last executing test programs: 58.813347382s ago: executing program 3 (id=3457): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 58.794887993s ago: executing program 3 (id=3459): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}], 0x20, 0x240000c0}}], 0x1, 0x4) 58.731588624s ago: executing program 3 (id=3463): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x7ff}}}, @TCA_RATE={0x6, 0x5, {0x6, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 58.665159516s ago: executing program 3 (id=3466): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xa84b, 0xc742, 0x81, 0x1}) 58.616865506s ago: executing program 3 (id=3472): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "234cdb"}]}}}}}}}}, 0x0) 58.371253151s ago: executing program 3 (id=3490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) 58.351500081s ago: executing program 32 (id=3490): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) 15.648794739s ago: executing program 2 (id=5688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8864, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2f, 0x3c, 0x63, 0x0, 0x49, 0x6, 0x0, @empty, @broadcast}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x4e22, 0x4e22, 0x4}}}}}}, 0x0) 15.61216025s ago: executing program 2 (id=5690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/113}, 0x20) 15.584851321s ago: executing program 2 (id=5691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x14002000) 15.416900174s ago: executing program 2 (id=5697): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 15.337602456s ago: executing program 2 (id=5700): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2001}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 15.14485297s ago: executing program 2 (id=5710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000130a0103"], 0x20}}, 0x24004050) 15.144758979s ago: executing program 33 (id=5710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000130a0103"], 0x20}}, 0x24004050) 963.035901ms ago: executing program 1 (id=6425): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nodelalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000180)='./file1\x00') 943.821021ms ago: executing program 4 (id=6426): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000640)=0x2d73, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x0, 0x40002140, 0x0, 0x0) 900.325773ms ago: executing program 4 (id=6430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) 825.174274ms ago: executing program 4 (id=6431): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x28, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044181}, 0x4000080) 824.940774ms ago: executing program 4 (id=6433): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 810.024424ms ago: executing program 1 (id=6434): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x25dfdbfc, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x20000000) 778.424175ms ago: executing program 4 (id=6437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x8000000000000000, 0x6, 0x93b1, 0xb, 0x2, 0x80, 0x6, 0x61, 0x35}) 694.642586ms ago: executing program 1 (id=6439): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 659.666927ms ago: executing program 0 (id=6440): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 601.176508ms ago: executing program 0 (id=6442): r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 591.061538ms ago: executing program 4 (id=6443): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x2, 0x102}, {0x0, 0x0, 0x2000}], 0x2) 579.982919ms ago: executing program 0 (id=6445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) timerfd_create(0x0, 0x0) 523.83983ms ago: executing program 1 (id=6446): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 523.69379ms ago: executing program 0 (id=6447): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xfe) 523.517529ms ago: executing program 0 (id=6448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80]}, 0x8, 0x1800) 508.05362ms ago: executing program 1 (id=6449): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r1}}, 0x18) 507.73552ms ago: executing program 1 (id=6450): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), 0x0}, 0x20) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x0) 489.70449ms ago: executing program 0 (id=6451): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000007800)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x7f, @private0, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="05d8", 0x2}], 0x1}}], 0x1, 0x800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0x0, 0x7ffffffe}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 182.362066ms ago: executing program 6 (id=6461): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 171.652806ms ago: executing program 6 (id=6462): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040), 0x3b) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) close(r1) 110.128397ms ago: executing program 6 (id=6463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) 96.501108ms ago: executing program 6 (id=6465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x20) 88.497808ms ago: executing program 5 (id=6466): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 81.892498ms ago: executing program 6 (id=6467): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000580)={0x1d, r1, 0x1, {0x2, 0xff, 0x1}}, 0x18) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0xf0, 0x3}}, 0x18) 72.004928ms ago: executing program 5 (id=6468): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 66.972858ms ago: executing program 6 (id=6469): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x9, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x2}}]}, 0x48}}, 0x4040014) 55.594899ms ago: executing program 5 (id=6470): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) 40.789469ms ago: executing program 5 (id=6471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x1, 0x40, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LABEL={0x14}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x20000040) 327.11µs ago: executing program 5 (id=6472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 0s ago: executing program 5 (id=6473): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) kernel console output (not intermixed with test programs): =4286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.009356][T12987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.022356][T13002] netlink: 'syz.1.4293': attribute type 2 has an invalid length. [ 119.036140][ T29] audit: type=1400 audit(1757607269.401:3566): avc: denied { write } for pid=12999 comm="syz.0.4292" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 119.060887][T13000] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 119.062598][ T29] audit: type=1400 audit(1757607269.432:3567): avc: denied { execute } for pid=13005 comm="syz.1.4295" name="file0" dev="tmpfs" ino=4297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.069324][T13000] FAT-fs (loop0): Filesystem has been set read-only [ 119.099272][ T29] audit: type=1400 audit(1757607269.432:3568): avc: denied { execute_no_trans } for pid=13005 comm="syz.1.4295" path="/840/file0" dev="tmpfs" ino=4297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.124803][T12987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.183141][ T57] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.198974][ T57] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.212005][ T57] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.220729][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.233472][ T29] audit: type=1400 audit(1757607269.611:3569): avc: denied { create } for pid=13021 comm="syz.0.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.268890][ T29] audit: type=1400 audit(1757607269.632:3570): avc: denied { connect } for pid=13021 comm="syz.0.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.288712][ T29] audit: type=1400 audit(1757607269.632:3571): avc: denied { ioctl } for pid=13021 comm="syz.0.4303" path="socket:[35891]" dev="sockfs" ino=35891 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.363075][ T29] audit: type=1400 audit(1757607269.737:3572): avc: denied { write } for pid=13033 comm="syz.1.4309" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.387236][T13034] vhci_hcd: default hub control req: 050c v0001 i0004 l0 [ 119.420061][ T29] audit: type=1400 audit(1757607269.800:3573): avc: denied { read } for pid=13037 comm="syz.4.4312" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.443406][ T29] audit: type=1400 audit(1757607269.800:3574): avc: denied { open } for pid=13037 comm="syz.4.4312" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.541336][T13051] blkio.reset_stats is deprecated [ 119.552967][T13049] loop5: detected capacity change from 0 to 1024 [ 119.605524][T13049] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.4314: Failed to acquire dquot type 0 [ 119.636755][T13049] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 119.687839][T13049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4314: corrupted inode contents [ 119.728218][T13049] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.4314: mark_inode_dirty error [ 119.756485][T13049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4314: corrupted inode contents [ 119.775457][T13049] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.4314: mark_inode_dirty error [ 119.792400][T13049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4314: corrupted inode contents [ 119.808950][T13071] netlink: 'syz.1.4326': attribute type 1 has an invalid length. [ 119.826639][T13049] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 119.851890][T13049] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.4314: corrupted inode contents [ 119.878251][T13049] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.4314: mark_inode_dirty error [ 119.890516][T13049] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 119.900029][T13049] EXT4-fs (loop5): 1 truncate cleaned up [ 119.906186][T13049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.934479][T11214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.100789][T13119] loop2: detected capacity change from 0 to 164 [ 120.122067][T13119] syz.2.4347: attempt to access beyond end of device [ 120.122067][T13119] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.318697][T13138] pimreg: entered allmulticast mode [ 120.325589][T13138] pimreg: left allmulticast mode [ 120.521397][T13167] loop5: detected capacity change from 0 to 512 [ 120.631581][T13184] loop5: detected capacity change from 0 to 2048 [ 120.664215][T13184] EXT4-fs (loop5): failed to initialize system zone (-117) [ 120.671555][T13184] EXT4-fs (loop5): mount failed [ 120.743855][T13204] can0: slcan on ttyS3. [ 120.794618][T13204] can0 (unregistered): slcan off ttyS3. [ 120.879321][T13211] loop0: detected capacity change from 0 to 128 [ 120.889498][T13211] SELinux: failed to load policy [ 121.171377][T13263] loop0: detected capacity change from 0 to 256 [ 121.424458][T13281] loop4: detected capacity change from 0 to 1024 [ 121.434253][T13281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.467336][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.603978][T13304] __nla_validate_parse: 12 callbacks suppressed [ 121.603992][T13304] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4428'. [ 121.659354][T13313] loop5: detected capacity change from 0 to 512 [ 121.666861][T13311] loop0: detected capacity change from 0 to 1024 [ 121.681862][T13311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.705258][T13313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.748460][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.784102][T13327] loop0: detected capacity change from 0 to 512 [ 121.785346][T13313] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.888105][T11214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.981821][T13342] loop4: detected capacity change from 0 to 1024 [ 122.016899][T13342] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4444: Failed to acquire dquot type 0 [ 122.033979][T13342] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 122.057868][T13342] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4444: corrupted inode contents [ 122.073423][T13342] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.4444: mark_inode_dirty error [ 122.084267][T13353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.102145][T13342] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4444: corrupted inode contents [ 122.117292][T13342] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.4444: mark_inode_dirty error [ 122.129829][T13342] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4444: corrupted inode contents [ 122.136301][T13353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.153756][T13342] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 122.164175][T13342] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.4444: corrupted inode contents [ 122.177512][T13342] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.4444: mark_inode_dirty error [ 122.188823][T13342] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 122.199056][T13342] EXT4-fs (loop4): 1 truncate cleaned up [ 122.219931][T13342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.261254][T13342] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.284217][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.294720][T13372] loop2: detected capacity change from 0 to 1024 [ 122.328955][T13372] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.342850][T13372] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 122.353111][T13372] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.359777][T13372] EXT4-fs error (device loop2): ext4_quota_enable:7128: inode #3: comm syz.2.4457: iget: bad i_size value: 1407374883559424 [ 122.374408][T13372] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.4457: Bad quota inode: 3, type: 0 [ 122.381786][T13386] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.393354][ T3360] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.398310][T13372] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 122.400990][ T3360] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.415363][T13372] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 122.422729][ T3360] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.437241][ T3360] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.437424][T13372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.444582][ T3360] rtc rtc0: __rtc_set_alarm: err=-22 [ 122.473588][T13372] EXT4-fs (loop2): shut down requested (1) [ 122.491870][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.740861][T13436] loop9: detected capacity change from 0 to 7 [ 122.755938][T13436] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.774747][T13436] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.782670][T13436] loop9: unable to read partition table [ 122.816719][T13436] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 122.816719][T13436] ) failed (rc=-5) [ 122.881156][T13454] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.900640][T13454] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.908757][T13454] loop9: unable to read partition table [ 122.918633][T13454] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 122.918633][T13454] ) failed (rc=-5) [ 122.963126][T13471] sctp: [Deprecated]: syz.5.4502 (pid 13471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.963126][T13471] Use struct sctp_sack_info instead [ 123.104485][T13491] loop5: detected capacity change from 0 to 1024 [ 123.120033][T13491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.146167][T11214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.264808][T13510] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.279027][T13510] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 123.423048][T13523] loop5: detected capacity change from 0 to 2048 [ 123.471448][T13523] loop5: p1 < > p4 < > [ 123.475634][T13523] loop5: partition table partially beyond EOD, truncated [ 123.482710][T13523] loop5: p1 start 8388352 is beyond EOD, truncated [ 123.523859][T13529] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4527'. [ 123.616290][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4533'. [ 123.626888][T13541] veth1_macvtap: left promiscuous mode [ 123.729789][T13560] loop5: detected capacity change from 0 to 1024 [ 123.745819][T13560] EXT4-fs: Ignoring removed bh option [ 123.757040][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 123.757085][ T29] audit: type=1400 audit(1757607274.356:3666): avc: denied { mount } for pid=13564 comm="syz.1.4545" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.812977][T13571] veth1_to_batadv: entered promiscuous mode [ 123.820021][ T29] audit: type=1400 audit(1757607274.429:3667): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.833811][T13569] can0: slcan on ttyS3. [ 123.867081][ T29] audit: type=1400 audit(1757607274.461:3668): avc: denied { read write } for pid=13578 comm="syz.1.4550" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.891363][ T29] audit: type=1400 audit(1757607274.461:3669): avc: denied { open } for pid=13578 comm="syz.1.4550" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.915677][ T29] audit: type=1400 audit(1757607274.471:3670): avc: denied { ioctl } for pid=13578 comm="syz.1.4550" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.941555][ T29] audit: type=1326 audit(1757607274.503:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13581 comm="syz.1.4554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08b522eba9 code=0x0 [ 123.984413][ T29] audit: type=1400 audit(1757607274.587:3672): avc: denied { nlmsg_write } for pid=13589 comm="syz.5.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 124.005349][ T29] audit: type=1400 audit(1757607274.587:3673): avc: denied { relabelfrom } for pid=13588 comm="syz.2.4555" name="" dev="pipefs" ino=37893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.037997][T13569] can0 (unregistered): slcan off ttyS3. [ 124.090727][ T29] audit: type=1400 audit(1757607274.671:3674): avc: denied { create } for pid=13597 comm="syz.2.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.110434][ T29] audit: type=1400 audit(1757607274.681:3675): avc: denied { bind } for pid=13597 comm="syz.2.4558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.150890][T13604] loop5: detected capacity change from 0 to 2048 [ 124.231013][T13618] program syz.2.4567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.274065][T13624] loop2: detected capacity change from 0 to 512 [ 124.281961][T13624] EXT4-fs: Ignoring removed bh option [ 124.290967][T13624] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.304623][T13624] EXT4-fs (loop2): 1 truncate cleaned up [ 124.335129][T13629] loop0: detected capacity change from 0 to 512 [ 124.342481][T13629] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.354501][T13629] EXT4-fs (loop0): 1 truncate cleaned up [ 124.364316][T13629] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1937076852 > max in inode 13 [ 124.407275][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4575'. [ 124.434701][T13647] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 124.507400][T13662] loop0: detected capacity change from 0 to 512 [ 124.523934][T13662] EXT4-fs: Ignoring removed bh option [ 124.533238][T13662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.554384][T13667] netlink: 'syz.4.4589': attribute type 3 has an invalid length. [ 124.563626][T13662] EXT4-fs (loop0): 1 truncate cleaned up [ 124.628009][T13676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.645380][T13678] tap0: tun_chr_ioctl cmd 1074025677 [ 124.650889][T13678] tap0: linktype set to 