last executing test programs: 3m25.796730732s ago: executing program 4 (id=118): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 3m25.708487804s ago: executing program 4 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1, 0x30}) 3m25.668167185s ago: executing program 4 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m25.631981335s ago: executing program 4 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 3m25.578202016s ago: executing program 4 (id=129): r0 = socket$kcm(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000102) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f00000006c0)) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@in6={0xa, 0x4e23, 0xb5, @empty}, 0x80, 0x0}, 0x4084041) 3m25.32319991s ago: executing program 4 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 3m25.32299389s ago: executing program 32 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r2, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 2m22.700903297s ago: executing program 5 (id=2911): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x75}, 0x38) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1064, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 2m22.49078744s ago: executing program 5 (id=2916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 2m22.49040778s ago: executing program 5 (id=2917): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 2m22.013136417s ago: executing program 5 (id=2932): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffff9, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0xf3]}) 2m21.922242389s ago: executing program 5 (id=2937): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)="8d34", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2m21.447000396s ago: executing program 5 (id=2968): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x2000, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2m21.389242526s ago: executing program 33 (id=2968): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x2000, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1m57.092322866s ago: executing program 6 (id=4094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) set_robust_list(&(0x7f00000003c0), 0x18) 1m57.091678376s ago: executing program 6 (id=4096): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0) 1m57.002508617s ago: executing program 6 (id=4099): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="8b8ec7aabc443cd817a5fe787411faaac0c8f1ffd24987f0c85e04f8f33e4c313ddc6d16bc88bc5db7", 0x29}], 0x1}}], 0x1, 0x40000) 1m57.001177828s ago: executing program 6 (id=4102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x89901) 1m56.992885048s ago: executing program 6 (id=4103): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1m56.538701384s ago: executing program 6 (id=4118): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1m56.527735844s ago: executing program 34 (id=4118): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1m30.47047642s ago: executing program 0 (id=5398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x989680}, 0x0) 1m30.444063511s ago: executing program 0 (id=5399): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 1m30.255842193s ago: executing program 0 (id=5410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1m30.195619344s ago: executing program 0 (id=5415): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@fat=@showexec}, {@uni_xlate}, {@utf8no}, {@rodir}]}, 0x0, 0x274, &(0x7f0000000780)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x8c03, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x252) 1m30.163374065s ago: executing program 0 (id=5416): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m29.960471287s ago: executing program 0 (id=5424): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x20000004) 1m29.929944548s ago: executing program 35 (id=5424): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x20000004) 22.062671633s ago: executing program 7 (id=8499): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x44) 21.808276947s ago: executing program 7 (id=8509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) 21.758843348s ago: executing program 7 (id=8512): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x381, 0x0) 21.579084931s ago: executing program 7 (id=8528): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r2}, 0x10) 21.496498732s ago: executing program 7 (id=8537): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) 21.325538934s ago: executing program 7 (id=8549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r0, r1) 6.690138881s ago: executing program 36 (id=8549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r0, r1) 1.077435734s ago: executing program 8 (id=8985): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 1.031861495s ago: executing program 8 (id=8992): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 999.142325ms ago: executing program 9 (id=8995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000024000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 939.385436ms ago: executing program 8 (id=8998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) utime(0x0, 0x0) 938.794696ms ago: executing program 8 (id=8999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ca96460014060000000000000000000000000000000000fe8000000000000000000d00000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 885.989827ms ago: executing program 8 (id=9011): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 847.628128ms ago: executing program 9 (id=9005): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 844.944937ms ago: executing program 1 (id=9006): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044050) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='vm_unmapped_area\x00', r1, 0x0, 0x8}, 0x18) syz_io_uring_setup(0x5d0, &(0x7f0000000240)={0x0, 0xc845, 0x80, 0x3, 0x34f}, 0x0, 0x0) 791.353988ms ago: executing program 1 (id=9008): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/181, 0xb5) 731.329919ms ago: executing program 1 (id=9010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x61f, &(0x7f0000000cc0)="$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") 730.445659ms ago: executing program 9 (id=9013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000080)='system_u:object_r:framebuf_device_t:s0\x00', 0x27) 667.29548ms ago: executing program 3 (id=9015): socket(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x20, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3) 666.55949ms ago: executing program 9 (id=9018): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 652.14742ms ago: executing program 9 (id=9019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 648.83118ms ago: executing program 8 (id=9020): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0x80008000, 0xc2cf, 0xffe00001, 0x1, 0x2, "00e4fdab790000fb00"}) 648.42429ms ago: executing program 3 (id=9021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 560.430721ms ago: executing program 3 (id=9023): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000003000128008000100736974"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 559.753521ms ago: executing program 1 (id=9025): mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x10000}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 559.546221ms ago: executing program 3 (id=9026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104000, 0x8001, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 558.212501ms ago: executing program 9 (id=9033): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10012, &(0x7f0000000140), 0x6, 0x4e0, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0x81ff) 348.216655ms ago: executing program 2 (id=9030): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x2, 0x1, 0x8, 0x1020005, 0x2b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a"], 0x54}}, 0x0) 347.461505ms ago: executing program 3 (id=9031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 255.244726ms ago: executing program 3 (id=9032): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20) close(r0) pipe2(&(0x7f0000000200), 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 144.557448ms ago: executing program 2 (id=9034): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) 143.918648ms ago: executing program 1 (id=9044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 124.831478ms ago: executing program 1 (id=9035): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000002200)=[{}, {}], 0x0) 95.046128ms ago: executing program 2 (id=9036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 59.774379ms ago: executing program 2 (id=9037): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) 16.33774ms ago: executing program 2 (id=9038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) 0s ago: executing program 2 (id=9039): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2d, 0x7ffc1ffb}]}) wait4(0x0, 0x0, 0x40000000, 0x0) kernel console output (not intermixed with test programs): ] [ 181.984450][T19892] System zones: 1-12 [ 181.988731][T19892] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.6883: corrupted in-inode xattr: e_value size too large [ 182.003531][T19892] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.6883: couldn't read orphan inode 15 (err -117) [ 182.151591][T19925] program syz.8.6908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.276082][T19940] loop1: detected capacity change from 0 to 128 [ 182.375039][T19953] loop8: detected capacity change from 0 to 512 [ 182.390052][T19953] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 182.403047][T19953] EXT4-fs (loop8): 1 truncate cleaned up [ 182.461476][T19970] loop8: detected capacity change from 0 to 512 [ 182.489241][T19970] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.541050][T19983] 9pnet: Could not find request transport: 0xffffffffffffffff [ 182.608155][T20000] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 182.681136][T20014] syzkaller1: entered promiscuous mode [ 182.686804][T20014] syzkaller1: entered allmulticast mode [ 182.735524][ T3393] IPVS: starting estimator thread 0... [ 182.742089][T20016] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.821148][T20022] IPVS: using max 2400 ests per chain, 120000 per kthread [ 182.844548][T20038] loop3: detected capacity change from 0 to 1024 [ 182.860031][T20038] EXT4-fs: Ignoring removed oldalloc option [ 182.866772][T20038] EXT4-fs: Ignoring removed orlov option [ 182.873397][T20038] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 182.902863][T20038] EXT4-fs: Ignoring removed orlov option [ 182.909402][T20038] EXT4-fs (loop3): can't enable nombcache during remount [ 182.918327][T20038] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.6953: Allocating blocks 385-513 which overlap fs metadata [ 182.959903][T20036] EXT4-fs (loop3): pa ffff888106f2c620: logic 16, phys. 129, len 24 [ 182.967963][T20036] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 182.991553][T20055] loop8: detected capacity change from 0 to 256 [ 183.008530][T20055] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.053434][T20067] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 183.091963][T20077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.100869][T20077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.115663][T20083] netlink: 'syz.3.6973': attribute type 9 has an invalid length. [ 183.123539][T20083] netlink: 'syz.3.6973': attribute type 6 has an invalid length. [ 183.131460][T20083] netlink: 'syz.3.6973': attribute type 7 has an invalid length. [ 183.139316][T20083] netlink: 'syz.3.6973': attribute type 8 has an invalid length. [ 183.164652][T20088] syzkaller1: entered promiscuous mode [ 183.170206][T20088] syzkaller1: entered allmulticast mode [ 183.251660][T20102] vhci_hcd: invalid port number 96 [ 183.256832][T20102] vhci_hcd: default hub control req: 0417 vfffc i0060 l0 [ 183.609021][T20130] loop7: detected capacity change from 0 to 128 [ 183.617703][T20130] ext4 filesystem being mounted at /575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.666224][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 183.666237][ T29] audit: type=1326 audit(1751632504.009:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd159e929 code=0x7ffc0000 [ 183.696283][T20133] loop7: detected capacity change from 0 to 512 [ 183.697564][ T29] audit: type=1326 audit(1751632504.009:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd159e929 code=0x7ffc0000 [ 183.704941][T20133] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 183.726170][ T29] audit: type=1326 audit(1751632504.020:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffbd159e929 code=0x7ffc0000 [ 183.726199][ T29] audit: type=1326 audit(1751632504.020:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbd159e963 code=0x7ffc0000 [ 183.726300][ T29] audit: type=1326 audit(1751632504.020:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffbd159d3df code=0x7ffc0000 [ 183.726323][ T29] audit: type=1326 audit(1751632504.020:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffbd159e9b7 code=0x7ffc0000 [ 183.726425][ T29] audit: type=1326 audit(1751632504.042:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd159d290 code=0x7ffc0000 [ 183.726444][ T29] audit: type=1326 audit(1751632504.042:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbd159e52b code=0x7ffc0000 [ 183.726640][ T29] audit: type=1326 audit(1751632504.052:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffbd159d58a code=0x7ffc0000 [ 183.726705][ T29] audit: type=1326 audit(1751632504.052:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.7.