beyond EOD, truncated [ 146.018283][T19389] loop1: p3 start 4284289 is beyond EOD, truncated [ 146.311529][T19400] loop1: detected capacity change from 0 to 128 [ 146.323928][T19404] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 146.419849][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7350'. [ 146.523042][T19434] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.543379][T19442] loop4: detected capacity change from 0 to 128 [ 146.551193][T19444] loop1: detected capacity change from 0 to 128 [ 146.562960][T19442] ext4 filesystem being mounted at /1484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.584136][T19440] loop5: detected capacity change from 0 to 8192 [ 146.612567][T19434] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.657249][T19449] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 146.663784][T19449] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 146.671592][T19449] vhci_hcd vhci_hcd.0: Device attached [ 146.672926][T19434] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.692032][T19452] vhci_hcd: connection closed [ 146.692169][ T781] vhci_hcd: stop threads [ 146.701162][ T781] vhci_hcd: release socket [ 146.705711][ T781] vhci_hcd: disconnect device [ 146.738557][T19434] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.803039][T19470] loop4: detected capacity change from 0 to 2048 [ 146.886120][T19470] loop4: unable to read partition table [ 146.893119][T19470] loop4: partition table beyond EOD, truncated [ 146.899333][T19470] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 146.941871][T19474] syz.1.7375[19474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.941945][T19474] syz.1.7375[19474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.953556][T19474] syz.1.7375[19474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.983580][T19480] syz.4.7377[19480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.995308][T19480] syz.4.7377[19480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.007278][T19480] syz.4.7377[19480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.359631][ T1951] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.402112][T19511] syz.5.7394[19511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.408222][ T1951] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.489604][ T1951] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.523986][T19512] vcan0 speed is unknown, defaulting to 1000 [ 147.544162][ T1951] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.563571][T19512] lo speed is unknown, defaulting to 1000 [ 147.591563][T19541] loop5: detected capacity change from 0 to 512 [ 147.599878][T19541] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7404: Invalid inode bitmap blk 4 in block_group 0 [ 147.641536][T19512] chnl_net:caif_netlink_parms(): no params data found [ 147.650795][ T1951] bridge_slave_1: left promiscuous mode [ 147.656649][ T1951] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.711934][ T1951] dvmrp3 (unregistering): left allmulticast mode [ 147.740189][ T1951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.750537][ T1951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.760847][ T1951] bond0 (unregistering): Released all slaves [ 147.804915][T19512] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.812100][T19512] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.819554][T19512] bridge_slave_0: entered allmulticast mode [ 147.825983][T19512] bridge_slave_0: entered promiscuous mode [ 147.832648][ T1951] tipc: Left network mode [ 147.832981][T19512] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.844217][T19512] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.851416][T19512] bridge_slave_1: entered allmulticast mode [ 147.857913][T19512] bridge_slave_1: entered promiscuous mode [ 147.879461][T19512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.887631][T19563] Process accounting resumed [ 147.900306][T19512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.912399][ T1951] hsr_slave_0: left promiscuous mode [ 147.918538][ T1951] hsr_slave_1: left promiscuous mode [ 147.924408][ T1951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.926512][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 147.926652][ T29] audit: type=1326 audit(1732151973.744:67567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 147.931851][ T1951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.940762][ T29] audit: type=1326 audit(1732151973.764:67568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 147.992977][ T1951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.994589][ T29] audit: type=1326 audit(1732151973.784:67569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 148.000408][ T1951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.026035][ T29] audit: type=1326 audit(1732151973.784:67570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 148.056983][ T29] audit: type=1326 audit(1732151973.794:67571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 148.080692][ T29] audit: type=1326 audit(1732151973.794:67572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 148.104280][ T29] audit: type=1326 audit(1732151973.794:67573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 148.128094][ T29] audit: type=1326 audit(1732151973.794:67574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 148.151880][ T29] audit: type=1326 audit(1732151973.794:67575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.5.7413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 148.152638][T19571] loop1: detected capacity change from 0 to 1024 [ 148.182465][ T1951] veth1_macvtap: left promiscuous mode [ 148.182579][T19571] EXT4-fs: Ignoring removed bh option [ 148.187997][ T1951] veth0_macvtap: left promiscuous mode [ 148.198993][ T1951] veth1_vlan: left promiscuous mode [ 148.204195][ T1951] veth0_vlan: left promiscuous mode [ 148.207575][T19571] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c028, mo2=0002] [ 148.219283][T19571] System zones: 0-1, 3-12 [ 148.238425][T19571] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #14: comm syz.1.7415: attempt to clear invalid blocks 1886221359 len 1 [ 148.252343][T19571] EXT4-fs (loop1): Remounting filesystem read-only [ 148.307812][T19575] sctp: [Deprecated]: syz.1.7416 (pid 19575) Use of int in max_burst socket option. [ 148.307812][T19575] Use struct sctp_assoc_value instead [ 148.353637][ T1951] infiniband s: set down [ 148.422425][T19581] loop4: detected capacity change from 0 to 1024 [ 148.440826][ T1951] team0 (unregistering): Port device team_slave_1 removed [ 148.451549][ T1951] team0 (unregistering): Port device team_slave_0 removed [ 148.481309][T19581] 9pnet: Could not find request transport: f [ 148.489354][ T781] smc: removing ib device s [ 148.614347][ T3391] vcan0 speed is unknown, defaulting to 1000 [ 148.622571][ T3390] lo speed is unknown, defaulting to 1000 [ 148.651411][T19512] team0: Port device team_slave_0 added [ 148.663027][T19512] team0: Port device team_slave_1 added [ 148.677954][T19591] __nla_validate_parse: 4 callbacks suppressed [ 148.678014][T19591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7421'. [ 148.726045][T19512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.733107][T19512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.759146][T19512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.774425][T19512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.781482][T19512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.807529][T19512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.818562][ T29] audit: type=1326 audit(1732151974.644:67576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19596 comm="syz.4.7425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26210e819 code=0x7ffc0000 [ 148.918518][T19512] hsr_slave_0: entered promiscuous mode [ 148.935339][T19512] hsr_slave_1: entered promiscuous mode [ 148.943770][T19603] loop5: detected capacity change from 0 to 1024 [ 148.951579][T19603] EXT4-fs: Ignoring removed bh option [ 148.983056][T19603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c028, mo2=0002] [ 148.995319][T19603] System zones: 0-1, 3-12 [ 149.023933][T19603] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #14: comm syz.5.7426: attempt to clear invalid blocks 1886221359 len 1 [ 149.039441][T19512] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.047482][T19617] loop1: detected capacity change from 0 to 128 [ 149.056295][T19512] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.066235][T19603] EXT4-fs (loop5): Remounting filesystem read-only [ 149.074602][T19512] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.083634][T19512] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.084278][ T1951] IPVS: stop unused estimator thread 0... [ 149.097938][T19617] ext4 filesystem being mounted at /1510/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.122926][T19512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.147748][T19512] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.166309][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7436'. [ 149.219487][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.226573][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.237202][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.244290][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.339839][T19512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.384271][T19651] loop5: detected capacity change from 0 to 256 [ 149.409521][T19657] loop1: detected capacity change from 0 to 128 [ 149.426505][T19656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7446'. [ 149.493094][T19434] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.504232][T19434] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.526985][T19434] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.538506][T19675] loop1: detected capacity change from 0 to 164 [ 149.548324][T19434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.575153][T19512] veth0_vlan: entered promiscuous mode [ 149.587854][T19512] veth1_vlan: entered promiscuous mode [ 149.608258][T19512] veth0_macvtap: entered promiscuous mode [ 149.615856][T19512] veth1_macvtap: entered promiscuous mode [ 