825 [ 124.665120][T13684] netlink: 'syz.4.4597': attribute type 10 has an invalid length. [ 124.673502][T13684] dummy0: left promiscuous mode [ 124.681658][T13684] dummy0: entered promiscuous mode [ 124.687019][T13684] dummy0: entered allmulticast mode [ 124.692835][T13684] team0: Port device dummy0 added [ 124.721854][T13676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.744838][T13690] loop2: detected capacity change from 0 to 1024 [ 124.759894][T13690] ext4 filesystem being mounted at /928/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.776959][T13676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.804538][T13690] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.4600: path /928/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 124.864503][T13676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.941398][ T3330] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.953924][ T3330] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.981469][ T3330] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.996895][ T3330] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.089021][T13732] loop5: detected capacity change from 0 to 1024 [ 125.291519][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4636'. [ 125.365326][T13790] pim6reg: tun_chr_ioctl cmd 1074025680 [ 125.527127][T13814] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 125.587431][T13823] loop2: detected capacity change from 0 to 512 [ 125.595429][T13828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.602242][T13823] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 125.606053][T13828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.614780][T13823] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 125.632576][T13823] EXT4-fs (loop2): group descriptors corrupted! [ 125.656244][T13830] program syz.0.4663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.944563][T13872] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4689'. [ 125.963770][T13874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.020904][T13886] loop0: detected capacity change from 0 to 128 [ 126.037936][T13874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.057557][T13892] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4693'. [ 126.104261][T13874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.179991][T13874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.271758][ T3330] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.294677][ T3330] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.304196][ T3330] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.314489][ T3330] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.353556][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4717'. [ 126.383698][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4719'. [ 126.427891][T13955] loop4: detected capacity change from 0 to 128 [ 126.526559][T13973] openvswitch: netlink: Message has 6 unknown bytes. [ 126.613255][T13986] loop2: detected capacity change from 0 to 512 [ 126.637734][T13986] ext4 filesystem being mounted at /968/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.671336][T13958] loop0: detected capacity change from 0 to 32768 [ 126.746460][T14015] loop2: detected capacity change from 0 to 128 [ 126.768558][T14015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 126.781863][T14015] System zones: 1-3, 19-19, 35-36 [ 126.788775][T14015] ext4 filesystem being mounted at /971/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.916428][T14040] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 127.099252][T14078] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4741'. [ 127.144031][T14087] 9pnet_fd: Insufficient options for proto=fd [ 127.286473][T14121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14121 comm=syz.5.4755 [ 127.328912][T14130] loop5: detected capacity change from 0 to 512 [ 127.345689][T14134] loop2: detected capacity change from 0 to 256 [ 127.353607][T14134] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.383738][T14141] loop5: detected capacity change from 0 to 128 [ 127.396406][T14141] vfat: Unknown parameter 'q6/j[rw 0b 90 e9 d9 fe ff ff e8 2a fe a1 fc 90 0f 0b 90 4c 89 f7 e8 6e [ 147.075704][ T41] RSP: 0018:ffffc90000163c60 EFLAGS: 00010293 [ 147.081901][ T41] RAX: ffffffff84b5fcb8 RBX: ffff888109df0000 RCX: ffff8881016a8000 [ 147.089918][ T41] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109df0e00 [ 147.098011][ T41] RBP: ffffffff86c8b940 R08: 0001ffff86847f7f R09: 0000000000000000 [ 147.106010][ T41] R10: ffffc90000163be8 R11: 0001c90000163be8 R12: ffffffff86c8b960 [ 147.114003][ T41] R13: ffff888109df0028 R14: ffff888109df0e00 R15: ffff888109df0000 [ 147.122065][ T41] FS: 0000000000000000(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 147.131028][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.137671][ T41] CR2: 00007fa21e086f98 CR3: 00000001041ba000 CR4: 00000000003506f0 [ 147.145709][ T41] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.153731][ T41] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 147.161742][ T41] Call Trace: [ 147.165014][ T41] [ 147.168066][ T41] xfrm_net_exit+0x2d/0x60 [ 147.172561][ T41] ops_undo_list+0x278/0x410 [ 147.177162][ T41] cleanup_net+0x2de/0x4d0 [ 147.181702][ T41] process_scheduled_works+0x4cb/0x9d0 [ 147.187183][ T41] worker_thread+0x582/0x770 [ 147.187771][T16707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.191875][ T41] kthread+0x489/0x510 [ 147.204322][ T41] ? finish_task_switch+0xad/0x2b0 [ 147.209470][ T41] ? __pfx_worker_thread+0x10/0x10 [ 147.209519][T16707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.214597][ T41] ? __pfx_kthread+0x10/0x10 [ 147.226996][ T41] ret_from_fork+0x11f/0x1b0 [ 147.231661][ T41] ? __pfx_kthread+0x10/0x10 [ 147.236257][ T41] ret_from_fork_asm+0x1a/0x30 [ 147.241105][ T41] [ 147.244121][ T41] ---[ end trace 0000000000000000 ]--- [ 147.250449][ T41] ------------[ cut here ]------------ [ 147.256037][ T41] WARNING: CPU: 1 PID: 41 at net/xfrm/xfrm_state.c:3310 xfrm_state_fini+0x1b9/0x1f0 [ 147.265572][ T41] Modules linked in: [ 147.269580][ T41] CPU: 1 UID: 0 PID: 41 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.274124][T16719] binfmt_misc: register: failed to install interpreter file ./file0 [ 147.280898][ T41] Tainted: [W]=WARN [ 147.280906][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.280919][ T41] Workqueue: netns cleanup_net [ 147.307548][ T41] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 147.313169][ T41] Code: bb bc fc 4d 8b 3e e9 06 ff ff ff e8 11 fe a1 fc 90 0f 0b 90 4c 89 f7 e8 55 bb