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffbd159d58a code=0x7ffc0000 [ 183.738799][T20133] EXT4-fs (loop7): 1 truncate cleaned up [ 184.245908][T20165] loop7: detected capacity change from 0 to 512 [ 184.299813][T20169] futex_wake_op: syz.2.7010 tries to shift op by -1; fix this program [ 184.357729][T20176] loop3: detected capacity change from 0 to 1024 [ 184.430018][T20165] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.453722][T20165] netlink: 208 bytes leftover after parsing attributes in process `syz.7.7016'. [ 184.533221][T20183] loop1: detected capacity change from 0 to 164 [ 184.547781][T20183] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 184.560845][T20183] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 184.570677][T20183] Symlink component flag not implemented [ 184.577109][T20183] Symlink component flag not implemented [ 184.588929][T20183] Symlink component flag not implemented (7) [ 184.595194][T20183] Symlink component flag not implemented (116) [ 184.684718][T20194] syzkaller1: entered promiscuous mode [ 184.690407][T20194] syzkaller1: entered allmulticast mode [ 184.713473][T20194] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 184.741141][T20199] loop3: detected capacity change from 0 to 2048 [ 184.748553][T20199] EXT4-fs: Ignoring removed bh option [ 184.985358][T20223] loop3: detected capacity change from 0 to 4096 [ 185.205058][T20249] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7043'. [ 185.215793][T20249] 0ªX¹¦D: renamed from gretap0 (while UP) [ 185.226652][T20249] 0ªX¹¦D: entered allmulticast mode [ 185.232172][T20251] loop3: detected capacity change from 0 to 512 [ 185.232371][T20249] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 185.241612][T20251] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.280950][T20251] EXT4-fs (loop3): 1 truncate cleaned up [ 185.396127][T20267] SELinux: syz.2.7051 (20267) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.415574][T20268] loop1: detected capacity change from 0 to 512 [ 185.436659][T20268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7052: Parent and EA inode have the same ino 15 [ 185.450704][T20268] EXT4-fs (loop1): Remounting filesystem read-only [ 185.469765][T20268] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 185.480142][T20268] EXT4-fs (loop1): 1 orphan inode deleted [ 185.617763][T20296] loop8: detected capacity change from 0 to 512 [ 185.648369][T20296] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.747482][T20316] netem: change failed [ 185.789071][T20330] loop3: detected capacity change from 0 to 512 [ 185.808661][T20330] ext4 filesystem being mounted at /1381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.907240][T20344] loop3: detected capacity change from 0 to 512 [ 185.946242][T20344] ext4 filesystem being mounted at /1382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.036018][T20353] SELinux: failed to load policy [ 186.054024][T20359] loop1: detected capacity change from 0 to 256 [ 186.065640][T20359] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.080784][T20361] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7092'. [ 186.099891][T20359] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 186.101954][T20361] 1ªX¹¦D: renamed from 30ªX¹¦D [ 186.108541][T20359] FAT-fs (loop1): Filesystem has been set read-only [ 186.128605][T20361] 1ªX¹¦D: entered allmulticast mode [ 186.141061][T20361] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 186.211790][T20365] loop3: detected capacity change from 0 to 164 [ 186.228370][T20365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.259036][T20365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.267793][T20365] Symlink component flag not implemented [ 186.273478][T20365] Symlink component flag not implemented [ 186.285761][T20365] Symlink component flag not implemented (7) [ 186.291864][T20365] Symlink component flag not implemented (116) [ 186.334027][T20369] loop3: detected capacity change from 0 to 512 [ 186.364807][T20369] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 186.379222][T20369] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.390227][T20369] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.7095: corrupted inode contents [ 186.409882][T20369] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.7095: mark_inode_dirty error [ 186.426033][T20369] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.7095: corrupted inode contents [ 186.452710][T20369] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.7095: mark_inode_dirty error [ 186.483310][T20369] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.7095: corrupted inode contents [ 186.513041][T20369] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 186.524048][T20369] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.7095: corrupted inode contents [ 186.545007][T20369] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.7095: mark_inode_dirty error [ 186.569380][T20369] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 186.578884][T20369] EXT4-fs (loop3): 1 truncate cleaned up [ 186.584949][ T7563] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 186.615654][T20377] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7110'. [ 186.626000][T20377] 1ªX¹¦D: renamed from 30ªX¹¦D [ 186.633244][T20377] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 186.774156][T20388] loop1: detected capacity change from 0 to 1024 [ 187.213249][T20430] loop3: detected capacity change from 0 to 512 [ 187.226002][T20430] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.7123: Parent and EA inode have the same ino 15 [ 187.267617][T20430] EXT4-fs (loop3): Remounting filesystem read-only [ 187.275723][T20430] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 187.303784][T20430] EXT4-fs (loop3): 1 orphan inode deleted [ 187.389160][T20444] loop3: detected capacity change from 0 to 512 [ 187.398023][T20444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.445927][T20444] EXT4-fs (loop3): 1 truncate cleaned up [ 187.577324][T20452] loop1: detected capacity change from 0 to 512 [ 187.590446][T20452] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 187.651029][T20467] loop3: detected capacity change from 0 to 512 [ 187.661854][T20467] EXT4-fs error (device loop3): __ext4_iget:5379: inode #4: block 193290: comm syz.3.7139: invalid block [ 187.686247][T20467] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.7139: Bad quota inode: 4, type: 1 [ 187.698226][T20467] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.724535][T20467] EXT4-fs (loop3): mount failed [ 187.774521][T20479] bridge_slave_0: left allmulticast mode [ 187.780251][T20479] bridge_slave_0: left promiscuous mode [ 187.785990][T20479] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.796104][T20484] loop3: detected capacity change from 0 to 128 [ 187.803637][T20484] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.804160][T20479] bridge_slave_1: left allmulticast mode [ 187.817223][T20484] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.821200][T20479] bridge_slave_1: left promiscuous mode [ 187.836639][T20479] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.845325][ T7605] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.855658][T20479] bond0: (slave 30): Releasing backup interface [ 187.863257][T20479] : left promiscuous mode [ 187.867967][T20479] : left allmulticast mode [ 187.879852][T20479] bond0: (slave bond_slave_1): Releasing backup interface [ 187.890222][T20479] bond_slave_1: left promiscuous mode [ 187.895821][T20479] bond_slave_1: left allmulticast mode [ 187.914357][T20479] vlan2: left allmulticast mode [ 187.919245][T20479] bond0: left allmulticast mode [ 187.924178][T20479] vlan2: left promiscuous mode [ 187.929071][T20479] bond0: left promiscuous mode [ 187.934053][T20479] bridge0: port 3(vlan2) entered disabled state [ 188.066477][T20512] loop2: detected capacity change from 0 to 512 [ 188.081949][T20512] EXT4-fs mount: 82 callbacks suppressed [ 188.081965][T20512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.111658][T20512] ext4 filesystem being mounted at /1494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.226484][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.321639][T20526] xt_TCPMSS: Only works on TCP SYN packets [ 188.350597][T20528] loop2: detected capacity change from 0 to 1024 [ 188.358365][T20528] EXT4-fs: Ignoring removed bh option [ 188.369061][T20528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.397561][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.487327][T20539] loop2: detected capacity change from 0 to 512 [ 188.501775][T20539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.7167: Parent and EA inode have the same ino 15 [ 188.516164][T20539] EXT4-fs (loop2): Remounting filesystem read-only [ 188.527277][T20539] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 188.538724][T20539] EXT4-fs (loop2): 1 orphan inode deleted [ 188.544860][T20539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.572838][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.611706][T20544] loop2: detected capacity change from 0 to 128 [ 188.699545][T20556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7175'. [ 188.730797][ T7563] bio_check_eod: 18 callbacks suppressed [ 188.730813][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.730813][ T7563] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 188.768373][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.768373][ T7563] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 188.786671][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.786671][ T7563] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 188.801051][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.801051][ T7563] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 188.815387][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.815387][ T7563] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 188.829552][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.829552][ T7563] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 188.844219][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.844219][ T7563] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 188.858162][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.858162][ T7563] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 188.872194][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.872194][ T7563] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 188.885706][ T7563] kworker/u8:20: attempt to access beyond end of device [ 188.885706][ T7563] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 188.902065][T20568] loop8: detected capacity change from 0 to 512 [ 188.905848][T20566] SELinux: +}[@ (20566) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.933354][T20568] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.7179: Parent and EA inode have the same ino 15 [ 188.955638][T20568] EXT4-fs (loop8): Remounting filesystem read-only [ 188.964081][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 188.964095][ T29] audit: type=1326 audit(1751632509.696:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 188.986198][T20568] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 189.004783][T20568] EXT4-fs (loop8): 1 orphan inode deleted [ 189.021069][T20568] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.033545][ T29] audit: type=1326 audit(1751632509.739:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.057416][ T29] audit: type=1326 audit(1751632509.739:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.081041][ T29] audit: type=1326 audit(1751632509.739:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.104558][ T29] audit: type=1326 audit(1751632509.739:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.128278][ T29] audit: type=1326 audit(1751632509.739:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.152057][ T29] audit: type=1326 audit(1751632509.739:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.176567][ T29] audit: type=1326 audit(1751632509.739:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.200322][ T29] audit: type=1326 audit(1751632509.739:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.223961][ T29] audit: type=1326 audit(1751632509.749:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20573 comm="syz.1.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 189.286681][T16590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.604806][T20613] loop2: detected capacity change from 0 to 128 [ 189.635560][T20613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 189.643449][T20613] FAT-fs (loop2): Filesystem has been set read-only [ 189.650249][T20613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 189.658266][T20613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 189.721556][T20617] loop2: detected capacity change from 0 to 2048 [ 189.763383][T20617] loop2: p4 < > [ 189.943182][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7213'. [ 189.990399][T20643] serio: Serial port ttyS3 [ 190.033505][T20645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20645 comm=syz.8.7215 [ 190.197961][T20664] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.7225' sets config #0 [ 190.267174][T20673] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 190.432182][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7238'. [ 190.441281][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7238'. [ 190.465997][T20697] bridge1: entered promiscuous mode [ 190.471385][T20697] bridge1: entered allmulticast mode [ 190.594017][T20712] Timeout policy `syz1' can only be used by L3 protocol number 0 [ 190.652722][T20719] binfmt_misc: register: failed to install interpreter file ./file0 [ 190.673889][T20718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.696018][T20718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.015526][T20758] loop7: detected capacity change from 0 to 512 [ 191.034107][T20758] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.7269: casefold flag without casefold feature [ 191.047830][T20758] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7269: couldn't read orphan inode 15 (err -117) [ 191.062504][T20758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.285441][T13631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.845608][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7299'. [ 192.106060][T20834] loop8: detected capacity change from 0 to 128 [ 192.264322][T20849] loop3: detected capacity change from 0 to 1024 [ 192.272863][T20849] EXT4-fs: Ignoring removed nobh option [ 192.278489][T20849] EXT4-fs: Ignoring removed bh option [ 192.314005][T20849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.354527][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.385681][T20874] loop3: detected capacity change from 0 to 1024 [ 192.406928][T20874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.439420][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.497946][T20897] SELinux: failed to load policy [ 192.521541][T20903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20903 comm=wÞ£ÿ [ 192.572338][T20913] loop7: detected capacity change from 0 to 164 [ 192.580046][T20913] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 192.592919][T20913] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 192.601970][T20913] Symlink component flag not implemented [ 192.608157][T20913] Symlink component flag not implemented [ 192.613958][T20913] Symlink component flag not implemented (7) [ 192.620035][T20913] Symlink component flag not implemented (116) [ 192.650091][T20921] loop7: detected capacity change from 0 to 1024 [ 192.658960][T20921] EXT4-fs: Ignoring removed oldalloc option [ 192.666316][T20921] EXT4-fs: Ignoring removed orlov option [ 192.672517][T20921] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 192.692971][T20921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.712513][T20921] EXT4-fs: Ignoring removed orlov option [ 192.718622][T20921] EXT4-fs (loop7): can't enable nombcache during remount [ 192.749410][T13631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.828172][T20941] loop3: detected capacity change from 0 to 256 [ 192.841707][T20941] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.851929][T20941] FAT-fs (loop3): Filesystem has been set read-only [ 192.866182][T20941] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.877248][T20941] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.888033][T20941] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.898678][T20941] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 192.932484][T20953] netlink: 'syz.3.7356': attribute type 1 has an invalid length. [ 192.942386][T20951] openvswitch: netlink: Message has 6 unknown bytes. [ 192.967831][T20957] SELinux: policydb version 0 does not match my version range 15-34 [ 192.976596][T20957] SELinux: failed to load policy [ 193.032091][T20965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20965 comm=syz.2.7362 [ 193.048569][T20968] loop1: detected capacity change from 0 to 512 [ 193.067405][T20968] EXT4-fs: Ignoring removed oldalloc option [ 193.075674][T20968] ext4: Unknown parameter 'smackfsfloor' [ 193.299227][T21003] loop7: detected capacity change from 0 to 2048 [ 193.320937][T21008] loop2: detected capacity change from 0 to 128 [ 193.329982][T21008] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.342893][T21008] ext4 filesystem being mounted at /1541/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.367202][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.384997][T21003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.502089][T13631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.516103][T21024] Cannot find del_set index 0 as target [ 193.580303][T21038] netlink: 'syz.7.7393': attribute type 21 has an invalid length. [ 193.612210][T21044] loop2: detected capacity change from 0 to 1024 [ 193.619204][T21044] EXT4-fs: inline encryption not supported [ 193.628957][T21046] loop7: detected capacity change from 0 to 512 [ 193.641089][T21046] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7396: Parent and EA inode have the same ino 15 [ 193.655830][T21046] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.7396: Parent and EA inode have the same ino 15 [ 193.657835][T21044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.669288][T21046] EXT4-fs (loop7): 1 orphan inode deleted [ 193.686368][T21046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.687237][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 193.687250][ T29] audit: type=1400 audit(1751632514.760:8680): avc: denied { remove_name } for pid=21043 comm="syz.2.7395" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.727495][ T29] audit: type=1400 audit(1751632514.760:8681): avc: denied { rename } for pid=21043 comm="syz.2.7395" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.739292][T21044] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 193.749842][ T29] audit: type=1400 audit(1751632514.760:8682): avc: denied { unlink } for pid=21043 comm="syz.2.7395" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.751807][T13631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.758844][T21044] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 193.799172][T21044] EXT4-fs (loop2): Remounting filesystem read-only [ 193.821721][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.872369][T21060] loop2: detected capacity change from 0 to 256 [ 193.881870][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7403'. [ 193.892314][T21060] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 193.900964][T21060] FAT-fs (loop2): Filesystem has been set read-only [ 193.909274][T21060] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 193.918290][T21060] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 193.926828][T21060] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 193.936495][T21060] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 193.945727][T21060] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 194.015054][ T29] audit: type=1400 audit(1751632515.114:8683): avc: denied { override_creds } for pid=21074 comm="syz.7.7407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.063742][T21077] loop2: detected capacity change from 0 to 2048 [ 194.106046][T21081] program syz.1.7411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.117598][T21081] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 194.118516][T21077] Alternate GPT is invalid, using primary GPT. [ 194.132384][T21077] loop2: p1 p2 p3 [ 194.183320][T21089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7415'. [ 194.265768][ T29] audit: type=1326 audit(1751632515.382:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.2.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 194.292860][ T29] audit: type=1326 audit(1751632515.382:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.2.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 194.316543][ T29] audit: type=1326 audit(1751632515.404:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.2.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 194.340247][ T29] audit: type=1326 audit(1751632515.404:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.2.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 194.363902][ T29] audit: type=1326 audit(1751632515.404:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.2.7420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 194.418241][ T29] audit: type=1400 audit(1751632515.532:8689): avc: denied { read } for pid=21108 comm="syz.8.7424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 194.601071][T21145] gre0: Master is either lo or non-ether device [ 194.621828][T21139] vhci_hcd: invalid port number 96 [ 194.627008][T21139] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 194.799837][ T10] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 194.807444][ T10] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 194.814887][ T10] hid-generic 0000:0004:0000.0011: unknown main item tag 0x0 [ 194.823618][ T10] hid-generic 0000:0004:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 194.838377][T21177] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7456'. [ 195.046635][T21200] loop1: detected capacity change from 0 to 1764 [ 195.081696][T21204] loop1: detected capacity change from 0 to 256 [ 195.095718][T21204] bio_check_eod: 58 callbacks suppressed [ 195.095734][T21204] syz.1.7468: attempt to access beyond end of device [ 195.095734][T21204] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 195.381949][T21228] veth0: entered promiscuous mode [ 195.388808][T21227] veth0: left promiscuous mode [ 195.563152][T21248] vhci_hcd: invalid port number 96 [ 195.568337][T21248] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 195.598551][T21254] gre0: Master is either lo or non-ether device [ 195.738608][T21268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7507'. [ 195.805217][T21275] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 195.813883][T21275] SELinux: failed to load policy [ 195.877444][T21284] loop1: detected capacity change from 0 to 128 [ 195.892412][T21287] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 195.915633][T21284] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 195.923592][T21284] FAT-fs (loop1): Filesystem has been set read-only [ 195.937001][T21284] syz.1.7506: attempt to access beyond end of device [ 195.937001][T21284] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 195.956866][T21287] SELinux: failed to load policy [ 195.972807][T21284] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 195.980731][T21284] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 195.998984][T21284] syz.1.7506: attempt to access beyond end of device [ 195.998984][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.013135][T21284] syz.1.7506: attempt to access beyond end of device [ 196.013135][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.031323][T21284] syz.1.7506: attempt to access beyond end of device [ 196.031323][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.066249][T21284] syz.1.7506: attempt to access beyond end of device [ 196.066249][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.099937][T21284] syz.1.7506: attempt to access beyond end of device [ 196.099937][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.129513][T21284] syz.1.7506: attempt to access beyond end of device [ 196.129513][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.158635][T21284] syz.1.7506: attempt to access beyond end of device [ 196.158635][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.185291][T21284] syz.1.7506: attempt to access beyond end of device [ 196.185291][T21284] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.356311][T21305] netlink: 'syz.2.7515': attribute type 11 has an invalid length. [ 196.385528][T21305] netlink: 448 bytes leftover after parsing attributes in process `syz.2.7515'. [ 196.766893][T21328] netlink: 'syz.1.7526': attribute type 2 has an invalid length. [ 196.973537][T21349] ALSA: seq fatal error: cannot create timer (-19) [ 197.073457][T21366] xt_TCPMSS: Only works on TCP SYN packets [ 197.163524][T21379] ALSA: seq fatal error: cannot create timer (-22) [ 197.170408][T21375] loop3: detected capacity change from 0 to 512 [ 197.237393][T21375] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 197.484539][T21409] ALSA: seq fatal error: cannot create timer (-22) [ 197.525735][T21413] loop8: detected capacity change from 0 to 2048 [ 197.566866][T21413] Alternate GPT is invalid, using primary GPT. [ 197.573278][T21413] loop8: p1 p2 p3 [ 197.672081][T21426] loop3: detected capacity change from 0 to 1024 [ 197.729263][T21426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.761974][T21426] ext4 filesystem being mounted at /1497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.800378][T21441] netlink: 'syz.7.7574': attribute type 2 has an invalid length. [ 197.809297][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.825159][T21443] loop2: detected capacity change from 0 to 1024 [ 197.842002][T21445] netlink: 'syz.3.7577': attribute type 11 has an invalid length. [ 197.850725][T21445] netlink: 448 bytes leftover after parsing attributes in process `syz.3.7577'. [ 197.865655][T21443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.910487][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.949626][T21457] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21457 comm=syz.2.7580 [ 198.019980][T21465] netlink: 'syz.3.7586': attribute type 280 has an invalid length. [ 198.055857][T21469] loop1: detected capacity change from 0 to 512 [ 198.063640][T21469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.078481][T21473] loop3: detected capacity change from 0 to 128 [ 198.078548][T21469] EXT4-fs (loop1): 1 truncate cleaned up [ 198.091145][T21469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.093925][ T36] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 198.111959][ T36] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 198.119568][ T36] hid-generic 0000:0004:0000.0012: unknown main item tag 0x0 [ 198.133759][T21477] loop7: detected capacity change from 0 to 128 [ 198.142800][T21477] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 198.150874][T21477] FAT-fs (loop7): Filesystem has been set read-only [ 198.160590][ T36] hid-generic 0000:0004:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 198.172611][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.174005][T21477] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 198.189637][T21477] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 198.233019][T21483] netlink: 'syz.7.7594': attribute type 11 has an invalid length. [ 198.241437][T21483] netlink: 448 bytes leftover after parsing attributes in process `syz.7.7594'. [ 198.327649][T21495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7599'. [ 198.337065][T21495] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 198.363536][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 198.363556][ T29] audit: type=1400 audit(1751632775.777:8835): avc: denied { name_connect } for pid=21501 comm="syz.3.7600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 198.390698][ T29] audit: type=1400 audit(1751632775.788:8836): avc: denied { write } for pid=21501 comm="syz.3.7600" lport=43181 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.412491][ T29] audit: type=1400 audit(1751632775.788:8837): avc: denied { shutdown } for pid=21501 comm="syz.3.7600" lport=43181 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.530092][T21513] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 198.557842][ T29] audit: type=1400 audit(1751632775.992:8838): avc: denied { create } for pid=21514 comm="syz.3.7607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.578741][ T29] audit: type=1400 audit(1751632776.013:8839): avc: denied { write } for pid=21514 comm="syz.3.7607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.630348][ T29] audit: type=1400 audit(1751632776.067:8840): avc: denied { append } for pid=21518 comm="syz.7.7608" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.672082][ T29] audit: type=1400 audit(1751632776.110:8841): avc: denied { mount } for pid=21528 comm="syz.3.7623" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 198.720120][ T29] audit: type=1400 audit(1751632776.153:8842): avc: denied { create } for pid=21529 comm="syz.8.7613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.740585][ T29] audit: type=1400 audit(1751632776.153:8843): avc: denied { write } for pid=21529 comm="syz.8.7613" path="socket:[63490]" dev="sockfs" ino=63490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.806681][ T29] audit: type=1400 audit(1751632776.260:8844): avc: denied { cpu } for pid=21540 comm="syz.3.7617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 198.849498][T21545] loop7: detected capacity change from 0 to 128 [ 198.857821][T21545] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.871109][T21545] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.895065][T21547] loop8: detected capacity change from 0 to 128 [ 198.905960][T21547] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 198.914632][T21547] FAT-fs (loop8): Filesystem has been set read-only [ 198.921388][T21547] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 