149.626310][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.636915][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.646790][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.657266][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.667147][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.677599][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.687456][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.697922][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.709276][T19512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.720131][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.730649][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.740520][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.751015][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.760882][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.771423][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.781261][T19512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.791791][T19512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.803514][T19512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.811852][T19512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.820604][T19512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.829359][T19512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.838178][T19512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.935560][T19709] loop1: detected capacity change from 0 to 1024 [ 149.998259][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7473'. [ 150.008865][T19724] loop6: detected capacity change from 0 to 164 [ 150.047991][T19728] loop0: detected capacity change from 0 to 512 [ 150.071013][T19728] ext4 filesystem being mounted at /1561/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.318134][T19777] IPv6: Can't replace route, no match found [ 150.342279][T19779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7501'. [ 150.392469][T19787] bpf_get_probe_write_proto: 8 callbacks suppressed [ 150.392484][T19787] syz.0.7505[19787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.402639][T19787] syz.0.7505[19787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.426721][T19787] syz.0.7505[19787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.440753][T19794] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7506'. [ 150.577494][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7514'. [ 150.655809][T19825] loop0: detected capacity change from 0 to 164 [ 150.715193][T19837] loop6: detected capacity change from 0 to 512 [ 150.722360][T19837] EXT4-fs: Ignoring removed i_version option [ 150.728516][T19837] EXT4-fs: inline encryption not supported [ 150.728634][T19844] syz.1.7530[19844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.734361][T19844] syz.1.7530[19844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.748605][T19844] syz.1.7530[19844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.768781][T19837] ext4 filesystem being mounted at /19/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.785829][T19851] loop0: detected capacity change from 0 to 512 [ 150.808682][T19851] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.7531: corrupted in-inode xattr: invalid ea_ino [ 150.841333][T19851] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.7531: couldn't read orphan inode 15 (err -117) [ 151.074946][T19896] loop5: detected capacity change from 0 to 128 [ 151.083443][T19899] loop1: detected capacity change from 0 to 256 [ 151.171345][T19909] loop1: detected capacity change from 0 to 512 [ 151.189161][T19909] ext4 filesystem being mounted at /1553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.307743][T19940] program syz.4.7571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.339999][T19944] 9p: Unknown Cache mode or invalid value re [ 151.346443][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7577'. [ 151.401353][T19956] netlink: 'syz.1.7582': attribute type 14 has an invalid length. [ 151.469987][T19967] loop1: detected capacity change from 0 to 764 [ 151.480406][T19967] rock: directory entry would overflow storage [ 151.486759][T19967] rock: sig=0x4654, size=5, remaining=4 [ 151.539847][T19980] loop5: detected capacity change from 0 to 512 [ 151.559639][T19980] ext4 filesystem being mounted at /980/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.586986][T19985] loop1: detected capacity change from 0 to 256 [ 151.863962][T19990] loop5: detected capacity change from 0 to 8192 [ 151.917320][T20004] bridge_slave_0: entered promiscuous mode [ 152.040234][T20026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7614'. [ 152.049315][T20026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7614'. [ 152.233424][T20050] loop4: detected capacity change from 0 to 1024 [ 152.258706][T20050] EXT4-fs: Ignoring removed orlov option [ 152.265017][T20050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.301121][T20047] loop5: detected capacity change from 0 to 8192 [ 152.366155][T20047] loop5: p4 < > [ 152.532540][T20093] loop6: detected capacity change from 0 to 764 [ 152.541351][T20093] rock: directory entry would overflow storage [ 152.547593][T20093] rock: sig=0x4654, size=5, remaining=4 [ 152.588207][T20103] dvmrp0: entered allmulticast mode [ 152.594506][T20102] dvmrp0: left allmulticast mode [ 152.617686][T20107] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 152.694993][T20119] program syz.6.7656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.877603][T20146] loop1: detected capacity change from 0 to 1024 [ 152.963674][T20156] loop0: detected capacity change from 0 to 2048 [ 152.991393][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 152.991411][ T29] audit: type=1400 audit(1732151978.804:67910): avc: denied { read } for pid=20155 comm="syz.0.7671" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 153.301114][T20163] loop0: detected capacity change from 0 to 512 [ 153.310955][T20169] 9p: Unknown Cache mode or invalid value re [ 153.323557][T20171] loop5: detected capacity change from 0 to 256 [ 153.328121][T20163] EXT4-fs (loop0): too many log groups per flexible block group [ 153.337710][T20163] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 153.344718][T20163] EXT4-fs (loop0): mount failed [ 153.385707][ T29] audit: type=1400 audit(1732151979.204:67911): avc: denied { ioctl } for pid=20178 comm="syz.4.7679" path="socket:[59783]" dev="sockfs" ino=59783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.455950][ T29] audit: type=1400 audit(1732151979.264:67912): avc: denied { read } for pid=20185 comm="syz.4.7682" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.479234][ T29] audit: type=1400 audit(1732151979.264:67913): avc: denied { open } for pid=20185 comm="syz.4.7682" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.502951][ T29] audit: type=1400 audit(1732151979.264:67914): avc: denied { ioctl } for pid=20185 comm="syz.4.7682" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.529238][ T29] audit: type=1400 audit(1732151979.354:67915): avc: denied { create } for pid=20187 comm="syz.4.7683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.580310][T20198] 9p: Unknown Cache mode or invalid value re [ 153.589074][ T29] audit: type=1400 audit(1732151979.354:67916): avc: denied { connect } for pid=20187 comm="syz.4.7683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.609310][ T29] audit: type=1400 audit(1732151979.414:67917): avc: denied { create } for pid=20199 comm="syz.4.7691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.643626][ T29] audit: type=1400 audit(1732151979.414:67918): avc: denied { connect } for pid=20201 comm="syz.1.7689" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.664408][ T29] audit: type=1400 audit(1732151979.434:67919): avc: denied { bind } for pid=20199 comm="syz.4.7691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.698626][T20214] loop0: detected capacity change from 0 to 512 [ 153.705267][T20214] EXT4-fs: Ignoring removed i_version option [ 153.711473][T20214] EXT4-fs: inline encryption not supported [ 153.771488][T20214] ext4 filesystem being mounted at /1598/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.798420][T20232] __nla_validate_parse: 3 callbacks suppressed [ 153.798435][T20232] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7704'. [ 153.817826][T20232] 0ªX¹¦À: renamed from caif0 [ 153.838688][T20232] 0ªX¹¦À: entered allmulticast mode [ 153.843941][T20232] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 153.955696][T20256] tap0: tun_chr_ioctl cmd 1074025677 [ 153.961756][T20256] tap0: linktype set to 769 [ 153.991235][T20258] loop0: detected capacity change from 0 to 4096 [ 154.047765][T20267] loop4: detected capacity change from 0 to 1024 [ 154.054529][T20267] EXT4-fs: Ignoring removed i_version option [ 154.060586][T20267] EXT4-fs: Ignoring removed bh option [ 154.090581][T20273] can0: slcan on ttyS3. [ 154.113571][T20277] loop4: detected capacity change from 0 to 512 [ 154.120164][T20277] EXT4-fs: Ignoring removed i_version option [ 154.126181][T20277] EXT4-fs: inline encryption not supported [ 154.137942][T20277] ext4 filesystem being mounted at /1547/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.148497][T20273] can0 (unregistered): slcan off ttyS3. [ 154.162896][T20275] can0: slcan on ttyS3. [ 154.216902][T20272] can0 (unregistered): slcan off ttyS3. [ 154.237210][T20289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20289 comm=syz.0.7727 [ 154.344601][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.353800][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.364387][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.389889][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.398989][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.408402][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.413071][T20320] loop5: detected capacity change from 0 to 2048 [ 154.445493][T20320] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.460756][T20320] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 154.473113][T20320] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.473113][T20320] [ 154.482793][T20320] EXT4-fs (loop5): Total free blocks count 0 [ 154.489068][T20320] EXT4-fs (loop5): Free/Dirty block details [ 154.494980][T20320] EXT4-fs (loop5): free_blocks=2415919104 [ 154.500763][T20320] EXT4-fs (loop5): dirty_blocks=32 [ 154.505874][T20320] EXT4-fs (loop5): Block reservation details [ 154.511881][T20320] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 154.516057][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.520280][T20332] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 154.528829][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.541324][T20332] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.541324][T20332] [ 154.550388][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7738'. [ 154.652812][T20348] loop0: detected capacity change from 0 to 128 [ 154.753330][T20362] loop5: detected capacity change from 0 to 512 [ 154.760017][T20362] EXT4-fs: Ignoring removed i_version option [ 154.766101][T20362] EXT4-fs: inline encryption not supported [ 154.799012][T20362] ext4 filesystem being mounted at /1016/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.818806][T20376] syz.0.7764[20376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.818949][T20376] syz.0.7764[20376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.832128][T20376] syz.0.7764[20376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.848377][T20378] loop4: detected capacity change from 0 to 512 [ 154.870856][T20376] SELinux: Context  is not valid (left unmapped). [ 154.915829][T20378] ext4 filesystem being mounted at /1558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.103448][T20411] batadv0: entered promiscuous mode [ 155.111967][T20411] macsec1: entered promiscuous mode [ 155.117341][T20411] macsec1: entered allmulticast mode [ 155.122729][T20411] batadv0: entered allmulticast mode [ 155.842356][T20419] loop6: detected capacity change from 0 to 1024 [ 155.855178][T20419] EXT4-fs: Ignoring removed i_version option [ 155.861273][T20419] EXT4-fs: Ignoring removed bh option [ 155.861401][T20422] loop1: detected capacity change from 0 to 512 [ 155.885675][T20425] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 155.913257][T20419] EXT4-fs mount: 68 callbacks suppressed [ 155.913275][T20419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.916544][T20422] EXT4-fs: Ignoring removed i_version option [ 155.937135][T20422] EXT4-fs: inline encryption not supported [ 155.999359][T19512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.023353][T20439] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 156.051037][T20422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.083945][T20422] ext4 filesystem being mounted at /1606/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.135043][T20450] loop4: detected capacity change from 0 to 256 [ 156.243547][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 156.259935][T20461] loop5: detected capacity change from 0 to 128 [ 156.298017][T20469] loop0: detected capacity change from 0 to 512 [ 156.318743][T20475] netlink: 'syz.4.7808': attribute type 10 has an invalid length. [ 156.335989][T20469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.359585][T20475] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.366825][T20475] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.375541][T20469] ext4 filesystem being mounted at /1628/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.523338][T20497] loop6: detected capacity change from 0 to 512 [ 156.551280][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.568502][T20497] EXT4-fs (loop6): too many log groups per flexible block group [ 156.577080][T20497] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 156.589237][T20497] EXT4-fs (loop6): mount failed [ 156.657479][T20523] loop4: detected capacity change from 0 to 512 [ 156.668292][T20523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.686947][T20523] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.694917][T20523] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7828: bg 0: block 248: padding at end of block bitmap is not set [ 156.721356][T20523] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.7828: Failed to acquire dquot type 1 [ 156.752524][T20523] EXT4-fs (loop4): 1 truncate cleaned up [ 156.771428][T20523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.796064][T20533] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.804935][T20533] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.813775][T20533] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.822618][T20533] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.833336][T20533] vxlan0: entered promiscuous mode [ 156.838514][T20533] vxlan0: entered allmulticast mode [ 156.846428][T20533] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.855453][T20533] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.864393][T20533] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.873416][T20533] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.885002][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.899132][T20539] loop5: detected capacity change from 0 to 512 [ 156.929198][T20539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.942132][T20539] ext4 filesystem being mounted at /1033/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.974399][T20547] loop4: detected capacity change from 0 to 512 [ 156.988471][T20547] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 156.996490][T20547] System zones: 0-2, 18-18, 34-34 [ 157.004946][T20547] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7837: bg 0: block 248: padding at end of block bitmap is not set [ 157.019504][T20547] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.7837: Failed to acquire dquot type 1 [ 157.035454][T20547] EXT4-fs (loop4): 1 truncate cleaned up [ 157.041944][T10331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.045400][T20547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.063497][T20547] ext4 filesystem being mounted at /1578/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.094663][T20558] netlink: 'syz.5.7839': attribute type 9 has an invalid length. [ 157.113729][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.145356][T20564] loop4: detected capacity change from 0 to 512 [ 157.172953][T20564] EXT4-fs (loop4): too many log groups per flexible block group [ 157.177088][T20576] SELinux: failed to load policy [ 157.180726][T20564] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 157.193937][T20564] EXT4-fs (loop4): mount failed [ 157.210540][T20564] tmpfs: Bad value for 'mpol' [ 157.282395][T20588] loop6: detected capacity change from 0 to 2048 [ 157.308111][T20596] loop5: detected capacity change from 0 to 2048 [ 157.324206][T20598] loop1: detected capacity change from 0 to 1024 [ 157.331996][T20596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.344348][T20598] EXT4-fs: Ignoring removed i_version option [ 157.348665][T20596] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.357957][T20598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.366787][T20596] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 157.389654][T20596] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.389654][T20596] [ 157.399515][T20596] EXT4-fs (loop5): Total free blocks count 0 [ 157.405572][T20596] EXT4-fs (loop5): Free/Dirty block details [ 157.410319][T20588] loop6: unable to read partition table [ 157.411518][T20596] EXT4-fs (loop5): free_blocks=2415919104 [ 157.417242][T20588] loop6: partition table beyond EOD, [ 157.423083][T20596] EXT4-fs (loop5): dirty_blocks=16 [ 157.423099][T20596] EXT4-fs (loop5): Block reservation details [ 157.423108][T20596] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 157.428878][T20598] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #12: block 7: comm syz.1.7859: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 157.433710][T20588] truncated [ 157.446806][T20598] EXT4-fs error (device loop1) in ext4_delete_inline_entry:1777: Corrupt filesystem [ 157.466003][T20588] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 157.501837][T20608] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 157.563524][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.565966][T20613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=20613 comm=syz.4.7862 [ 157.640540][T20609] netlink: 'syz.4.7862': attribute type 29 has an invalid length. [ 157.704310][T20632] SELinux: failed to load policy [ 157.787671][T20646] loop6: detected capacity change from 0 to 2048 [ 157.808176][T20646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.833457][T19512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.880549][T20657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.920499][T20667] loop6: detected capacity change from 0 to 512 [ 157.943449][T20674] loop4: detected capacity change from 0 to 128 [ 157.949548][T20667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.962591][T20667] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.007796][T19512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.071860][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 158.071874][ T29] audit: type=1400 audit(1732151983.894:68053): avc: denied { read write } for pid=20684 comm="syz.5.7893" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 158.101884][ T29] audit: type=1400 audit(1732151983.894:68054): avc: denied { getopt } for pid=20685 comm="syz.4.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.122174][ T29] audit: type=1400 audit(1732151983.904:68055): avc: denied { open } for pid=20684 comm="syz.5.7893" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 158.131672][T20689] loop4: detected capacity change from 0 to 1024 [ 158.182950][ T29] audit: type=1400 audit(1732151984.004:68056): avc: denied { getopt } for pid=20692 comm="syz.6.7897" laddr=fe80::aa faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.211644][ T29] audit: type=1400 audit(1732151984.034:68057): avc: denied { validate_trans } for pid=20695 comm="syz.5.7898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.226550][T20701] loop5: detected capacity change from 0 to 512 [ 158.234182][T20699] loop6: detected capacity change from 0 to 256 [ 158.238934][T20701] EXT4-fs: Ignoring removed i_version option [ 158.251535][T20689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.274926][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.300279][T20701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.312956][T20701] ext4 filesystem being mounted at /1048/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.369715][T10331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 158.408313][T20715] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.411372][T20718] loop6: detected capacity change from 0 to 512 [ 158.422815][T20718] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.448329][T20718] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #17: comm syz.6.7907: iget: bad i_size value: -6917529027641081756 [ 158.462908][T20718] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.7907: couldn't read orphan inode 17 (err -117) [ 158.466733][T20725] loop5: detected capacity change from 0 to 512 [ 158.475428][T20718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.505346][T19512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.518656][T20725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.531656][T20725] ext4 filesystem being mounted at /1050/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.552939][ T29] audit: type=1400 audit(1732151984.374:68058): avc: denied { bind } for pid=20734 comm="syz.6.7912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.580098][T10331] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.607162][T20740] loop6: detected capacity change from 0 to 2048 [ 158.653753][T20740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.673303][ T29] audit: type=1400 audit(1732151984.494:68059): avc: denied { read } for pid=20755 comm="syz.4.7922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.696339][T19512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.711885][ T29] audit: type=1400 audit(1732151984.534:68060): avc: denied { read write } for pid=20751 comm="syz.1.7919" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.735651][ T29] audit: type=1400 audit(1732151984.534:68061): avc: denied { open } for pid=20751 comm="syz.1.7919" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.773160][ T29] audit: type=1400 audit(1732151984.584:68062): avc: denied { mounton } for pid=20759 comm="syz.6.7924" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 158.811420][T20763] loop0: detected capacity change from 0 to 512 [ 158.827716][T20772] __nla_validate_parse: 24 callbacks suppressed [ 158.827729][T20772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7929'. [ 158.861107][T20763] EXT4-fs (loop0): too many log groups per flexible block group [ 158.868887][T20763] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 158.880936][T20763] EXT4-fs (loop0): mount failed [ 158.942129][T20763] tmpfs: Bad value for 'mpol' [ 159.031339][T20799] syz.1.7941[20799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.031410][T20799] syz.1.7941[20799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.043223][T20799] syz.1.7941[20799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.102841][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7946'. [ 159.104912][T20814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7947'. [ 159.165596][T20812] tipc: Disabling bearer [ 159.227993][T20826] loop0: detected capacity change from 0 to 2048 [ 159.254674][T20834] syz.6.7956[20834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.254791][T20834] syz.6.7956[20834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.268636][T20834] syz.6.7956[20834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.274609][T20836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7957'. [ 159.306293][T20826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.332503][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.367306][T20842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7959'. [ 159.376296][T20842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7959'. [ 159.479046][T20862] loop6: detected capacity change from 0 to 512 [ 159.485596][T20862] EXT4-fs: Ignoring removed i_version option [ 159.523211][T20862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 159.541129][T20862] ext4 filesystem being mounted at /107/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.598892][T19512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 159.612556][T20878] loop5: detected capacity change from 0 to 164 [ 159.620297][T20878] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 159.630785][T20878] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 159.652349][T20888] loop4: detected capacity change from 0 to 1024 [ 159.660575][T20888] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.683071][T20888] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7982: Invalid block bitmap block 0 in block_group 0 [ 159.698360][T20888] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.7982: Failed to acquire dquot type 0 [ 159.711847][T20888] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.7982: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.733282][T20888] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7982: Invalid inode bitmap blk 0 in block_group 0 [ 159.756768][ T1951] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 0 [ 159.766453][T20888] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 159.783272][T20888] EXT4-fs (loop4): 1 orphan inode deleted [ 159.797161][T20888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.823435][T20909] loop1: detected capacity change from 0 to 2048 [ 159.875122][T20888] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 159.886687][T20888] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 159.899526][T20909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.916029][T20909] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 159.931356][T20909] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 159.943571][T20909] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.943571][T20909] [ 159.953309][T20909] EXT4-fs (loop1): Total free blocks count 0 [ 159.959317][T20909] EXT4-fs (loop1): Free/Dirty block details [ 159.965273][T20909] EXT4-fs (loop1): free_blocks=2415919104 [ 159.971021][T20909] EXT4-fs (loop1): dirty_blocks=16 [ 159.976150][T20909] EXT4-fs (loop1): Block reservation details [ 159.982177][T20909] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 160.004726][T20926] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 160.024811][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.043085][T20928] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7999'. [ 160.107135][T20936] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8005'. [ 160.131739][T20944] program syz.6.8006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.258205][T20961] loop4: detected capacity change from 0 to 2048 [ 160.272184][T20967] tap0: tun_chr_ioctl cmd 2147767521 [ 160.292492][T20964] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8016'. [ 160.342791][T20981] program syz.1.8023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.357718][T20979] loop4: detected capacity change from 0 to 512 [ 160.397584][T20979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.426416][T20979] ext4 filesystem being mounted at /1628/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.449721][T20997] program syz.1.8030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.538258][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.592150][T21010] loop0: detected capacity change from 0 to 512 [ 160.615692][T21004] loop1: detected capacity change from 0 to 4096 [ 160.632655][T21010] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.658035][T21010] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.670086][T21004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.687324][T21019] tmpfs: Unknown parameter 'ino' [ 160.698477][T21010] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.8037: corrupted in-inode xattr: e_value out of bounds [ 160.725049][T21024] syz.4.8042[21024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.725178][T21024] syz.4.8042[21024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.743766][T21022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8043'. [ 160.788399][T21010] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.8037: couldn't read orphan inode 15 (err -117) [ 160.809096][T21024] syz.4.8042[21024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.810971][T21024] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 160.836332][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.838001][T21010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.961642][ T3324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /1664/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 160.971902][T21042] loop1: detected capacity change from 0 to 2048 [ 161.006342][ T3324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.035868][ T3324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /1664/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 161.064121][T21048] syz.4.8055[21048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.076443][ T3324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.110198][T21042] loop1: p1 < > p4 [ 161.114647][ T3324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /1664/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 161.126637][T21042] loop1: p4 size 393216 extends beyond EOD, truncated [ 161.177951][ T3324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.250530][ T3324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /1664/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 161.283129][ T3324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.339211][ T3324] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /1664/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 161.381216][T21061] loop1: detected capacity change from 0 to 2048 [ 161.388078][ T3324] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 161.428787][T21061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.504881][T21061] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.8060: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 161.533722][ T6222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.550939][T21061] EXT4-fs (loop1): Remounting filesystem read-only [ 161.579461][ T6222] bridge0: port 3(syz_tun) entered disabled state [ 161.605684][ T6222] syz_tun (unregistering): left allmulticast mode [ 161.606433][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.612205][ T6222] syz_tun (unregistering): left promiscuous mode [ 161.612255][ T6222] bridge0: port 3(syz_tun) entered disabled state [ 161.633458][T21083] loop1: detected capacity change from 0 to 512 [ 161.647372][T21083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.675770][T21083] EXT4-fs (loop1): 1 truncate cleaned up [ 161.683530][T21083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.703207][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.736182][T21086] ALSA: seq fatal error: cannot create timer (-19) [ 161.744237][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.756313][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.809792][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.858633][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.933694][T21121] ALSA: seq fatal error: cannot create timer (-19) [ 161.971865][ T11] dummy0: left allmulticast mode [ 161.976903][ T11] dummy0: left promiscuous mode [ 161.982004][ T11] bridge0: port 4(dummy0) entered disabled state [ 161.995750][ T11] bridge_slave_1: left allmulticast mode [ 162.001575][ T11] bridge_slave_1: left promiscuous mode [ 162.007891][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.019438][ T11] bridge_slave_0: left allmulticast mode [ 162.025136][ T11] bridge_slave_0: left promiscuous mode [ 162.030998][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.100705][ T11] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 162.139725][T21144] loop1: detected capacity change from 0 to 128 [ 162.147735][T21144] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.160210][T21144] ext4 filesystem being mounted at /1657/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.182741][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.207530][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.225433][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.239005][ T11] bond0 (unregistering): Released all slaves [ 162.253792][ T11] bond1 (unregistering): Released all slaves [ 162.296781][T21095] chnl_net:caif_netlink_parms(): no params data found [ 162.317322][T21163] loop5: detected capacity change from 0 to 2048 [ 162.328466][ T11] tipc: Disabling bearer [ 162.333677][ T11] tipc: Left network mode [ 162.348720][ T11] IPVS: stopping backup sync thread 4554 ... [ 162.360252][ T11] hsr_slave_0: left promiscuous mode [ 162.365662][T21163] Alternate GPT is invalid, using primary GPT. [ 162.372009][ T11] hsr_slave_1: left promiscuous mode [ 162.372090][T21163] loop5: p2 p3 p7 [ 162.381190][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.388765][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.398364][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.405764][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.414939][ T11] veth1_vlan: left promiscuous mode [ 162.420276][ T11] veth0_vlan: left promiscuous mode [ 162.530525][ T11] team0 (unregistering): Port device team_slave_1 removed [ 162.540740][ T11] team0 (unregistering): Port device team_slave_0 removed [ 162.625111][T21095] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.632226][T21095] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.652597][T21095] bridge_slave_0: entered allmulticast mode [ 162.667569][T21095] bridge_slave_0: entered promiscuous mode [ 162.676401][T21095] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.683573][T21095] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.693438][T21095] bridge_slave_1: entered allmulticast mode [ 162.699891][T21095] bridge_slave_1: entered promiscuous mode [ 162.717906][T21095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.728247][T21095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.749843][T21095] team0: Port device team_slave_0 added [ 162.756280][T21095] team0: Port device team_slave_1 added [ 162.772662][T21095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.779742][T21095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.805741][T21095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.817647][T21199] loop1: detected capacity change from 0 to 128 [ 162.905107][T21095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.912195][T21095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.936550][ C1] hrtimer: interrupt took 27558 ns [ 162.938493][T21095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.027853][T21095] hsr_slave_0: entered promiscuous mode [ 163.037157][T21095] hsr_slave_1: entered promiscuous mode [ 163.046821][T21095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.054450][T21095] Cannot create hsr debugfs directory [ 163.080143][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 163.080157][ T29] audit: type=1400 audit(1732151988.894:68238): avc: denied { setopt } for pid=21220 comm="syz.5.8125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.126564][ T29] audit: type=1400 audit(1732151988.944:68239): avc: denied { read } for pid=21224 comm="syz.5.8128" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.149899][ T29] audit: type=1400 audit(1732151988.944:68240): avc: denied { open } for pid=21224 comm="syz.5.8128" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.173711][ T29] audit: type=1400 audit(1732151988.944:68241): avc: denied { ioctl } for pid=21224 comm="syz.5.8128" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.205510][ T11] IPVS: stop unused estimator thread 0... [ 163.240432][ T29] audit: type=1326 audit(1732151989.064:68242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21228 comm="syz.5.8131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 163.264311][ T29] audit: type=1326 audit(1732151989.084:68243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21228 comm="syz.5.8131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 163.292665][ T29] audit: type=1326 audit(1732151989.114:68244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21228 comm="syz.5.8131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 163.316301][ T29] audit: type=1326 audit(1732151989.114:68245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21228 comm="syz.5.8131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 163.340058][ T29] audit: type=1326 audit(1732151989.114:68246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21228 comm="syz.5.8131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495352e819 code=0x7ffc0000 [ 163.378099][T21095] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.398735][T21095] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.407955][ T29] audit: type=1400 audit(1732151989.234:68247): avc: denied { validate_trans } for pid=21238 comm="syz.1.8133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.434000][T21095] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.464837][T21245] program syz.1.8139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.465640][T21095] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.485281][T21247] loop6: detected capacity change from 0 to 512 [ 163.498925][T21247] EXT4-fs: Ignoring removed bh option [ 163.509071][T21247] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 163.524734][T21247] EXT4-fs (loop6): invalid journal inode [ 163.531130][T21247] EXT4-fs (loop6): can't get journal size [ 163.545408][T21247] EXT4-fs (loop6): 1 truncate cleaned up [ 163.551857][T21247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.578036][T19512] EXT4-fs error (device loop6): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 163.593977][T21095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.619358][T19512] EXT4-fs error (device loop6): __ext4_iget:4984: inode #11: block 1828716567: comm syz-executor: invalid block [ 163.632534][T21095] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.653371][ T1951] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.660505][ T1951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.720071][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.727219][ T1951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.813316][T21095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.887992][T19512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.888662][ T28] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.969766][ T28] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.032343][ T28] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.044628][T21308] __nla_validate_parse: 7 callbacks suppressed [ 164.044641][T21308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8161'. [ 164.077426][T21095] veth0_vlan: entered promiscuous mode [ 164.090259][T21095] veth1_vlan: entered promiscuous mode [ 164.106041][ T28] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.129990][T21095] veth0_macvtap: entered promiscuous mode [ 164.140270][T21095] veth1_macvtap: entered promiscuous mode [ 164.161119][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.171621][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.181506][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.192001][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.202114][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.212647][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.222588][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.233036][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.245835][T21095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.270380][T21322] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 164.283815][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.294278][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.304193][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.314639][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.324475][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.334999][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.344858][T21095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.355274][T21095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.368818][T21095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.393100][T21095] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.401875][T21095] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.410641][T21095] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.419401][T21095] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.435596][ T28] bridge_slave_1: left allmulticast mode [ 164.441352][ T28] bridge_slave_1: left promiscuous mode [ 164.447149][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.475238][ T28] bridge_slave_0: left allmulticast mode [ 164.480976][ T28] bridge_slave_0: left promiscuous mode [ 164.486690][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.588787][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.598952][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.608682][ T28] bond0 (unregistering): Released all slaves [ 164.664350][ T28] hsr_slave_0: left promiscuous mode [ 164.684709][ T28] hsr_slave_1: left promiscuous mode [ 164.691699][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.699224][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.707513][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.715052][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.724387][ T28] batadv0: left allmulticast mode [ 164.729534][ T28] batadv0: left promiscuous mode [ 164.734523][ T28] veth1_macvtap: left promiscuous mode [ 164.740024][ T28] veth0_macvtap: left promiscuous mode [ 164.803042][ T28] team0 (unregistering): Port device team_slave_1 removed [ 164.813234][ T28] team0 (unregistering): Port device team_slave_0 removed [ 164.855544][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8171'. [ 164.920292][T21309] chnl_net:caif_netlink_parms(): no params data found [ 164.934792][T21371] netlink: 1064 bytes leftover after parsing attributes in process `syz.5.8185'. [ 164.944340][T21371] netlink: 1064 bytes leftover after parsing attributes in process `syz.5.8185'. [ 164.961428][T21371] netlink: 1064 bytes leftover after parsing attributes in process `syz.5.8185'. [ 164.970671][T21371] netlink: 1064 bytes leftover after parsing attributes in process `syz.5.8185'. [ 164.985535][T21309] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.992715][T21309] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.994956][T21371] netlink: 1064 bytes leftover after parsing attributes in process `syz.5.8185'. [ 165.001274][T21309] bridge_slave_0: entered allmulticast mode [ 165.009283][T21371] netlink: 1064 bytes leftover after parsing attributes in process `syz.5.8185'. [ 165.024712][T21309] bridge_slave_0: entered promiscuous mode [ 