bc fc 4d 8b 3e e9 24 ff ff ff e8 f8 fd a1 fc 90 <0f> 0b 90 4c 89 f7 e8 3c bb bc fc 4d 8b 3e e9 42 ff ff ff e8 df fd [ 147.332927][ T41] RSP: 0018:ffffc90000163c60 EFLAGS: 00010293 [ 147.339029][ T41] RAX: ffffffff84b5fcf8 RBX: ffff888109df0000 RCX: ffff8881016a8000 [ 147.347036][ T41] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888115c4c1c0 [ 147.355094][ T41] RBP: 0000000000000040 R08: 0001888109df0e1f R09: 0000000000000000 [ 147.363155][ T41] R10: ffff888115c4c240 R11: 0001888115c4c23f R12: ffffffff86c8b960 [ 147.371118][ T41] R13: ffff888109df0028 R14: ffff888109df0e18 R15: ffff888115c4c1c0 [ 147.379292][ T41] FS: 0000000000000000(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 147.388240][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.394820][ T41] CR2: 00007fa21e086f98 CR3: 00000001041ba000 CR4: 00000000003506f0 [ 147.402870][ T41] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.410898][ T41] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 147.418855][ T41] Call Trace: [ 147.422159][ T41] [ 147.425111][ T41] xfrm_net_exit+0x2d/0x60 [ 147.429695][ T41] ops_undo_list+0x278/0x410 [ 147.434271][ T41] cleanup_net+0x2de/0x4d0 [ 147.438756][ T41] process_scheduled_works+0x4cb/0x9d0 [ 147.444212][ T41] worker_thread+0x582/0x770 [ 147.448810][ T41] kthread+0x489/0x510 [ 147.452879][ T41] ? finish_task_switch+0xad/0x2b0 [ 147.458129][ T41] ? __pfx_worker_thread+0x10/0x10 [ 147.463224][ T41] ? __pfx_kthread+0x10/0x10 [ 147.467823][ T41] ret_from_fork+0x11f/0x1b0 [ 147.472478][ T41] ? __pfx_kthread+0x10/0x10 [ 147.477068][ T41] ret_from_fork_asm+0x1a/0x30 [ 147.481926][ T41] [ 147.485043][ T41] ---[ end trace 0000000000000000 ]--- [ 147.491035][ T41] ------------[ cut here ]------------ [ 147.496489][ T41] WARNING: CPU: 1 PID: 41 at net/xfrm/xfrm_state.c:3312 xfrm_state_fini+0x1d2/0x1f0 [ 147.505913][ T41] Modules linked in: [ 147.509809][ T41] CPU: 1 UID: 0 PID: 41 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.521094][ T41] Tainted: [W]=WARN [ 147.524896][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.535068][ T41] Workqueue: netns cleanup_net [ 147.539885][ T41] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 147.545483][ T41] Code: bb bc fc 4d 8b 3e e9 24 ff ff ff e8 f8 fd a1 fc 90 0f 0b 90 4c 89 f7 e8 3c bb bc fc 4d 8b 3e e9 42 ff ff ff e8 df fd a1 fc 90 <0f> 0b 90 4c 89 f7 e8 23 bb bc fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 147.565197][ T41] RSP: 0018:ffffc90000163c60 EFLAGS: 00010293 [ 147.571320][ T41] RAX: ffffffff84b5fd11 RBX: ffff888109df0000 RCX: ffff8881016a8000 [ 147.579311][ T41] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888115c4c180 [ 147.587295][ T41] RBP: 0000000000000040 R08: 0001888109df0e17 R09: 0000000000000000 [ 147.595292][ T41] R10: ffff888115c4c200 R11: 0001888115c4c1ff R12: ffffffff86c8b960 [ 147.603348][ T41] R13: ffff888109df0028 R14: ffff888109df0e10 R15: ffff888115c4c180 [ 147.611323][ T41] FS: 0000000000000000(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 147.620257][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.626823][ T41] CR2: 00007fa21e086f98 CR3: 00000001041ba000 CR4: 00000000003506f0 [ 147.634798][ T41] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.642797][ T41] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 147.650773][ T41] Call Trace: [ 147.654029][ T41] [ 147.657025][ T41] xfrm_net_exit+0x2d/0x60 [ 147.661490][ T41] ops_undo_list+0x278/0x410 [ 147.666062][ T41] cleanup_net+0x2de/0x4d0 [ 147.670483][ T41] process_scheduled_works+0x4cb/0x9d0 [ 147.675983][ T41] worker_thread+0x582/0x770 [ 147.680558][ T41] kthread+0x489/0x510 [ 147.684667][ T41] ? finish_task_switch+0xad/0x2b0 [ 147.689798][ T41] ? __pfx_worker_thread+0x10/0x10 [ 147.694896][ T41] ? __pfx_kthread+0x10/0x10 [ 147.699550][ T41] ret_from_fork+0x11f/0x1b0 [ 147.704235][ T41] ? __pfx_kthread+0x10/0x10 [ 147.708899][ T41] ret_from_fork_asm+0x1a/0x30 [ 147.713658][ T41] [ 147.716678][ T41] ---[ end trace 0000000000000000 ]--- [ 147.820510][T16563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.830962][T16563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.847507][T16563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.857526][T16563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.929471][T16563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.961252][T16563] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.974586][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.981669][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.020773][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.027852][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.044458][T16769] macvtap0: refused to change device tx_queue_len [ 148.063737][T16774] __nla_validate_parse: 9 callbacks suppressed [ 148.063752][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5796'. [ 148.076567][T16563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.079195][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5796'. [ 148.089543][T16563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.145327][T16778] loop5: detected capacity change from 0 to 512 [ 148.151973][T16778] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.189350][T16778] EXT4-fs (loop5): failed to initialize system zone (-117) [ 148.200150][T16778] EXT4-fs (loop5): mount failed [ 148.203217][T16563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.248444][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 148.248458][ T29] audit: type=1400 audit(1757607300.076:4394): avc: denied { create } for pid=16796 comm="syz.0.5805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.268043][ T29] audit: type=1400 audit(1757607300.097:4395): avc: denied { setopt } for pid=16796 comm="syz.0.5805" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.268352][ T29] audit: type=1400 audit(1757607300.097:4396): avc: denied { write } for pid=16796 comm="syz.0.5805" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.316000][ T29] audit: type=1400 audit(1757607300.139:4397): avc: denied { ioctl } for pid=16803 comm="syz.0.5806" path="socket:[48266]" dev="sockfs" ino=48266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.329915][ T29] audit: type=1400 audit(1757607300.149:4398): avc: denied { read append } for pid=16805 comm="syz.1.5807" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.368981][ T29] audit: type=1400 audit(1757607300.191:4399): avc: denied { read write } for pid=16811 comm="syz.1.5810" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.369015][ T29] audit: type=1400 audit(1757607300.191:4400): avc: denied { open } for pid=16811 comm="syz.1.5810" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.510011][ T29] audit: type=1400 audit(1757607300.338:4401): avc: denied { create } for pid=16826 comm="syz.0.5814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 148.527614][T16563] veth0_vlan: entered promiscuous mode [ 148.529724][T16563] veth1_vlan: entered promiscuous mode [ 148.532302][T16833] 9pnet_fd: Insufficient options for proto=fd [ 148.562361][T16563] veth0_macvtap: entered promiscuous mode [ 148.625475][T16563] veth1_macvtap: entered promiscuous mode [ 148.680803][T16563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.697148][ T29] audit: type=1400 audit(1757607300.538:4402): avc: denied { create } for pid=16844 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.707029][T16563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.723611][ T29] audit: type=1400 audit(1757607300.538:4403): avc: denied { create } for pid=16847 comm="syz.4.5823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.742427][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.785535][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.813759][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.824148][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.938074][T16880] SELinux: ebitmap: truncated map [ 148.944366][T16880] SELinux: failed to load policy [ 148.981347][T16893] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5845'. [ 149.002413][T16898] ip6gretap0: entered promiscuous mode [ 149.009239][T16898] ip6gretap0: left promiscuous mode [ 149.047660][T16895] netlink: 'syz.4.5844': attribute type 21 has an invalid length. [ 149.055527][T16895] netlink: 'syz.4.5844': attribute type 1 has an invalid length. [ 149.063428][T16895] netlink: 'syz.4.5844': attribute type 2 has an invalid length. [ 149.071351][T16895] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.5844'. [ 149.095311][T16911] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5853'. [ 149.118056][T16913] loop5: detected capacity change from 0 to 1024 [ 149.133023][T16916] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 149.138946][T16913] EXT4-fs: inline encryption not supported [ 149.142371][T16916] SELinux: failed to load policy [ 149.163622][T16913] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 149.243205][T16935] ref_ctr_offset mismatch. inode: 0x32 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 149.307980][T16946] tap0: tun_chr_ioctl cmd 1074025677 [ 149.313816][T16946] tap0: linktype set to 776 [ 149.368156][T16962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.377212][T16962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.406915][T16967] loop5: detected capacity change from 0 to 1024 [ 149.414814][T16967] EXT4-fs: inline encryption not supported [ 149.424227][T16967] EXT4-fs: Ignoring removed bh option [ 149.500981][T16982] tap0: tun_chr_ioctl cmd 1074025677 [ 149.518393][T16982] tap0: linktype set to 804 [ 149.633228][T17006] loop0: detected capacity change from 0 to 1024 [ 149.651618][T17006] EXT4-fs: Ignoring removed orlov option [ 149.657485][T17006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.740645][T17033] loop6: detected capacity change from 0 to 1024 [ 149.747658][T17036] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5911'. [ 149.747680][T17033] EXT4-fs: Ignoring removed nobh option [ 149.800258][T17041] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 149.816548][T17047] loop6: detected capacity change from 0 to 128 [ 149.825621][T17047] EXT4-fs error (device loop6): __ext4_fill_super:5504: inode #2: comm syz.6.5915: iget: checksum invalid [ 149.850344][T17050] random: crng reseeded on system resumption [ 149.858164][T17047] EXT4-fs (loop6): get root inode failed [ 149.863881][T17047] EXT4-fs (loop6): mount failed [ 149.920228][T17054] loop5: detected capacity change from 0 to 8192 [ 150.021439][T17070] loop5: detected capacity change from 0 to 8192 [ 150.053132][T17074] loop5: detected capacity change from 0 to 256 [ 150.074474][T17076] random: crng reseeded on system resumption [ 150.080004][ T12] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 150.088356][ T12] FAT-fs (loop5): Filesystem has been set read-only [ 150.095151][ T12] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 150.145268][T17083] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.5931'. [ 150.203858][T17089] netlink: 1028 bytes leftover after parsing attributes in process `syz.6.5934'. [ 150.213169][T17089] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 150.366866][T17098] random: crng reseeded on system resumption [ 150.486870][T17105] netlink: 'syz.6.5941': attribute type 1 has an invalid length. [ 150.581481][T17119] loop6: detected capacity change from 0 to 1024 [ 150.595785][T17119] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.606802][T17119] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.629447][T17119] JBD2: no valid journal superblock found [ 150.635218][T17119] EXT4-fs (loop6): Could not load journal inode [ 150.651424][T17125] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 150.751277][T17134] SELinux: failed to load policy [ 150.804819][T17143] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5958'. [ 150.882177][T17155] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 150.917177][T17159] loop4: detected capacity change from 0 to 512 [ 150.978749][T17159] ext4 filesystem being mounted at /1123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.014166][T17170] loop6: detected capacity change from 0 to 128 [ 151.114459][T17189] SELinux: failed to load policy [ 151.147755][T17194] loop5: detected capacity change from 0 to 512 [ 151.161318][T17194] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 151.201023][T17201] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17201 comm=syz.6.5985 [ 151.216307][T17204] loop0: detected capacity change from 0 to 512 [ 151.248087][T17204] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 151.265395][T17210] bond0: option ad_select: unable to set because the bond device is up [ 151.286760][T17204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 151.292542][T17214] bridge1: entered allmulticast mode [ 151.297167][T17211] netlink: 'syz.6.5989': attribute type 10 has an invalid length. [ 151.307817][T17211] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5989'. [ 151.318106][T17204] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.5987: corrupted in-inode xattr: e_value size too large [ 151.332686][T17204] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5987: couldn't read orphan