198.929340][T21547] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 198.938797][ T7564] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.142915][T21587] loop3: detected capacity change from 0 to 128 [ 199.169691][T21587] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.177571][T21587] FAT-fs (loop3): Filesystem has been set read-only [ 199.193741][T21587] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.201669][T21587] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.288323][T21605] loop1: detected capacity change from 0 to 1024 [ 199.316998][T21605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.329357][T21605] ext4 filesystem being mounted at /1576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.371773][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.451056][T21630] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21630 comm=syz.3.7659 [ 199.493441][T21635] loop7: detected capacity change from 0 to 128 [ 199.524700][T21643] program syz.8.7663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.526264][T21635] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 199.542013][T21635] FAT-fs (loop7): Filesystem has been set read-only [ 199.548752][T21643] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 199.595723][T21651] loop8: detected capacity change from 0 to 512 [ 199.601475][T21635] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 199.609980][T21635] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 199.611256][T21651] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.7670: casefold flag without casefold feature [ 199.631797][T21651] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.7670: couldn't read orphan inode 15 (err -117) [ 199.649657][T21651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.681191][T21658] loop2: detected capacity change from 0 to 128 [ 199.750144][T21658] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.756961][T21635] bio_check_eod: 13066 callbacks suppressed [ 199.756974][T21635] syz.7.7655: attempt to access beyond end of device [ 199.756974][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.770635][T21658] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.783590][T21635] syz.7.7655: attempt to access beyond end of device [ 199.783590][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.796044][T16590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.818244][T21635] syz.7.7655: attempt to access beyond end of device [ 199.818244][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.832390][T21635] syz.7.7655: attempt to access beyond end of device [ 199.832390][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.832442][T21664] loop3: detected capacity change from 0 to 2048 [ 199.858483][T21635] syz.7.7655: attempt to access beyond end of device [ 199.858483][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.873514][T21635] syz.7.7655: attempt to access beyond end of device [ 199.873514][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.878746][T21664] Alternate GPT is invalid, using primary GPT. [ 199.887635][T21635] syz.7.7655: attempt to access beyond end of device [ 199.887635][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.893695][T21664] loop3: p1 p2 p3 [ 199.909507][T21635] syz.7.7655: attempt to access beyond end of device [ 199.909507][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.923960][T21635] syz.7.7655: attempt to access beyond end of device [ 199.923960][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.939875][ T7609] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.954719][T21635] syz.7.7655: attempt to access beyond end of device [ 199.954719][T21635] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 199.994246][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7682'. [ 200.105851][T21697] bridge1: entered promiscuous mode [ 200.111488][T21697] bridge1: entered allmulticast mode [ 200.151924][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7695'. [ 200.323344][T21735] loop1: detected capacity change from 0 to 1024 [ 200.339165][T21735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.393638][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.441372][T21755] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21755 comm=wÞ£ÿ [ 200.502887][T21765] loop3: detected capacity change from 0 to 128 [ 200.532732][T21765] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 200.540766][T21765] FAT-fs (loop3): Filesystem has been set read-only [ 200.542939][T21767] program syz.1.7725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.567899][T21765] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 200.575853][T21765] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 200.633419][T21776] loop1: detected capacity change from 0 to 164 [ 200.652185][T21776] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 200.664733][T21776] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 200.674463][T21776] Symlink component flag not implemented [ 200.680319][T21776] Symlink component flag not implemented [ 200.686426][T21776] Symlink component flag not implemented (7) [ 200.692619][T21776] Symlink component flag not implemented (116) [ 200.721115][T21778] loop7: detected capacity change from 0 to 1024 [ 200.828116][T21778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.850850][T21788] loop1: detected capacity change from 0 to 512 [ 200.860406][T21788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.876244][T21788] EXT4-fs (loop1): 1 truncate cleaned up [ 200.883123][T13631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.896614][T21788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.943340][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.296813][T21836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21836 comm=syz.8.7757 [ 201.599268][T21877] Cannot find del_set index 0 as target [ 202.214938][T21887] loop2: detected capacity change from 0 to 128 [ 202.224168][T21887] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.232104][T21887] FAT-fs (loop2): Filesystem has been set read-only [ 202.241919][T21887] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.249900][T21887] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.277577][T21893] loop3: detected capacity change from 0 to 512 [ 202.290188][T21893] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.304900][T21893] EXT4-fs (loop3): 1 truncate cleaned up [ 202.311042][T21893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.411922][T21902] loop1: detected capacity change from 0 to 1024 [ 202.431291][T21902] EXT4-fs: Ignoring removed oldalloc option [ 202.440507][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.451005][T21902] EXT4-fs: Ignoring removed orlov option [ 202.457098][T21902] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 202.508936][T21902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.559421][T21902] EXT4-fs: Ignoring removed orlov option [ 202.585691][T21902] EXT4-fs (loop1): can't enable nombcache during remount [ 202.636300][T21921] loop8: detected capacity change from 0 to 164 [ 202.647997][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.671591][T21921] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 202.759357][T21923] loop3: detected capacity change from 0 to 8192 [ 202.858002][T21943] loop3: detected capacity change from 0 to 2048 [ 202.901928][T21943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.930851][T21953] loop1: detected capacity change from 0 to 512 [ 202.952092][T21953] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7808: Parent and EA inode have the same ino 15 [ 202.983409][T21953] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7808: Parent and EA inode have the same ino 15 [ 203.056675][T21953] EXT4-fs (loop1): 1 orphan inode deleted [ 203.062722][T21953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.100291][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.117294][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 203.117309][ T29] audit: type=1400 audit(1751633036.882:9140): avc: denied { read write } for pid=21957 comm="syz.8.7820" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.149937][ T29] audit: type=1400 audit(1751633036.882:9141): avc: denied { open } for pid=21957 comm="syz.8.7820" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.174772][ T29] audit: type=1400 audit(1751633036.882:9142): avc: denied { ioctl } for pid=21957 comm="syz.8.7820" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 203.201512][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.209442][ T29] audit: type=1400 audit(1751633036.979:9143): avc: denied { create } for pid=21959 comm="syz.2.7812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.232483][ T29] audit: type=1400 audit(1751633036.979:9144): avc: denied { write } for pid=21959 comm="syz.2.7812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.253573][ T29] audit: type=1400 audit(1751633036.979:9145): avc: denied { read } for pid=21959 comm="syz.2.7812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.308114][ T29] audit: type=1400 audit(1751633037.075:9146): avc: denied { read write } for pid=21963 comm="syz.8.7824" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 203.331850][ T29] audit: type=1400 audit(1751633037.075:9147): avc: denied { open } for pid=21963 comm="syz.8.7824" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 203.337499][T21962] loop3: detected capacity change from 0 to 164 [ 203.365208][ T29] audit: type=1400 audit(1751633037.151:9148): avc: denied { create } for pid=21967 comm="syz.1.7811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.394984][ T29] audit: type=1400 audit(1751633037.172:9149): avc: denied { ioctl } for pid=21967 comm="syz.1.7811" path="socket:[64662]" dev="sockfs" ino=64662 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.421600][T21962] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 203.500291][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7818'. [ 203.560433][T21988] loop8: detected capacity change from 0 to 8192 [ 203.793980][T22026] loop1: detected capacity change from 0 to 8192 [ 203.978276][T22063] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 203.978276][T22063] program syz.2.7859 not setting count and/or reply_len properly [ 204.002950][T22067] loop7: detected capacity change from 0 to 256 [ 204.011240][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.020246][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.037600][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.045158][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.053179][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.060268][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.066473][T22071] loop2: detected capacity change from 0 to 8192 [ 204.067265][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.087967][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.095036][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.101766][T22067] FAT-fs (loop7): Directory bread(block 1285) failed [ 204.137734][T22077] netlink: 'syz.2.7864': attribute type 4 has an invalid length. [ 204.279578][T22103] random: crng reseeded on system resumption [ 204.343613][T22121] netlink: 'syz.1.7884': attribute type 1 has an invalid length. [ 204.352138][T22121] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7884'. [ 204.438357][T22135] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 204.485934][T22147] loop3: detected capacity change from 0 to 128 [ 204.509827][T22147] EXT4-fs: Ignoring removed nobh option [ 204.519550][T22147] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.533147][T22147] ext4 filesystem being mounted at /1564/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.574227][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.601585][T22170] siw: device registration error -23 [ 204.669288][T22182] loop2: detected capacity change from 0 to 2048 [ 204.700197][T22182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.829317][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.877328][T22216] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 204.877328][T22216] program syz.3.7926 not setting count and/or reply_len properly [ 204.964536][T22231] loop2: detected capacity change from 0 to 128 [ 204.973270][T22231] EXT4-fs: Ignoring removed nobh option [ 205.013011][T22231] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.025795][T22231] ext4 filesystem being mounted at /1666/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.053087][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.082893][T22246] random: crng reseeded on system resumption [ 205.094450][T22253] loop8: detected capacity change from 0 to 1024 [ 205.102539][T22253] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 205.113606][T22253] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 205.124726][T22253] JBD2: no valid journal superblock found [ 205.130526][T22253] EXT4-fs (loop8): Could not load journal inode [ 205.143671][T22253] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 205.213583][T22269] siw: device registration error -23 [ 205.317206][T22278] random: crng reseeded on system resumption [ 205.387615][T22301] loop1: detected capacity change from 0 to 128 [ 205.394541][T22301] EXT4-fs: Ignoring removed nobh option [ 205.421769][T22310] siw: device registration error -23 [ 205.435512][T22301] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.452200][T22301] ext4 filesystem being mounted at /1646/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.476935][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.495564][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7973'. [ 205.505023][T22323] IPVS: Error joining to the multicast group [ 205.596003][T22343] random: crng reseeded on system resumption [ 205.730810][T22354] siw: device registration error -23 [ 205.737497][T22358] loop9: detected capacity change from 0 to 7 [ 205.744749][T22358] Buffer I/O error on dev loop9, logical block 0, async page read [ 205.753995][T22358] Buffer I/O error on dev loop9, logical block 0, async page read [ 205.755578][T22360] Invalid ELF header magic: != ELF [ 205.762543][T22358] loop9: unable to read partition table [ 205.773978][T22358] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 205.773978][T22358] ) failed (rc=-5) [ 205.867103][T22365] loop1: detected capacity change from 0 to 2048 [ 205.882377][T22368] netlink: 100 bytes leftover after parsing attributes in process `syz.8.7993'. [ 205.883264][T22365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.931769][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.062517][T22387] loop7: detected capacity change from 0 to 1024 [ 