165.034785][T21309] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.041912][T21309] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.049282][T21309] bridge_slave_1: entered allmulticast mode [ 165.055628][T21309] bridge_slave_1: entered promiscuous mode [ 165.071597][T21309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.083019][T21309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.103268][T21309] team0: Port device team_slave_0 added [ 165.109959][T21309] team0: Port device team_slave_1 added [ 165.125469][T21309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.132443][T21309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.158468][T21309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.170445][T21309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.177469][T21309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.203506][T21309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.242640][T21385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8189'. [ 165.251715][T21385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8189'. [ 165.288689][T21309] hsr_slave_0: entered promiscuous mode [ 165.295000][T21309] hsr_slave_1: entered promiscuous mode [ 165.399742][T21400] hugetlbfs: syz.4.8196 (21400): Using mlock ulimits for SHM_HUGETLB is obsolete [ 165.445008][T21309] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 165.456073][T21309] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 165.464947][T21309] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 165.480614][T21309] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 165.544223][T21309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.564729][T21309] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.583692][ T1951] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.590843][ T1951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.614624][T21309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.625041][T21309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.640642][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.647792][ T1951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.726857][T21309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.745043][T21428] bpf_get_probe_write_proto: 2 callbacks suppressed [ 165.745073][T21428] syz.4.8207[21428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.753335][T21428] syz.4.8207[21428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.765171][T21428] syz.4.8207[21428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.883250][T21309] veth0_vlan: entered promiscuous mode [ 165.905094][T21309] veth1_vlan: entered promiscuous mode [ 165.915394][T21447] hub 6-0:1.0: USB hub found [ 165.923016][T21447] hub 6-0:1.0: 8 ports detected [ 165.928174][T21309] veth0_macvtap: entered promiscuous mode [ 165.938250][T21309] veth1_macvtap: entered promiscuous mode [ 165.950244][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.960814][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.970718][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.981193][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.991017][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.001857][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.011676][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.022093][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.032884][T21309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.064318][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.074973][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.084992][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.095475][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.105431][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.115944][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.125918][T21309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.136402][T21309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.147159][T21309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.158178][T21309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.166926][T21309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.175715][T21309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.184507][T21309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.188121][T21462] xt_hashlimit: max too large, truncated to 1048576 [ 166.230920][T21466] syz.1.8220[21466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.230973][T21466] syz.1.8220[21466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.244384][T21466] syz.1.8220[21466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.335766][T21481] loop1: detected capacity change from 0 to 512 [ 166.355200][T21481] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 166.364607][T21481] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 166.387972][T21485] lo: entered allmulticast mode [ 166.395697][T21485] lo: left allmulticast mode [ 166.413743][T21491] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 166.420311][T21491] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 166.428031][T21491] vhci_hcd vhci_hcd.0: Device attached [ 166.440638][T21492] vhci_hcd: connection closed [ 166.445904][ T40] vhci_hcd: stop threads [ 166.455034][ T40] vhci_hcd: release socket [ 166.459569][ T40] vhci_hcd: disconnect device [ 166.513706][T21509] loop1: detected capacity change from 0 to 1024 [ 166.520493][T21509] EXT4-fs: Ignoring removed orlov option [ 166.526158][T21509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.553852][T21509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.648496][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.890978][T21562] loop7: detected capacity change from 0 to 512 [ 166.929388][T21562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.950235][T21562] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.973019][T21568] loop8: detected capacity change from 0 to 128 [ 167.034637][T21095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.078953][T21568] syz.8.8266: attempt to access beyond end of device [ 167.078953][T21568] loop8: rw=1, sector=145, nr_sectors = 41 limit=128 [ 167.238986][T21580] loop7: detected capacity change from 0 to 2048 [ 167.337755][T21580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.386631][T21580] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 167.420851][T21095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.523814][T21603] loop4: detected capacity change from 0 to 512 [ 167.553264][T21603] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8282: corrupted in-inode xattr: invalid ea_ino [ 167.581869][T21603] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.8282: couldn't read orphan inode 15 (err -117) [ 167.594613][T21603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.620237][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.672876][T21620] loop5: detected capacity change from 0 to 764 [ 167.679345][T21620] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 167.834927][T21644] loop4: detected capacity change from 0 to 1024 [ 167.841776][T21644] EXT4-fs: Ignoring removed orlov option [ 167.847495][T21644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.857929][T21644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.894590][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.951168][T21654] netlink: 'syz.4.8302': attribute type 6 has an invalid length. [ 168.042403][T21669] loop4: detected capacity change from 0 to 256 [ 168.054526][T21669] FAT-fs (loop4): Directory bread(block 64) failed [ 168.061680][T21669] FAT-fs (loop4): Directory bread(block 65) failed [ 168.068429][T21669] FAT-fs (loop4): Directory bread(block 66) failed [ 168.074961][T21669] FAT-fs (loop4): Directory bread(block 67) failed [ 168.081780][T21669] FAT-fs (loop4): Directory bread(block 68) failed [ 168.088460][T21669] FAT-fs (loop4): Directory bread(block 69) failed [ 168.095068][T21669] FAT-fs (loop4): Directory bread(block 70) failed [ 168.101685][T21669] FAT-fs (loop4): Directory bread(block 71) failed [ 168.108282][T21669] FAT-fs (loop4): Directory bread(block 72) failed [ 168.114820][T21669] FAT-fs (loop4): Directory bread(block 73) failed [ 168.131649][T21669] syz.4.8308: attempt to access beyond end of device [ 168.131649][T21669] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 168.146037][T21669] syz.4.8308: attempt to access beyond end of device [ 168.146037][T21669] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 168.427649][T21678] SELinux: failed to load policy [ 168.428315][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 168.428328][ T29] audit: type=1400 audit(1732151994.254:68416): avc: denied { load_policy } for pid=21677 comm="syz.8.8312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 168.473000][ T29] audit: type=1400 audit(1732151994.294:68417): avc: denied { mount } for pid=21681 comm="syz.8.8314" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 168.495431][ T29] audit: type=1400 audit(1732151994.294:68418): avc: denied { unmount } for pid=21681 comm="syz.8.8314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 168.515280][T21684] loop8: detected capacity change from 0 to 1024 [ 168.517464][T21684] EXT4-fs: Ignoring removed nobh option [ 168.527602][T21684] EXT4-fs: Ignoring removed orlov option [ 168.537948][T21684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.563667][T21690] syz.7.8317[21690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.563735][T21690] syz.7.8317[21690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.575518][T21690] syz.7.8317[21690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.589449][ T29] audit: type=1400 audit(1732151994.414:68419): avc: denied { create } for pid=21689 comm="syz.7.8317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.622027][ T29] audit: type=1400 audit(1732151994.414:68420): avc: denied { write } for pid=21689 comm="syz.7.8317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.627947][T21309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.644172][T21692] syz.1.8318[21692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.701234][ T29] audit: type=1400 audit(1732151994.524:68421): avc: denied { shutdown } for pid=21693 comm="syz.8.8319" lport=39110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.714960][T21690] infiniband syz1: set active [ 168.738348][T21690] infiniband syz1: added veth0_virt_wifi [ 168.746555][T21700] loop8: detected capacity change from 0 to 1024 [ 168.757719][T21698] vhci_hcd: invalid port number 236 [ 168.762334][ T29] audit: type=1400 audit(1732151994.584:68422): avc: denied { create } for pid=21699 comm="syz.8.8322" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 168.807437][ T29] audit: type=1400 audit(1732151994.604:68423): avc: denied { watch_reads } for pid=21703 