inode 15 (err -117) [ 151.358824][T17216] netlink: 'syz.1.5992': attribute type 1 has an invalid length. [ 151.384944][T17211] team0: Port device geneve1 added [ 151.662845][T17254] loop4: detected capacity change from 0 to 1024 [ 151.729286][T17270] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 151.738192][T17270] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 151.902897][T17311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17311 comm=syz.5.6037 [ 152.226428][T17339] program syz.0.6049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.655244][T17404] netlink: 'syz.5.6064': attribute type 1 has an invalid length. [ 152.705949][T17409] loop5: detected capacity change from 0 to 512 [ 152.722729][T17409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.755892][T17409] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 152.765372][T17409] System zones: 0-2, 18-18, 34-34 [ 152.771259][T17409] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.075015][T17462] loop4: detected capacity change from 0 to 512 [ 153.137016][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 153.137032][ T29] audit: type=1326 audit(1757607305.199:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.4.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 153.188250][ T29] audit: type=1326 audit(1757607305.231:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.4.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 153.212080][ T29] audit: type=1326 audit(1757607305.231:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.4.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 153.235724][ T29] audit: type=1326 audit(1757607305.231:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.4.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 153.259215][ T29] audit: type=1326 audit(1757607305.231:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.4.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 153.282746][ T29] audit: type=1326 audit(1757607305.231:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.4.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 153.306219][ T29] audit: type=1326 audit(1757607305.231:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.4.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 153.386895][T17480] loop4: detected capacity change from 0 to 8192 [ 153.493302][ T29] audit: type=1400 audit(1757607305.577:4555): avc: denied { listen } for pid=17493 comm="syz.1.6081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.513007][ T29] audit: type=1400 audit(1757607305.577:4556): avc: denied { accept } for pid=17493 comm="syz.1.6081" lport=38571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.574551][T17502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17502 comm=syz.1.6082 [ 153.603099][ T29] audit: type=1107 audit(1757607305.692:4557): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 153.651580][T17519] program syz.1.6084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.743856][T17538] __nla_validate_parse: 4 callbacks suppressed [ 153.743870][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6089'. [ 153.801266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.809464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.859476][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6097'. [ 154.061277][T17609] loop5: detected capacity change from 0 to 1024 [ 154.079836][T17609] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.100559][T17608] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.6114: Freeing blocks not in datazone - block = 0, count = 16 [ 154.114182][T17608] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 154.139229][T17616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6116'. [ 154.331058][T17639] loop4: detected capacity change from 0 to 512 [ 154.351817][T17639] ext4 filesystem being mounted at /1147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.389361][T17639] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6124: Failed to acquire dquot type 0 [ 154.411007][T17650] macvtap0: refused to change device tx_queue_len [ 154.471011][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6131'. [ 154.479962][T17660] netlink: 'syz.4.6131': attribute type 30 has an invalid length. [ 154.488157][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6131'. [ 154.533502][T17658] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6132'. [ 154.542615][T17658] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6132'. [ 154.622183][T17671] loop0: detected capacity change from 0 to 1024 [ 154.659595][T17671] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #3: comm syz.0.6147: iget: checksum invalid [ 154.704659][T17671] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.6147: Bad quota inode: 3, type: 0 [ 154.769837][T17671] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 154.816926][T17671] EXT4-fs (loop0): mount failed [ 154.875139][T17699] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6149'. [ 154.969315][T17721] loop6: detected capacity change from 0 to 128 [ 154.986128][T17721] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.001745][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6158'. [ 155.004215][T17721] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.023382][T17729] loop5: detected capacity change from 0 to 1024 [ 155.033051][T17729] EXT4-fs error (device loop5): ext4_quota_enable:7128: inode #3: comm syz.5.6159: iget: checksum invalid [ 155.064433][T17729] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.6159: Bad quota inode: 3, type: 0 [ 155.086301][T17729] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 155.101293][T17729] EXT4-fs (loop5): mount failed [ 155.101360][T16684] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.174675][T17762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6165'. [ 155.241031][T17778] loop6: detected capacity change from 0 to 128 [ 155.259317][T17779] netlink: 'syz.4.6169': attribute type 1 has an invalid length. [ 155.269861][T17778] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 155.289569][T17778] EXT4-fs (loop6): shut down requested (0) [ 155.355776][T17821] loop6: detected capacity change from 0 to 512 [ 155.373953][T17821] EXT4-fs: Ignoring removed orlov option [ 155.380922][T17821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.400580][T17821] EXT4-fs (loop6): orphan cleanup on readonly fs [ 155.408511][T17821] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 155.426538][T17821] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 155.443200][T17837] loop5: detected capacity