206.075300][T22387] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 206.086302][T22387] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 206.101988][T22387] JBD2: no valid journal superblock found [ 206.107827][T22387] EXT4-fs (loop7): Could not load journal inode [ 206.118639][T22384] loop8: detected capacity change from 0 to 8192 [ 206.160214][T22384] loop8: p1 p2 p3 p4 [ 206.162479][T22387] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 206.164339][T22384] loop8: p1 start 51379968 is beyond EOD, truncated [ 206.180537][T22384] loop8: p2 start 2936012800 is beyond EOD, truncated [ 206.187314][T22384] loop8: p3 size 100663552 extends beyond EOD, truncated [ 206.198069][T22392] binfmt_misc: register: failed to install interpreter file ./file0 [ 206.207213][T22384] loop8: p4 size 656640 extends beyond EOD, truncated [ 206.233350][T22398] loop1: detected capacity change from 0 to 1024 [ 206.289109][T22398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.302883][T22398] ext4 filesystem being mounted at /1661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.316123][T22405] loop7: detected capacity change from 0 to 256 [ 206.364993][T22398] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.8007: lblock 8 mapped to illegal pblock 8 (length 8) [ 206.406441][T22398] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.8007: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 206.494921][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.523253][T22425] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8029'. [ 206.604742][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8023'. [ 206.614991][T22433] IPVS: Error joining to the multicast group [ 207.086512][T22506] binfmt_misc: register: failed to install interpreter file ./file0 [ 207.150843][T22516] loop2: detected capacity change from 0 to 1024 [ 207.169597][T22516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.225301][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.258992][ T10] tty tty1: SAK: killed process 22530 (syz.1.8070): by fd#3 [ 207.259088][ T10] tty tty1: SAK: killed process 22533 (syz.1.8070): by fd#3 [ 207.312990][T22544] 9pnet: Could not find request transport: f [ 207.430040][T22568] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8085'. [ 207.450919][T22571] netlink: 'syz.1.8087': attribute type 10 has an invalid length. [ 207.461105][T22571] dummy0: entered promiscuous mode [ 207.469917][T22571] dummy0: entered allmulticast mode [ 207.476271][T22571] team0: Port device dummy0 added [ 207.565641][T22580] 9pnet: Could not find request transport: f [ 207.588354][T22587] loop2: detected capacity change from 0 to 512 [ 207.631241][T22587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.660677][T22587] ext4 filesystem being mounted at /1697/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.687439][T22587] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.8092: corrupted inode contents [ 207.706017][T22587] EXT4-fs (loop2): Remounting filesystem read-only [ 207.714417][T22587] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 207.781131][T22608] loop8: detected capacity change from 0 to 128 [ 207.790305][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.810542][T22608] ext4 filesystem being mounted at /576/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.845226][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 207.845271][ T29] audit: type=1326 audit(1751633041.946:9476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3234e929 code=0x7ffc0000 [ 207.875297][ T29] audit: type=1326 audit(1751633041.946:9477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6f3234e929 code=0x7ffc0000 [ 207.899023][ T29] audit: type=1326 audit(1751633041.946:9478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f3234e963 code=0x7ffc0000 [ 207.922542][ T29] audit: type=1326 audit(1751633041.968:9479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f3234d3df code=0x7ffc0000 [ 207.923657][T22608] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.8102: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 207.946401][ T29] audit: type=1326 audit(1751633042.021:9480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6f3234e9b7 code=0x7ffc0000 [ 207.969132][T22613] loop3: detected capacity change from 0 to 8192 [ 207.988061][ T29] audit: type=1400 audit(1751633042.032:9481): avc: denied { link } for pid=22607 comm="syz.8.8102" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 207.995663][T22608] EXT4-fs error (device loop8) in do_split:2029: Corrupt filesystem [ 208.040071][ T29] audit: type=1326 audit(1751633042.086:9482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f3234d290 code=0x7ffc0000 [ 208.069562][ T29] audit: type=1326 audit(1751633042.086:9483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f3234e52b code=0x7ffc0000 [ 208.093108][ T29] audit: type=1326 audit(1751633042.107:9484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6f3234d58a code=0x7ffc0000 [ 208.116391][ T29] audit: type=1326 audit(1751633042.107:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22612 comm="syz.3.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f3234e52b code=0x7ffc0000 [ 208.154713][T22613] loop3: p1 p2 p3 p4 [ 208.158853][T22613] loop3: p1 start 51379968 is beyond EOD, truncated [ 208.165570][T22613] loop3: p2 start 2936012800 is beyond EOD, truncated [ 208.172443][T22613] loop3: p3 size 100663552 extends beyond EOD, truncated [ 208.177348][T22623] netlink: 'syz.2.8120': attribute type 1 has an invalid length. [ 208.187288][T22623] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8120'. [ 208.187307][T22621] loop7: detected capacity change from 0 to 1024 [ 208.227311][T22613] loop3: p4 size 656640 extends beyond EOD, truncated [ 208.272012][T22634] loop8: detected capacity change from 0 to 512 [ 208.291784][T22634] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.298392][T22634] EXT4-fs: Ignoring removed bh option [ 208.304151][T22634] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 208.314440][T22621] ext4 filesystem being mounted at /705/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.317429][T22621] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 8: comm syz.7.8107: lblock 8 mapped to illegal pblock 8 (length 8) [ 208.327122][T22634] EXT4-fs (loop8): 1 truncate cleaned up [ 208.339551][T22621] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.8107: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 208.413354][T22653] binfmt_misc: register: failed to install interpreter file ./file2 [ 208.421789][T22651] loop7: detected capacity change from 0 to 1024 [ 208.439946][T22651] ext4 filesystem being mounted at /706/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.541589][T22664] loop1: detected capacity change from 0 to 2048 [ 208.548677][T22664] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 208.570389][T22659] SELinux: policydb table sizes (-1123177151,1006851136) do not match mine (6,7) [ 208.579943][T22659] SELinux: failed to load policy [ 208.635753][T22677] loop7: detected capacity change from 0 to 128 [ 208.660035][T22679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8130'. [ 208.752846][T22688] loop1: detected capacity change from 0 to 1024 [ 208.764130][T22690] loop2: detected capacity change from 0 to 512 [ 208.771052][T22690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.782682][T22688] ext4 filesystem being mounted at /1694/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.789329][T22690] EXT4-fs (loop2): 1 truncate cleaned up [ 209.016478][T22731] binfmt_misc: register: failed to install interpreter file ./file2 [ 209.262977][T22758] netlink: 'syz.3.8168': attribute type 4 has an invalid length. [ 209.638248][T22785] netlink: 'syz.3.8180': attribute type 10 has an invalid length. [ 209.647956][T22785] team0: Device dummy0 failed to register rx_handler [ 209.704920][T22795] netlink: 'syz.3.8186': attribute type 1 has an invalid length. [ 209.712782][T22795] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8186'. [ 209.758013][T22803] loop3: detected capacity change from 0 to 1024 [ 209.765271][T22803] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.776938][T22803] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 209.788073][T22808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8191'. [ 209.788118][T22803] JBD2: no valid journal superblock found [ 209.788196][T22803] EXT4-fs (loop3): Could not load journal inode [ 209.820459][T22803] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 209.837652][T22812] loop2: detected capacity change from 0 to 512 [ 209.845854][T22812] EXT4-fs (loop2): orphan cleanup on readonly fs [ 209.853187][T22812] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8193: Failed to acquire dquot type 1 [ 209.865714][T22812] EXT4-fs (loop2): 1 truncate cleaned up [ 209.872522][T22812] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 209.944695][T22824] netlink: 'syz.2.8195': attribute type 10 has an invalid length. [ 210.034181][T22832] netlink: 'syz.8.8200': attribute type 1 has an invalid length. [ 210.042085][T22832] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8200'. [ 210.142477][T22848] loop2: detected capacity change from 0 to 1024 [ 210.153818][T22851] netlink: 'syz.7.8209': attribute type 21 has an invalid length. [ 210.215040][T22848] ext4 filesystem being mounted at /1739/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.377664][T22868] netlink: 'syz.7.8217': attribute type 1 has an invalid length. [ 210.385589][T22868] __nla_validate_parse: 1 callbacks suppressed [ 210.385601][T22868] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8217'. [ 210.452271][T22882] loop7: detected capacity change from 0 to 512 [ 210.477887][T22882] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 210.486545][T22882] EXT4-fs (loop7): orphan cleanup on readonly fs [ 210.489898][T22889] netlink: 'syz.2.8225': attribute type 4 has an invalid length. [ 210.495037][T22882] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.8222: corrupted inode contents [ 210.514636][T22882] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #16: comm syz.7.8222: mark_inode_dirty error [ 210.526410][T22882] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.8222: corrupted inode contents [ 210.538497][T22882] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8222: mark_inode_dirty error [ 210.551376][T22882] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.8222: corrupted inode contents [ 210.563953][T22882] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 210.572770][T22882] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.8222: corrupted inode contents [ 210.585141][T22882] EXT4-fs error (device loop7): ext4_truncate:4597: inode #16: comm syz.7.8222: mark_inode_dirty error [ 210.596724][T22882] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 210.605951][T22882] EXT4-fs (loop7): 1 truncate cleaned up [ 210.611976][ T7564] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 210.896553][T22911] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8234'. [ 211.049792][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.057297][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.064741][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.072214][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.079706][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.087356][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.094899][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.102355][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.104096][T22920] loop3: detected capacity change from 0 to 512 [ 211.109760][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.109784][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.130984][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.138815][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.146424][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.153852][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.161268][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.168703][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.176185][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.183689][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.191111][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.198535][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.206032][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.213468][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.220995][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.228705][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.236180][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.243698][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.251135][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.258625][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.266070][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.273505][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.281073][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.288615][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.296137][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.303567][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.310991][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.318470][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.325884][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.333299][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.340737][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.348179][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.355619][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.363176][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.370621][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 211.378591][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 211.380321][T22920] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.456846][T22920] EXT4-fs (loop3): mount failed [ 211.524910][T22932] netlink: 'syz.3.8242': attribute type 21 has an invalid length. [ 211.695465][T22959] netlink: 'syz.1.8254': attribute type 29 has an invalid length. [ 211.709226][T22959] netlink: 500 bytes leftover after parsing attributes in process `syz.1.8254'. [ 211.723730][T22961] netlink: 264 bytes leftover after parsing attributes in process `syz.3.8255'. [ 211.732955][T22961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8255'. [ 211.823940][T22974] program syz.3.8261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.862469][T22978] dvmrp9: entered allmulticast mode [ 211.885186][T22978] dvmrp9: left allmulticast mode [ 211.933376][T22987] loop7: detected