comm="syz.1.8323" path="/1709/file0" dev="tmpfs" ino=8755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.809199][T21690] RDS/IB: syz1: added [ 168.830776][ T29] audit: type=1400 audit(1732151994.614:68424): avc: denied { unlink } for pid=21699 comm="syz.8.8322" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 168.845175][T21690] smc: adding ib device syz1 with port count 1 [ 168.888356][T21690] smc: ib device syz1 port 1 has pnetid [ 168.900504][ T29] audit: type=1400 audit(1732151994.724:68425): avc: denied { write } for pid=21707 comm="syz.1.8326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.981806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118595c00: rx timeout, send abort [ 169.084213][T21730] 9pnet_fd: Insufficient options for proto=fd [ 169.121721][T21734] loop8: detected capacity change from 0 to 128 [ 169.263613][T21744] sctp: [Deprecated]: syz.4.8343 (pid 21744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.263613][T21744] Use struct sctp_sack_info instead [ 169.402691][T21794] loop1: detected capacity change from 0 to 1024 [ 169.412552][T21796] loop8: detected capacity change from 0 to 512 [ 169.418546][T21794] EXT4-fs: Ignoring removed oldalloc option [ 169.430993][T21796] EXT4-fs: Ignoring removed nobh option [ 169.431007][T21794] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 169.436601][T21796] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.472433][T21805] loop4: detected capacity change from 0 to 164 [ 169.488946][T21805] ISOFS: unable to read i-node block [ 169.494283][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118595c00: abort rx timeout. Force session deactivation [ 169.494322][ C0] ------------[ cut here ]------------ [ 169.494329][ C0] refcount_t: underflow; use-after-free. [ 169.494584][ C0] WARNING: CPU: 0 PID: 21805 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 169.494623][ C0] Modules linked in: [ 169.494637][ C0] CPU: 0 UID: 0 PID: 21805 Comm: syz.4.8369 Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 169.494671][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.494687][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 169.494727][ C0] Code: 72 ff ff ff e8 eb c6 70 ff 48 c7 c7 78 f9 b2 86 e8 9f ae 89 ff c6 05 c0 79 f3 04 01 90 48 c7 c7 b9 e3 1b 86 e8 0b 85 52 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 bc c6 70 ff 48 c7 c7 75 f9 b2 86 e8 [ 169.494748][ C0] RSP: 0018:ffffc90000003dd8 EFLAGS: 00010246 [ 169.494764][ C0] RAX: 99f7aa46e0401300 RBX: ffff888118e807e4 RCX: ffff888104800000 [ 169.494779][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.494793][ C0] RBP: 0000000000000003 R08: ffffffff81120637 R09: 0000000000000000 [ 169.494807][ C0] R10: 0001ffffffffffff R11: 0001c90000003cd0 R12: ffff888118595c68 [ 169.494840][ C0] R13: ffff888118595cf8 R14: ffff888118e807e4 R15: 0000000000000000 [ 169.494855][ C0] FS: 00007fd2607876c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 169.494874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.494889][ C0] CR2: 0000001b33315ff8 CR3: 000000011f4b4000 CR4: 00000000003506f0 [ 169.494906][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.494920][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 169.494934][ C0] Call Trace: [ 169.494941][ C0] [ 169.494966][ C0] ? __warn+0x141/0x350 [ 169.494987][ C0] ? report_bug+0x315/0x420 [ 169.495034][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 169.495082][ C0] ? handle_bug+0x60/0x90 [ 169.495110][ C0] ? exc_invalid_op+0x1a/0x50 [ 169.495143][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 169.495168][ C0] ? __warn_printk+0x167/0x1b0 [ 169.495189][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 169.495215][ C0] ? refcount_warn_saturate+0x1c5/0x230 [ 169.495261][ C0] sk_skb_reason_drop+0xe9/0x290 [ 169.495283][ C0] j1939_session_put+0x157/0x2a0 [ 169.495317][ C0] j1939_tp_rxtimer+0x10e/0x4d0 [ 169.495353][ C0] ? __pfx_j1939_tp_rxtimer+0x10/0x10 [ 169.495401][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 169.495441][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 169.495465][ C0] handle_softirqs+0xbf/0x280 [ 169.495492][ C0] __irq_exit_rcu+0x3a/0xc0 [ 169.495523][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 169.495546][ C0] [ 169.495553][ C0] [ 169.495560][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.495586][ C0] RIP: 0010:console_flush_all+0x56b/0x770 [ 169.495609][ C0] Code: 4c 89 f6 48 81 e6 00 02 00 00 31 ff e8 ae 25 12 00 49 81 e6 00 02 00 00 75 07 e8 c0 20 12 00 eb 06 e8 b9 20 12 00 fb 4d 89 ee <44> 0f b6 64 24 02 48 8b 6c 24 08 48 89 ef e8 e2 14 2b 00 48 8b 6d [ 169.495650][ C0] RSP: 0018:ffffc900019e79a0 EFLAGS: 00000283 [ 169.495667][ C0] RAX: ffffffff811e25d7 RBX: ffffc900019e7a47 RCX: 0000000000080000 [ 169.495681][ C0] RDX: ffffc900057f3000 RSI: 0000000000000a88 RDI: 0000000000000a89 [ 169.495696][ C0] RBP: ffffc900019e7a47 R08: ffffffff811e25c2 R09: 0000000000000000 [ 169.495710][ C0] R10: 0001c900019e7a47 R11: 0001ffff88bd6950 R12: 0000000000000000 [ 169.495738][ C0] R13: ffffc900019e7a38 R14: ffffc900019e7a38 R15: ffffffff868189a0 [ 169.495755][ C0] ? console_flush_all+0x552/0x770 [ 169.495776][ C0] ? console_flush_all+0x567/0x770 [ 169.495804][ C0] console_unlock+0xab/0x330 [ 169.495837][ C0] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 169.495884][ C0] vprintk_emit+0x3f4/0x680 [ 169.495934][ C0] vprintk_default+0x26/0x30 [ 169.495967][ C0] vprintk+0x75/0x80 [ 169.495991][ C0] _printk+0x7a/0xa0 [ 169.496023][ C0] ? bdev_getblk+0x2e1/0x3b0 [ 169.496050][ C0] __isofs_iget+0x99d/0xf80 [ 169.496079][ C0] ? futex_unqueue+0xba/0xf0 [ 169.496112][ C0] ? __futex_wait+0x228/0x290 [ 169.496143][ C0] isofs_fh_to_dentry+0x83/0x110 [ 169.496172][ C0] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 169.496203][ C0] exportfs_decode_fh_raw+0xaf/0x480 [ 169.496261][ C0] do_handle_open+0x447/0x570 [ 169.496292][ C0] __x64_sys_open_by_handle_at+0x46/0x50 [ 169.496326][ C0] x64_sys_call+0x2cca/0x2dc0 [ 169.496356][ C0] do_syscall_64+0xc9/0x1c0 [ 169.496396][ C0] ? clear_bhb_loop+0x55/0xb0 [ 169.496421][ C0] ? clear_bhb_loop+0x55/0xb0 [ 169.496458][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.496483][ C0] RIP: 0033:0x7fd26210e819 [ 169.496499][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.496540][ C0] RSP: 002b:00007fd260787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 169.496560][ C0] RAX: ffffffffffffffda RBX: 00007fd2622c5fa0 RCX: 00007fd26210e819 [ 169.496577][ C0] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 169.496588][ C0] RBP: 00007fd26218175e R08: 0000000000000000 R09: 0000000000000000 [ 169.496605][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.496616][ C0] R13: 0000000000000000 R14: 00007fd2622c5fa0 R15: 00007fff4ff33788 [ 169.496651][ C0] [ 169.496656][ C0] ---[ end trace 0000000000000000 ]--- [ 170.049659][T21813] __nla_validate_parse: 6 callbacks suppressed [ 170.049674][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8372'. [ 170.064905][T21813] tipc: Started in network mode [ 170.069832][T21813] tipc: Node identity bridge_sn, cluster identity 8 [ 170.115940][T21822] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8376'. [ 170.181246][T21836] loop8: detected capacity change from 0 to 256 [ 170.214413][T21836] FAT-fs (loop8): Directory bread(block 64) failed [ 170.222223][T21836] FAT-fs (loop8): Directory bread(block 65) failed [ 170.236609][T21836] FAT-fs (loop8): Directory bread(block 66) failed [ 170.250941][T21836] FAT-fs (loop8): Directory bread(block 67) failed [ 170.271323][T21840] program syz.1.8385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.281416][T21836] FAT-fs (loop8): Directory bread(block 68) failed [ 170.295761][T21836] FAT-fs (loop8): Directory bread(block 69) failed [ 170.319979][T21836] FAT-fs (loop8): Directory bread(block 70) failed [ 170.339068][T21836] FAT-fs (loop8): Directory bread(block 71) failed [ 170.345645][T21836] FAT-fs (loop8): Directory bread(block 72) failed [ 170.376319][T21836] FAT-fs (loop8): Directory bread(block 73) failed [ 170.409344][T21836] syz.8.8380: attempt to access beyond end of device [ 170.409344][T21836] loop8: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 170.493646][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8393'. [ 170.657148][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8405'. [ 170.883190][T21912] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8418'. [ 170.892224][T21912] netlink: 188 bytes leftover after parsing attributes in process `syz.7.8418'. [ 171.005444][T21926] bpf_get_probe_write_proto: 2 callbacks suppressed [ 171.005459][T21926] syz.4.8425[21926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.012347][T21926] syz.4.8425[21926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.025080][T21926] syz.4.8425[21926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.119228][T21936] Invalid ELF header magic: != ELF [ 171.150273][T21938] loop7: detected capacity change from 0 to 512 [ 171.171211][T21940] loop4: detected capacity change from 0 to 1024 [ 171.200715][T21938] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.549992][T21977] loop1: detected capacity change from 0 to 512 [ 171.558193][T21977] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 171.568032][T21977] EXT4-fs (loop1): invalid journal inode [ 171.573914][T21977] EXT4-fs (loop1): can't get journal size [ 171.580936][T21977] EXT4-fs (loop1): 1 truncate cleaned up [ 171.640782][T21983] loop8: detected capacity change from 0 to 2048 [ 171.656874][T21978] team0: entered allmulticast mode [ 171.662107][T21978] team_slave_0: entered allmulticast mode [ 171.667904][T21978] team_slave_1: entered allmulticast mode [ 171.698173][T21983] Alternate GPT is invalid, using primary GPT. [ 171.704559][T21983] loop8: p1 p2 p3 [ 171.792921][T21994] syz.4.8455[21994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.793025][T21994] syz.4.8455[21994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.836504][T21992] loop1: detected capacity change from 0 to 1024 [ 171.856138][T21994] syz.4.8455[21994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.902694][T22005] netlink: 'syz.7.8459': attribute type 16 has an invalid length. [ 171.922155][T22005] netlink: 'syz.7.8459': attribute type 3 has an invalid length. [ 171.929908][T22005] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.8459'. [ 171.956336][T22014] syz.8.8464[22014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.956494][T22014] syz.8.8464[22014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.974003][T22014] syz.8.8464[22014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.980213][T21992] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 171.998957][T22021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8468'. [ 