capacity change from 0 to 128 [ 212.070471][T22991] loop3: detected capacity change from 0 to 2048 [ 212.084746][T22987] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 212.111714][T22991] Alternate GPT is invalid, using primary GPT. [ 212.118077][T22991] loop3: p1 p2 p3 [ 212.316468][T23019] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 212.316468][T23019] program syz.3.8291 not setting count and/or reply_len properly [ 212.349008][T23020] netlink: 264 bytes leftover after parsing attributes in process `syz.7.8280'. [ 212.358265][T23020] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8280'. [ 212.377112][T23022] loop3: detected capacity change from 0 to 512 [ 212.398236][T23022] ext4 filesystem being mounted at /1636/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.591885][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 212.591924][ T29] audit: type=1326 audit(1751633047.043:9714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.638917][T23054] loop3: detected capacity change from 0 to 128 [ 212.647215][ T29] audit: type=1326 audit(1751633047.075:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.671041][ T29] audit: type=1326 audit(1751633047.075:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.694733][ T29] audit: type=1326 audit(1751633047.075:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.718389][ T29] audit: type=1326 audit(1751633047.075:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.742001][ T29] audit: type=1326 audit(1751633047.075:9719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.765585][ T29] audit: type=1326 audit(1751633047.075:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.789645][ T29] audit: type=1326 audit(1751633047.075:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.813217][ T29] audit: type=1326 audit(1751633047.075:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.836725][ T29] audit: type=1326 audit(1751633047.075:9723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23050 comm="syz.8.8297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579f5fe929 code=0x7ffc0000 [ 212.866408][T23056] program syz.7.8295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.879776][T23058] tipc: Started in network mode [ 212.884708][T23058] tipc: Node identity 8, cluster identity 3 [ 212.890625][T23058] tipc: Node number set to 8 [ 213.019345][T23072] loop8: detected capacity change from 0 to 2048 [ 213.026278][T23072] EXT4-fs: inline encryption not supported [ 213.033176][T23072] EXT4-fs: Ignoring removed i_version option [ 213.132830][T23088] tipc: Started in network mode [ 213.137736][T23088] tipc: Node identity 8, cluster identity 3 [ 213.144256][T23088] tipc: Node number set to 8 [ 213.309572][T23101] loop7: detected capacity change from 0 to 512 [ 213.334307][T23101] ext4 filesystem being mounted at /744/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.396816][T23118] loop8: detected capacity change from 0 to 512 [ 213.431543][T23118] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.454483][T23118] EXT4-fs (loop8): mount failed [ 213.492680][T23127] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 213.543684][T23131] netlink: 500 bytes leftover after parsing attributes in process `syz.8.8333'. [ 213.594489][T23137] loop8: detected capacity change from 0 to 2048 [ 213.629203][T23149] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8339'. [ 213.645769][T23137] loop8: p1 < > p4 [ 213.653095][T23137] loop8: p4 size 8388608 extends beyond EOD, truncated [ 213.713016][T23163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23163 comm=syz.8.8346 [ 213.739110][T23161] loop1: detected capacity change from 0 to 512 [ 213.766787][T23161] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.804756][T23161] EXT4-fs (loop1): mount failed [ 213.838849][T23182] loop3: detected capacity change from 0 to 512 [ 213.870467][T23182] ext4 filesystem being mounted at /1664/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.967870][ T7609] tipc: Subscription rejected, illegal request [ 214.065618][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8365'. [ 214.155013][T23232] loop1: detected capacity change from 0 to 2048 [ 214.164662][T23234] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 214.172403][T23234] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.175495][T23236] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 214.189619][T23234] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 214.198757][T23232] loop1: p1 < > p4 [ 214.203031][T23232] loop1: p4 size 8388608 extends beyond EOD, truncated [ 214.238187][T23238] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23238 comm=syz.3.8378 [ 214.322325][T23252] loop8: detected capacity change from 0 to 512 [ 214.344893][T23252] ext4 filesystem being mounted at /630/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.518336][ T41] tipc: Subscription rejected, illegal request [ 214.581715][T23285] loop1: detected capacity change from 0 to 512 [ 214.595757][T23285] EXT4-fs: Ignoring removed i_version option [ 214.612301][T23285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.625065][T23285] ext4 filesystem being mounted at /1732/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.640561][T23285] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.8398: corrupted inode contents [ 214.654158][T23285] EXT4-fs (loop1): Remounting filesystem read-only [ 214.677707][T23294] validate_nla: 5 callbacks suppressed [ 214.677724][T23294] netlink: 'syz.7.8403': attribute type 21 has an invalid length. [ 214.695594][T23294] netlink: 'syz.7.8403': attribute type 1 has an invalid length. [ 214.737919][T23306] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 214.786984][ T41] tipc: Subscription rejected, illegal request [ 214.801164][T23318] loop1: detected capacity change from 0 to 1024 [ 214.838943][T23324] loop7: detected capacity change from 0 to 2048 [ 214.857067][T23324] loop7: p1 < > p4 [ 214.861456][T23324] loop7: p4 size 8388608 extends beyond EOD, truncated [ 214.938431][T23344] loop1: detected capacity change from 0 to 512 [ 214.945158][T23344] EXT4-fs: Ignoring removed orlov option [ 214.951316][T23344] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 214.961265][T23344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 214.969528][T23344] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.8433: corrupted in-inode xattr: e_value size too large [ 214.983830][T23344] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.8433: couldn't read orphan inode 15 (err -117) [ 215.075728][T23353] xt_CT: No such helper "pptp" [ 215.098855][ T7563] tipc: Subscription rejected, illegal request [ 215.133743][T23363] loop2: detected capacity change from 0 to 2048 [ 215.163957][T23363] loop2: p1 < > p4 [ 215.168304][T23363] loop2: p4 size 8388608 extends beyond EOD, truncated [ 215.213579][T23371] loop7: detected capacity change from 0 to 1764 [ 215.258717][T23388] loop2: detected capacity change from 0 to 1024 [ 215.286870][T23388] ext4 filesystem being mounted at /1768/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.303493][T23388] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8442: bg 0: block 393: padding at end of block bitmap is not set [ 215.319280][T23388] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 8 with error 117 [ 215.332425][T23388] EXT4-fs (loop2): This should not happen!! Data will be lost [ 215.332425][T23388] [ 215.378603][T23398] loop1: detected capacity change from 0 to 764 [ 215.389260][T23398] rock: directory entry would overflow storage [ 215.395456][T23398] rock: sig=0x5850, size=36, remaining=7 [ 215.459793][T23408] loop8: detected capacity change from 0 to 512 [ 215.474417][T23408] EXT4-fs: Ignoring removed i_version option [ 215.481267][T23408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.509125][T23418] loop2: detected capacity change from 0 to 1024 [ 215.523384][T23421] loop1: detected capacity change from 0 to 1024 [ 215.533390][T23408] ext4 filesystem being mounted at /638/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.564628][T23421] ext4 filesystem being mounted at /1756/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.565432][T23408] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.8451: corrupted inode contents [ 215.586879][T23421] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8458: bg 0: block 393: padding at end of block bitmap is not set [ 215.588645][T23408] EXT4-fs (loop8): Remounting filesystem read-only [ 215.608522][T23432] netlink: 'syz.3.8461': attribute type 21 has an invalid length. [ 215.608569][T23421] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 8 with error 117 [ 215.629450][T23421] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.629450][T23421] [ 215.639174][T23432] __nla_validate_parse: 5 callbacks suppressed [ 215.639190][T23432] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8461'. [ 215.639231][T23432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8461'. [ 215.686817][T23439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.698144][T23439] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 215.709114][T23439] bond0: (slave gre0): Error -95 calling set_mac_address [ 215.735457][T23439] loop3: detected capacity change from 0 to 512 [ 215.751730][T23439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.777495][T23439] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.8462: corrupted xattr entries [ 215.795651][T23439] EXT4-fs (loop3): Remounting filesystem read-only [ 215.802387][T23439] EXT4-fs (loop3): 1 truncate cleaned up [ 215.833790][T23458] loop8: detected capacity change from 0 to 1024 [ 215.985734][T23496] loop8: detected capacity change from 0 to 256 [ 215.997530][T23496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.008112][T23496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.061282][T23507] loop7: detected capacity change from 0 to 764 [ 216.070336][T23507] rock: directory entry would overflow storage [ 216.076602][T23507] rock: sig=0x5850, size=36, remaining=7 [ 216.128238][T23513] syzkaller1: entered promiscuous mode [ 216.133861][T23513] syzkaller1: entered allmulticast mode [ 216.288079][T23534] loop3: detected capacity change from 0 to 1024 [ 216.304395][T23534] EXT4-fs mount: 46 callbacks suppressed [ 216.304412][T23534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.322911][T23534] ext4 filesystem being mounted at /1692/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.337330][T23534] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8505: bg 0: block 393: padding at end of block bitmap is not set [ 216.354015][T23534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 8 with error 117 [ 216.366461][T23534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.366461][T23534] [ 216.392633][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.427572][T23542] loop3: detected capacity change from 0 to 764 [ 216.437833][T23542] rock: directory entry would overflow storage [ 216.444050][T23542] rock: sig=0x5850, size=36, remaining=7 [ 216.522848][T23561] loop8: detected capacity change from 0 to 512 [ 216.532190][T23561] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 216.569645][T23550] loop7: detected capacity change from 0 to 1024 [ 216.619376][T23550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.626952][T23575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8525'. [ 216.653216][T13631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.783371][T23598] loop1: detected capacity change from 0 to 4096 [ 217.267409][T23669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.307730][T23669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.546850][T23671] loop3: detected capacity change from 0 to 512 [ 217.553919][T23671] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 217.833895][T23690] loop3: detected capacity change from 0 to 4096 [ 217.844325][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 217.844339][ T29] audit: type=1107 audit(1751633052.675:10049): pid=23695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 217.880858][T23698] loop2: detected capacity change from 0 to 512 [ 217.887627][T23698] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 217.965245][ T29] audit: type=1400 audit(1751633052.804:10050): avc: denied { tracepoint } for pid=23707 comm="syz.1.8587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 217.993479][ T29] audit: type=1400 audit(1751633052.826:10051): avc: denied { read } for pid=23707 comm="syz.1.8587" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.016717][ T29] audit: type=1400 audit(1751633052.826:10052): avc: denied { open } for pid=23707 comm="syz.1.8587" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.040633][ T29] audit: type=1400 audit(1751633052.836:10053): avc: denied { create } for pid=23711 comm="syz.8.8590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.084421][T23712] atomic_op ffff88811af65d28 conn xmit_atomic 0000000000000000 [ 218.090522][ T29] audit: type=1400 audit(1751633052.933:10054): avc: denied { bind } for pid=23711 comm="syz.8.8590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.111459][ T29] audit: type=1400 audit(1751633052.933:10055): avc: denied { write } for pid=23711 comm="syz.8.8590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.132591][ T29] audit: type=1400 audit(1751633052.987:10056): avc: denied { write } for pid=23713 comm="syz.2.8589" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 218.164041][T23720] syzkaller1: entered promiscuous mode [ 218.169795][T23720] syzkaller1: entered allmulticast mode [ 218.208389][ T29] audit: type=1400 audit(1751633053.072:10057): avc: denied { create } for pid=23723 comm="syz.8.8594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.238629][ T29] audit: type=1400 audit(1751633053.094:10058): avc: denied { map } for pid=23717 comm="syz.1.8601" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 218.349631][T23736] loop3: detected capacity change from 0 to 512 [ 218.353644][T23738] loop1: detected capacity change from 0 to 512 [ 218.357135][T23736] EXT4-fs: Ignoring removed orlov option [ 218.363487][T23738] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 218.368442][T23736] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.392495][T23736] EXT4-fs (loop3): 1 truncate cleaned up [ 218.404264][T23736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.494673][T23748] loop8: detected capacity change from 0 to 1024 [ 218.533625][T23748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.569219][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.596789][T16590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.626533][T23760] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=23760 comm=syz.1.8610 [ 218.643308][T23759] rdma_op ffff88811af65180 conn xmit_rdma 0000000000000000 [ 218.735351][T23778] netlink: 'syz.1.8619': attribute type 39 has an invalid length. [ 218.948769][T23820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8641'. [ 218.957939][T23820] netlink: 'syz.3.8641': attribute type 7 has an invalid length. [ 218.965666][T23820] netlink: 'syz.3.8641': attribute type 8 has an invalid length. [ 218.974203][T23820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8641'. [ 218.987189][T23820] 1ªX¹¦D: entered promiscuous mode [ 218.995314][T23820] batadv_slave_1: entered promiscuous mode [ 219.012999][T23820] erspan0: entered promiscuous mode [ 219.018875][T23820] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.029572][T23820] hsr2: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 219.131191][T23841] loop1: detected capacity change from 0 to 256 [ 219.143385][T23843] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 219.151879][T23843] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 219.175732][T23843] wireguard1: entered promiscuous mode [ 219.181579][T23843] wireguard1: entered allmulticast mode [ 219.211882][T23853] syzkaller1: entered promiscuous mode [ 219.217412][T23853] syzkaller1: entered allmulticast mode [ 219.324118][T23861] bridge_slave_0: entered promiscuous mode [ 219.381752][T23871] usb usb1: usbfs: process 23871 (syz.3.8665) did not claim interface 0 before use [ 219.641033][T23900] loop2: detected capacity change from 0 to 512 [ 219.650854][T23900] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.8678: corrupted in-inode xattr: invalid ea_ino [ 219.671001][T23900] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.8678: couldn't read orphan inode 15 (err -117) [ 219.686984][T23904] binfmt_misc: register: failed to install interpreter file ./file0 [ 219.696566][T23900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.759537][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.768748][T23910] loop8: detected capacity change from 0 to 1024 [ 219.782107][T23910] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.795612][T23910] ext4 filesystem being mounted at /673/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.826877][T23910] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 219.853176][T23910] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 219.865679][T23910] EXT4-fs (loop8): This should not happen!! Data will be lost [ 219.865679][T23910] [ 219.875384][T23910] EXT4-fs (loop8): Total free blocks count 0 [ 219.881382][T23910] EXT4-fs (loop8): Free/Dirty block details [ 219.887276][T23910] EXT4-fs (loop8): free_blocks=4293918720 [ 219.893024][T23910] EXT4-fs (loop8): dirty_blocks=16 [ 219.898195][T23910] EXT4-fs (loop8): Block reservation details [ 219.904190][T23910] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 219.938001][T16590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.267971][T23954] dummy0: left promiscuous mode [ 220.273414][T23954] dummy0: left allmulticast mode [ 220.280146][T23954] team0: Port device dummy0 removed [ 220.291853][T23954] vlan2: left allmulticast mode [ 220.296796][T23954] bond0: left allmulticast mode [ 220.301846][T23954] vlan2: left promiscuous mode [ 220.306613][T23954] bond0: left promiscuous mode [ 220.311647][T23954] bridge0: port 1(vlan2) entered disabled state [ 220.320650][T23956] loop2: detected capacity change from 0 to 256 [ 220.564033][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8713'. [ 220.589147][T23985] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8709'. [ 220.766110][T23999] tipc: Started in network mode [ 220.771067][T23999] tipc: Node identity 7, cluster identity 4711 [ 220.777271][T23999] tipc: Node number set to 7 [ 220.847809][T24016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.856658][T24014] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8728'. [ 220.861426][T24016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.247722][T24027] binfmt_misc: register: failed to install interpreter file ./file0 [ 221.438210][T24036] syzkaller1: entered promiscuous mode [ 221.443751][T24036] syzkaller1: entered allmulticast mode [ 221.950350][T24058] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8758'. [ 221.960094][T24058] netlink: 'syz.8.8758': attribute type 7 has an invalid length. [ 221.967861][T24058] netlink: 'syz.8.8758': attribute type 8 has an invalid length. [ 221.975582][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8758'. [ 221.985496][T24059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.990453][T24058] batadv_slave_1: entered promiscuous mode [ 222.000793][T24058] erspan0: entered promiscuous mode [ 222.001104][T24059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.008057][T24058] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 222.023081][T24058] Cannot create hsr debugfs directory [ 231.546872][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 231.546888][ T29] audit: type=1400 audit(1751633067.374:10337): avc: denied { execmem } for pid=24081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 231.579051][ T29] audit: type=1400 audit(1751633067.417:10338): avc: denied { mounton } for pid=24082 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 231.601040][ T29] audit: type=1400 audit(1751633067.417:10339): avc: denied { sys_module } for pid=24082 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 231.754179][T24082] chnl_net:caif_netlink_parms(): no params data found [ 231.794807][T24082] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.802029][T24082] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.809391][T24082] bridge_slave_0: entered allmulticast mode [ 231.816507][T24082] bridge_slave_0: entered promiscuous mode [ 231.823277][T24082] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.830355][T24082] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.837490][T24082] bridge_slave_1: entered allmulticast mode [ 231.843928][T24082] bridge_slave_1: entered promiscuous mode [ 231.859011][T24082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.869160][T24082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.888630][T24082] team0: Port device team_slave_0 added [ 231.895359][T24082] team0: Port device team_slave_1 added [ 231.910874][T24082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.917895][T24082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.943887][T24082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.955044][T24082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.962076][T24082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.988063][T24082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.001480][ T7564] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.026384][T24082] hsr_slave_0: entered promiscuous mode [ 232.032401][T24082] hsr_slave_1: entered promiscuous mode [ 232.038418][T24082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.046493][T24082] Cannot create hsr debugfs directory [ 232.060139][ T7564] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.102858][ T7564] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.124053][T24082] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 232.132392][T24082] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 232.140854][T24082] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 232.151560][ T7564] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.162765][T24082] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 232.177510][T24082] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.184665][T24082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.191984][T24082] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.199038][T24082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.247327][T24082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.249897][ T29] audit: type=1326 audit(1751633068.136:10340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 232.261487][T24082] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.285729][ T29] audit: type=1326 audit(1751633068.168:10341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 232.309669][ T29] audit: type=1326 audit(1751633068.168:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 232.333261][ T29] audit: type=1326 audit(1751633068.168:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 232.361458][ T29] audit: type=1326 audit(1751633068.254:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 232.385203][ T29] audit: type=1326 audit(1751633068.254:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 232.408804][ T29] audit: type=1326 audit(1751633068.254:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24106 comm="syz.2.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2945de929 code=0x7ffc0000 [ 232.557356][ T7564] bond0 (unregistering): Released all slaves [ 232.566488][ T7564] bond1 (unregistering): Released all slaves [ 232.614816][T24082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.633727][ T7564] tipc: Disabling bearer [ 232.638747][ T7564] tipc: Left network mode [ 232.739596][ T7564] hsr_slave_0: left promiscuous mode [ 232.747044][ T7564] hsr_slave_1: left promiscuous mode [ 232.756190][T24150] loop3: detected capacity change from 0 to 512 [ 232.763391][T24150] EXT4-fs: Ignoring removed bh option [ 232.763775][ T7564] veth1_vlan: left promiscuous mode [ 232.769166][T24150] EXT4-fs: journaled quota format not specified [ 232.774596][ T7564] veth0_vlan: left promiscuous mode [ 232.800973][T24153] loop2: detected capacity change from 0 to 128 [ 232.815249][T24153] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 232.828403][T24153] ext4 filesystem being mounted at /1848/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.878067][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.974074][T24177] loop3: detected capacity change from 0 to 512 [ 232.981369][T24177] EXT4-fs: Ignoring removed orlov option [ 232.989280][T24177] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 233.011996][T24177] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 233.030376][T24177] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.8787: corrupted in-inode xattr: e_value size too large [ 233.031956][T24082] veth0_vlan: entered promiscuous mode [ 233.051074][T24177] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.8787: couldn't read orphan inode 15 (err -117) [ 233.065255][T24177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.084011][ T7564] IPVS: stop unused estimator thread 0... [ 233.088625][T24082] veth1_vlan: entered promiscuous mode [ 233.103940][T24082] veth0_macvtap: entered promiscuous mode [ 233.111664][T24082] veth1_macvtap: entered promiscuous mode [ 233.120633][T24177] EXT4-fs error (device loop3): ext4_check_dx_root:2203: inode #2: comm syz.3.8787: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 233.140831][T24082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.140844][T24188] loop2: detected capacity change from 0 to 1024 [ 233.157337][T24082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.173535][T24082] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.182296][T24082] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.191741][T24082] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.194930][T24188] EXT4-fs: Ignoring removed orlov option [ 233.200525][T24082] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.223777][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.227406][T24188] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 233.255688][T24188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.278643][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8795'. [ 233.354861][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.470043][T24236] loop3: detected capacity change from 0 to 128 [ 233.520033][T24241] loop8: detected capacity change from 0 to 1024 [ 233.528121][T24236] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 233.571335][T24241] EXT4-fs: Ignoring removed orlov option [ 233.591504][T24236] ext4 filesystem being mounted at /1762/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.591656][T24241] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 233.657950][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.673142][T24241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.783204][T16590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.177377][T24302] loop9: detected capacity change from 0 to 512 [ 234.192744][T24302] EXT4-fs (loop9): orphan cleanup on readonly fs [ 234.210867][T24302] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.8841: bad orphan inode 13 [ 234.229991][T24302] ext4_test_bit(bit=12, block=18) = 1 [ 234.235637][T24302] is_bad_inode(inode)=0 [ 234.239847][T24302] NEXT_ORPHAN(inode)=2130706432 [ 234.244972][T24302] max_ino=32 [ 234.248190][T24302] i_nlink=1 [ 234.253942][T24302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.291430][T24082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.341813][T24314] loop1: detected capacity change from 0 to 512 [ 234.358282][T24314] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 234.385132][T24314] EXT4-fs (loop1): 1 truncate cleaned up [ 234.402202][T24314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.415208][T24322] loop9: detected capacity change from 0 to 1024 [ 234.431191][T24322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.455553][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.484086][T24082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.498711][T24326] 9p: Unknown access argument AD: -22 [ 234.605527][T24346] loop2: detected capacity change from 0 to 1024 [ 234.612725][T24346] EXT4-fs: Ignoring removed bh option [ 234.645892][T24346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.673114][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.675059][T24355] loop3: detected capacity change from 0 to 512 [ 234.690099][T24355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 234.710970][T24355] EXT4-fs (loop3): 1 truncate cleaned up [ 234.717174][T24355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.770076][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.796108][T24373] loop3: detected capacity change from 0 to 128 [ 234.805753][T24373] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.819048][T24376] netlink: 'syz.8.8871': attribute type 39 has an invalid length. [ 234.901999][T24392] loop2: detected capacity change from 0 to 512 [ 234.923803][T24395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8878'. [ 234.933082][T24395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8878'. [ 