172.047570][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8470'. [ 172.056620][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8470'. [ 172.082139][T21992] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 172.218728][T22054] netlink: 'syz.4.8483': attribute type 46 has an invalid length. [ 172.271389][T22062] loop5: detected capacity change from 0 to 512 [ 172.307592][T22062] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.8487: casefold flag without casefold feature [ 172.326152][T22062] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.8487: couldn't read orphan inode 15 (err -117) [ 172.451921][T22080] loop5: detected capacity change from 0 to 512 [ 172.476915][T22080] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 172.500769][T22080] EXT4-fs: error: could not find journal device path [ 172.524045][T22091] loop8: detected capacity change from 0 to 512 [ 172.536720][T22091] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 172.576825][T22091] EXT4-fs (loop8): 1 truncate cleaned up [ 172.612026][T22091] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 172.670521][T22112] loop5: detected capacity change from 0 to 512 [ 172.727694][T22123] 0ªX¹¦À: renamed from caif0 [ 172.739552][T22112] ext4 filesystem being mounted at /1154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.763220][T22123] 0ªX¹¦À: entered allmulticast mode [ 172.768551][T22123] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 172.931553][T22150] syz.5.8527[22150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.989685][T22147] loop7: detected capacity change from 0 to 8192 [ 173.022936][T22163] tun0: tun_chr_ioctl cmd 1074025677 [ 173.028582][T22163] tun0: linktype set to 270 [ 173.059051][T22173] loop1: detected capacity change from 0 to 128 [ 173.076690][T22173] syz.1.8538: attempt to access beyond end of device [ 173.076690][T22173] loop1: rw=1, sector=145, nr_sectors = 41 limit=128 [ 173.100188][T22147] loop7: p1 p2 p3 p4 [ 173.104267][T22147] loop7: p1 start 17760256 is beyond EOD, truncated [ 173.110981][T22147] loop7: p2 size 64053 extends beyond EOD, truncated [ 173.118605][T22147] loop7: p3 start 458496 is beyond EOD, truncated [ 173.125074][T22147] loop7: p4 size 50331648 extends beyond EOD, truncated [ 173.252444][T22199] loop1: detected capacity change from 0 to 512 [ 173.275628][T22199] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8550: invalid indirect mapped block 256 (level 2) [ 173.293440][T22199] EXT4-fs (loop1): 2 truncates cleaned up [ 173.408490][T22225] program syz.8.8562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.436598][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 173.436613][ T29] audit: type=1326 audit(1732151999.254:68612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.1.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f174f32e819 code=0x7ffc0000 [ 173.468017][ T29] audit: type=1326 audit(1732151999.294:68613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.1.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174f32e819 code=0x7ffc0000 [ 173.528868][ T29] audit: type=1326 audit(1732151999.294:68614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.1.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174f32e819 code=0x7ffc0000 [ 173.552502][ T29] audit: type=1326 audit(1732151999.344:68615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.1.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f174f32e819 code=0x7ffc0000 [ 173.576286][ T29] audit: type=1326 audit(1732151999.344:68616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.1.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174f32e819 code=0x7ffc0000 [ 173.599875][ T29] audit: type=1326 audit(1732151999.344:68617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22226 comm="syz.1.8559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174f32e819 code=0x7ffc0000 [ 173.605392][T22241] tun0: tun_chr_ioctl cmd 1074025677 [ 173.629158][T22241] tun0: linktype set to 270 [ 173.669104][T22244] loop8: detected capacity change from 0 to 2048 [ 173.701394][T22252] loop1: detected capacity change from 0 to 512 [ 173.709277][T22252] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.721645][T22246] loop7: detected capacity change from 0 to 8192 [ 173.737661][T22252] EXT4-fs (loop1): 1 truncate cleaned up [ 173.756579][ T29] audit: type=1400 audit(1732151999.574:68618): avc: denied { setattr } for pid=22251 comm="syz.1.8573" name="cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 173.762643][T22259] program syz.4.8575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.779958][ T29] audit: type=1400 audit(1732151999.574:68619): avc: denied { write } for pid=22256 comm="syz.4.8575" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.791136][T22244] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.813415][ T29] audit: type=1400 audit(1732151999.644:68620): avc: denied { remount } for pid=22245 comm="syz.7.8580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 173.908699][ T29] audit: type=1400 audit(1732151999.724:68621): avc: denied { mount } for pid=22264 comm="syz.1.8577" name="/" dev="gadgetfs" ino=67838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 174.012979][T22284] loop4: detected capacity change from 0 to 164 [ 174.121056][ T3394] IPVS: starting estimator thread 0... [ 174.139477][T22301] loop4: detected capacity change from 0 to 512 [ 174.187320][T22301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.217595][T22301] EXT4-fs (loop4): 1 truncate cleaned up [ 174.234039][T22305] IPVS: using max 2880 ests per chain, 144000 per kthread [ 174.416914][T22321] loop4: detected capacity change from 0 to 8192 [ 174.425680][T22334] unsupported nlmsg_type 40 [ 174.445736][T22336] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 174.456868][T22321] loop4: p2 p3 p4 [ 174.461267][T22321] loop4: p3 start 1048607 is beyond EOD, truncated [ 174.467836][T22321] loop4: p4 size 65536 extends beyond EOD, truncated [ 174.641618][T22372] loop4: detected capacity change from 0 to 1764 [ 174.685430][T22378] can0: slcan on ttyS3. [ 174.699675][T22386] loop7: detected capacity change from 0 to 128 [ 174.723695][T22390] bridge0: entered allmulticast mode [ 174.729991][T22390] bond0: (slave bridge0): Releasing backup interface [ 174.746859][T22378] can0 (unregistered): slcan off ttyS3. [ 174.810170][T22405] lo: entered allmulticast mode [ 174.816287][T22405] lo: left allmulticast mode [ 174.919773][T22432] 9pnet_fd: Insufficient options for proto=fd [ 175.001988][T22449] loop4: detected capacity change from 0 to 128 [ 175.045294][T22445] sctp: [Deprecated]: syz.5.8659 (pid 22445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.045294][T22445] Use struct sctp_sack_info instead [ 175.085513][T22461] loop4: detected capacity change from 0 to 1024 [ 175.092378][T22461] EXT4-fs: Ignoring removed orlov option [ 175.098168][T22461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.270422][T22488] __nla_validate_parse: 31 callbacks suppressed [ 175.270498][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8678'. [ 175.384065][T22496] loop4: detected capacity change from 0 to 128 [ 175.393471][T22496] ext4 filesystem being mounted at /1786/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.476301][T22504] loop1: detected capacity change from 0 to 512 [ 175.503374][T22504] ext4 filesystem being mounted at /1781/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.587379][T22522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.595847][T22522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.760025][T22534] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 175.844065][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8702'. [ 175.925828][T22550] loop7: detected capacity change from 0 to 1024 [ 175.932647][T22550] EXT4-fs: Ignoring removed orlov option [ 175.938458][T22550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.961689][T22550] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 175.986278][T22556] loop5: detected capacity change from 0 to 8192 [ 176.048540][T22559] ================================================================== [ 176.056656][T22559] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 176.063967][T22559] [ 176.066295][T22559] read-write to 0xffff888118109d88 of 8 bytes by task 40 on cpu 0: [ 176.074194][T22559] xas_clear_mark+0x90/0x180 [ 176.078794][T22559] __folio_start_writeback+0x2e2/0x440 [ 176.084362][T22559] __block_write_full_folio+0x506/0x8c0 [ 176.089929][T22559] block_write_full_folio+0x293/0x2b0 [ 176.095322][T22559] write_cache_pages+0x62/0x100 [ 176.100206][T22559] blkdev_writepages+0x59/0x90 [ 176.104982][T22559] do_writepages+0x1d8/0x480 [ 176.109587][T22559] __writeback_single_inode+0x89/0x850 [ 176.115057][T22559] writeback_sb_inodes+0x461/0xa30 [ 176.120186][T22559] __writeback_inodes_wb+0x9a/0x1a0 [ 176.125399][T22559] wb_writeback+0x274/0x640 [ 176.129916][T22559] wb_workfn+0x67f/0x940 [ 176.134515][T22559] process_scheduled_works+0x483/0x9a0 [ 176.139971][T22559] worker_thread+0x51d/0x6f0 [ 176.144567][T22559] kthread+0x1d1/0x210 [ 176.148638][T22559] ret_from_fork+0x4b/0x60 [ 176.153055][T22559] ret_from_fork_asm+0x1a/0x30 [ 176.157836][T22559] [ 176.160597][T22559] read to 0xffff888118109d88 of 8 bytes by task 22559 on cpu 1: [ 176.168240][T22559] xas_find_marked+0x216/0x660 [ 176.173027][T22559] find_get_entry+0x54/0x390 [ 176.177633][T22559] filemap_get_folios_tag+0x136/0x210 [ 176.183004][T22559] writeback_iter+0x4b0/0x830 [ 176.187701][T22559] write_cache_pages+0x4b/0x100 [ 176.192565][T22559] blkdev_writepages+0x59/0x90 [ 176.197339][T22559] do_writepages+0x1d8/0x480 [ 176.201939][T22559] filemap_flush+0xe7/0x120 [ 176.206451][T22559] sync_blockdev_nowait+0x29/0x40 [ 176.211480][T22559] sync_filesystem+0xe3/0x190 [ 176.216162][T22559] fat_reconfigure+0x89/0x110 [ 176.220848][T22559] reconfigure_super+0x319/0x5b0 [ 176.225792][T22559] path_mount+0x967/0xb30 [ 176.230123][T22559] __se_sys_mount+0x27c/0x2d0 [ 176.234808][T22559] __x64_sys_mount+0x67/0x80 [ 176.239412][T22559] x64_sys_call+0x2c84/0x2dc0 [ 176.244091][T22559] do_syscall_64+0xc9/0x1c0 [ 176.248599][T22559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.254504][T22559] [ 176.256818][T22559] value changed: 0x0000000000000110 -> 0x0000000000000000 [ 176.263918][T22559] [ 176.266241][T22559] Reported by Kernel Concurrency Sanitizer on: [ 176.272384][T22559] CPU: 1 UID: 0 PID: 22559 Comm: syz.5.8708 Tainted: G W 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 176.284290][T22559] Tainted: [W]=WARN [ 176.288089][T22559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.298144][T22559] ==================================================================