234.942766][T24395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8878'. [ 234.958352][T24392] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.992093][T24392] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.8875: bad orphan inode 13 [ 235.002373][T24405] loop3: detected capacity change from 0 to 1024 [ 235.037043][T24413] program syz.9.8887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.037733][T24405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.054312][T24392] ext4_test_bit(bit=12, block=18) = 1 [ 235.064105][T24392] is_bad_inode(inode)=0 [ 235.068299][T24392] NEXT_ORPHAN(inode)=2130706432 [ 235.073242][T24392] max_ino=32 [ 235.076456][T24392] i_nlink=1 [ 235.096928][T24392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.148718][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.158730][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.259330][T24436] 9p: Unknown access argument AD: -22 [ 235.391636][T24449] loop9: detected capacity change from 0 to 512 [ 235.404168][T24449] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.418879][T24449] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 235.483834][T24449] EXT4-fs (loop9): 1 truncate cleaned up [ 235.490036][T24449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.553690][T24082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.573857][T24467] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8911'. [ 235.692754][T24490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8923'. [ 235.704499][T24492] loop8: detected capacity change from 0 to 512 [ 235.711258][T24492] journal_path: Non-blockdev passed as './bus' [ 235.717908][T24492] EXT4-fs: error: could not find journal device path [ 235.784331][T24503] vhci_hcd: invalid port number 65 [ 236.327288][T24516] loop3: detected capacity change from 0 to 1024 [ 236.334042][T24516] EXT4-fs: Ignoring removed bh option [ 236.359465][T24516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.385986][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.406147][T24522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8937'. [ 236.415788][T24522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8937'. [ 236.425031][T24522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8937'. [ 236.455337][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 236.455352][ T29] audit: type=1400 audit(1751633072.631:10506): avc: denied { setcurrent } for pid=24525 comm="syz.3.8938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.482002][ T29] audit: type=1401 audit(1751633072.631:10507): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 236.507159][T24533] SELinux: syz.3.8940 (24533) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 236.510637][ T29] audit: type=1400 audit(1751633072.653:10508): avc: denied { create } for pid=24528 comm="syz.1.8939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.540654][ T29] audit: type=1400 audit(1751633072.653:10509): avc: denied { connect } for pid=24528 comm="syz.1.8939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.560737][ T29] audit: type=1400 audit(1751633072.653:10510): avc: denied { getopt } for pid=24528 comm="syz.1.8939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.580621][ T29] audit: type=1326 audit(1751633072.706:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 236.604427][ T29] audit: type=1326 audit(1751633072.706:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 236.628229][ T29] audit: type=1326 audit(1751633072.706:10513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24530 comm="syz.1.8941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f9beabee929 code=0x7ffc0000 [ 236.659721][ T29] audit: type=1326 audit(1751633072.782:10514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.9.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbbeae929 code=0x7ffc0000 [ 236.683514][ T29] audit: type=1326 audit(1751633072.782:10515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.9.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbbeae929 code=0x7ffc0000 [ 236.731824][T24548] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 236.759102][T24550] vhci_hcd: invalid port number 65 [ 236.841441][T24566] loop2: detected capacity change from 0 to 512 [ 236.861290][T24576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8962'. [ 236.877708][T24566] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.895241][T24566] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.910952][T24566] EXT4-fs (loop2): 1 truncate cleaned up [ 236.917004][T24566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.934224][T24587] SELinux: syz.9.8967 (24587) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 236.949254][T24586] batadv_slave_0: entered promiscuous mode [ 237.019381][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.056149][T24604] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 237.088883][T24611] netlink: 'syz.1.8979': attribute type 2 has an invalid length. [ 237.097249][T24611] netlink: 'syz.1.8979': attribute type 1 has an invalid length. [ 237.236380][T24638] loop2: detected capacity change from 0 to 1024 [ 237.247572][T24638] EXT4-fs: Ignoring removed orlov option [ 237.275142][T24638] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 237.301950][T24638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.369180][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.385461][T24662] loop8: detected capacity change from 0 to 512 [ 237.392118][T24662] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.427350][T24662] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 237.470787][T24662] EXT4-fs (loop8): 1 truncate cleaned up [ 237.482495][T24662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.520181][T24677] loop1: detected capacity change from 0 to 2048 [ 237.580430][T16590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.592355][T24677] loop1: p1 < > p2 < > p3 p4 < > [ 237.597450][T24677] loop1: partition table partially beyond EOD, truncated [ 237.606263][T24677] loop1: p1 start 2305 is beyond EOD, truncated [ 237.612589][T24677] loop1: p2 start 4294902784 is beyond EOD, truncated [ 237.619695][T24677] loop1: p3 start 3724543488 is beyond EOD, truncated [ 237.679081][T24708] loop9: detected capacity change from 0 to 512 [ 237.687947][T24708] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.9033: iget: bad i_size value: 38620345925642 [ 237.704708][T24708] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.9033: couldn't read orphan inode 15 (err -117) [ 237.718136][T24708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.905031][T24720] tipc: Started in network mode [ 237.910773][T24720] tipc: Node identity ac14140f, cluster identity 4711 [ 237.932313][T24720] tipc: New replicast peer: 0.0.255.255 [ 237.938718][T24720] tipc: Enabled bearer , priority 10 [ 238.121040][ T7565] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:22: bg 0: block 5: invalid block bitmap [ 238.134769][ T7565] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 238.147334][ T7565] EXT4-fs (loop9): This should not happen!! Data will be lost [ 238.147334][ T7565] [ 238.157063][ T7565] EXT4-fs (loop9): Total free blocks count 0 [ 238.163130][ T7565] EXT4-fs (loop9): Free/Dirty block details [ 238.169160][ T7565] EXT4-fs (loop9): free_blocks=0 [ 238.174143][ T7565] EXT4-fs (loop9): dirty_blocks=16016 [ 238.179529][ T7565] EXT4-fs (loop9): Block reservation details [ 238.185518][ T7565] EXT4-fs (loop9): i_reserved_data_blocks=16016 [ 238.199495][ T7565] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 238.239872][T24708] ================================================================== [ 238.247993][T24708] BUG: KCSAN: data-race in xas_find_marked / xas_init_marks [ 238.255302][T24708] [ 238.257626][T24708] read-write to 0xffff8881196026c8 of 8 bytes by task 24716 on cpu 1: [ 238.265779][T24708] xas_init_marks+0x18a/0x320 [ 238.270490][T24708] xas_store+0x3cf/0xce0 [ 238.274741][T24708] delete_from_page_cache_batch+0x30a/0x6f0 [ 238.280660][T24708] truncate_inode_pages_range+0x1b8/0x690 [ 238.286486][T24708] truncate_pagecache+0x53/0x70 [ 238.291359][T24708] ext4_setattr+0xa2e/0xfd0 [ 238.295874][T24708] notify_change+0x809/0x890 [ 238.300474][T24708] do_ftruncate+0x34b/0x450 [ 238.304996][T24708] __x64_sys_ftruncate+0x68/0xc0 [ 238.309955][T24708] x64_sys_call+0xd65/0x2fb0 [ 238.314627][T24708] do_syscall_64+0xd2/0x200 [ 238.319154][T24708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.325068][T24708] [ 238.327409][T24708] read to 0xffff8881196026c8 of 8 bytes by task 24708 on cpu 0: [ 238.335054][T24708] xas_find_marked+0x218/0x620 [ 238.339844][T24708] find_get_entry+0x5d/0x380 [ 238.344526][T24708] filemap_get_folios_tag+0x13b/0x210 [ 238.349962][T24708] mpage_prepare_extent_to_map+0x320/0xaa0 [ 238.355776][T24708] ext4_do_writepages+0x6ea/0x21c0 [ 238.360895][T24708] ext4_writepages+0x176/0x300 [ 238.365662][T24708] do_writepages+0x1c6/0x310 [ 238.370259][T24708] file_write_and_wait_range+0x156/0x2c0 [ 238.375891][T24708] generic_buffers_fsync_noflush+0x45/0x120 [ 238.381875][T24708] ext4_sync_file+0x1ab/0x690 [ 238.386575][T24708] vfs_fsync_range+0x10a/0x130 [ 238.391358][T24708] ext4_buffered_write_iter+0x34f/0x3c0 [ 238.396899][T24708] ext4_file_write_iter+0x383/0xf00 [ 238.402093][T24708] vfs_write+0x4a0/0x8e0 [ 238.406337][T24708] ksys_write+0xda/0x1a0 [ 238.410581][T24708] __x64_sys_write+0x40/0x50 [ 238.415169][T24708] x64_sys_call+0x2cdd/0x2fb0 [ 238.419842][T24708] do_syscall_64+0xd2/0x200 [ 238.424339][T24708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.430224][T24708] [ 238.432534][T24708] value changed: 0xffffffffffffffff -> 0xffffffffffffff80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 238.439628][T24708] [ 238.441937][T24708] Reported by Kernel Concurrency Sanitizer on: [ 238.448099][T24708] CPU: 0 UID: 0 PID: 24708 Comm: syz.9.9033 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 238.460606][T24708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.470658][T24708] ================================================================== [ 238.875719][ T3393] tipc: Node number set to 2886997007 [ 238.916755][ T7609] erspan0 (unregistering): left promiscuous mode [ 238.924519][ T7609] 1ªX¹¦D (unregistering): left promiscuous mode [ 238.998269][ T7609] bond0 (unregistering): left promiscuous mode [ 239.004649][ T7609] bond0 (unregistering): Released all slaves [ 239.034870][ T7609] tipc: Left network mode [ 239.062445][ T7609] batadv_slave_1: left promiscuous mode [ 239.069591][ T7609] dummy0: left promiscuous mode [ 239.075736][ T7609] hsr_slave_0: left promiscuous mode [ 239.081323][ T7609] hsr_slave_1: left promiscuous mode [ 239.107204][ T7605] smc: removing ib device syz! [ 239.343307][ T7609] IPVS: stop unused estimator thread 0... [ 239.410413][ T7609] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.464570][ T7609] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.510831][ T7609] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.548497][ T7609] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.605053][ T7609] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.640586][ T7609] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.677792][ T7609] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.743062][ T7609] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.802019][ T7609] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.837571][ T7609] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.884162][ T7609] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.921702][ T7609] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.968193][ T7609] bridge_slave_1: left allmulticast mode [ 239.973852][ T7609] bridge_slave_1: left promiscuous mode [ 239.979613][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.987153][ T7609] bridge_slave_0: left promiscuous mode [ 239.992829][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.004550][ T7609] bridge_slave_1: left allmulticast mode [ 240.010205][ T7609] bridge_slave_1: left promiscuous mode [ 240.015955][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.023670][ T7609] bridge_slave_0: left allmulticast mode [ 240.029360][ T7609] bridge_slave_0: left promiscuous mode [ 240.035051][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.100245][ T7609] erspan0 (unregistering): left promiscuous mode [ 240.184758][ T7609] bond0 (unregistering): Released all slaves [ 240.257010][ T7609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.267196][ T7609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.276727][ T7609] bond0 (unregistering): Released all slaves [ 240.340751][ T7609] tipc: Left network mode [ 240.345261][ T7609] tipc: Disabling bearer [ 240.350212][ T7609] tipc: Left network mode [ 240.359598][ T7609] IPVS: stopping backup sync thread 3525 ... [ 240.451781][ T7609] batadv_slave_1: left promiscuous mode [ 240.459239][ T7609] hsr_slave_0: left promiscuous mode [ 240.464993][ T7609] hsr_slave_1: left promiscuous mode [ 240.470581][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.477959][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.486129][ T7609] hsr_slave_0: left promiscuous mode [ 240.491873][ T7609] hsr_slave_1: left promiscuous mode [ 240.498876][ T7609] hsr_slave_0: left promiscuous mode [ 240.504572][ T7609] hsr_slave_1: left promiscuous mode [ 240.510312][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.517743][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.525323][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.532717][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.546323][ T7609] veth1_macvtap: left promiscuous mode [ 240.551861][ T7609] veth0_macvtap: left promiscuous mode [ 240.557364][ T7609] veth1_vlan: left promiscuous mode [ 240.562647][ T7609] veth0_vlan: left promiscuous mode [ 240.568133][ T7609] veth1_vlan: left promiscuous mode [ 240.573432][ T7609] veth0_vlan: left promiscuous mode [ 240.578963][ T7609] veth1_macvtap: left promiscuous mode [ 240.584766][ T7609] veth0_macvtap: left promiscuous mode [ 240.590329][ T7609] veth1_vlan: left promiscuous mode [ 240.595594][ T7609] veth0_vlan: left promiscuous mode [ 240.687030][ T7609] team0 (unregistering): Port device team_slave_1 removed [ 240.696291][ T7609] team0 (unregistering): Port device team_slave_0 removed [ 240.723658][ T7609] pim6reg (unregistering): left allmulticast mode [ 240.750930][ T7565] smc: removing ib device syz1 [ 240.780971][ T7609] team0 (unregistering): Port device team_slave_1 removed [ 240.790111][ T7609] team0 (unregistering): Port device team_slave_0 removed [ 240.817728][ T36] syz1: Port: 1 Link DOWN [ 241.415881][ T7609] IPVS: stop unused estimator thread 0...