change from 0 to 512 [ 155.449889][T17821] EXT4-fs (loop6): 1 truncate cleaned up [ 155.459271][T17837] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.490596][T17848] loop6: detected capacity change from 0 to 1024 [ 155.500011][T17848] EXT4-fs error (device loop6): ext4_quota_enable:7128: inode #3: comm syz.6.6177: iget: checksum invalid [ 155.511868][T17848] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.6177: Bad quota inode: 3, type: 0 [ 155.524232][T17848] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 155.542126][T17848] EXT4-fs (loop6): mount failed [ 155.542369][T17837] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.6176: Failed to acquire dquot type 1 [ 155.576378][T17837] EXT4-fs (loop5): 1 truncate cleaned up [ 155.930023][T17929] binfmt_misc: register: failed to install interpreter file ./file2 [ 156.076161][T17960] loop5: detected capacity change from 0 to 256 [ 156.083314][T17960] FAT-fs (loop5): bogus logical sector size 133 [ 156.089647][T17960] FAT-fs (loop5): Can't find a valid FAT filesystem [ 156.180938][T17984] loop4: detected capacity change from 0 to 128 [ 156.190236][T17986] netlink: 'syz.5.6205': attribute type 2 has an invalid length. [ 156.198842][T17984] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.222740][T17984] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.247849][T16684] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.271222][T18002] program syz.1.6210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.394873][T18034] program syz.4.6223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.403346][T18026] SELinux: failed to load policy [ 156.503872][T18054] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.538410][T18054] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.585830][T18054] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.635668][T18054] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.657697][T18089] batadv_slave_1: entered promiscuous mode [ 156.664807][T18088] batadv_slave_1: left promiscuous mode [ 156.733242][T16684] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.747653][ T3330] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.763192][ T3330] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.775605][ T3330] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.797626][T18115] loop4: detected capacity change from 0 to 256 [ 156.835450][T18120] macvtap1: entered allmulticast mode [ 156.840890][T18120] veth0_macvtap: entered allmulticast mode [ 156.849100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.869099][T18130] batadv_slave_1: entered promiscuous mode [ 156.875586][T18129] batadv_slave_1: left promiscuous mode [ 156.922022][T18143] netlink: 'syz.0.6263': attribute type 1 has an invalid length. [ 156.974459][T18153] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.012717][T18153] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.051101][T18170] loop5: detected capacity change from 0 to 512 [ 157.069401][T18153] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.086750][T18170] EXT4-fs mount: 57 callbacks suppressed [ 157.086764][T18170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.105952][T18170] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.128530][T18153] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.143693][T18170] EXT4-fs (loop5): shut down requested (0) [ 157.150995][T18170] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 157.170813][T18170] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 157.180796][T18170] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 157.189734][T18170] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 157.199481][T18170] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 157.208469][T18170] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 157.241337][T16684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.261094][T14482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.270082][T16684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.270117][T16684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.270181][T16684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.324082][T18191] SELinux: failed to load policy [ 157.730454][T18265] SELinux: failed to load policy [ 157.753179][T18269] netlink: 'syz.6.6312': attribute type 1 has an invalid length. [ 157.926192][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 157.926206][ T29] audit: type=1400 audit(1757607310.228:4639): avc: denied { write } for pid=18290 comm="syz.1.6313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 158.143690][T18314] loop1: detected capacity change from 0 to 512 [ 158.152587][T18317] loop4: detected capacity change from 0 to 512 [ 158.160741][T18319] netlink: 'syz.5.6325': attribute type 21 has an invalid length. [ 158.168756][T18317] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.207129][T18314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.246725][T18314] ext4 filesystem being mounted at /1244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.271633][ T29] audit: type=1326 audit(1757607310.595:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18327 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 158.295252][ T29] audit: type=1326 audit(1757607310.595:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18327 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 158.318871][ T29] audit: type=1326 audit(1757607310.595:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18327 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 158.342339][ T29] audit: type=1326 audit(1757607310.595:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18327 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 158.365806][ T29] audit: type=1326 audit(1757607310.595:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18327 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4db5eba9 code=0x7ffc0000 [ 158.415431][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.427374][T18336] loop5: detected capacity change from 0 to 256 [ 158.441219][T18336] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.473102][T18350] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 158.482643][ T29] audit: type=1400 audit(1757607310.805:4645): avc: denied { relabelfrom } for pid=18349 comm="syz.0.6334" name="UNIX-STREAM" dev="sockfs" ino=52427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 158.506971][ T29] audit: type=1400 audit(1757607310.805:4646): avc: denied { mac_admin } for pid=18349 comm="syz.0.6334" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.529643][ T29] audit: type=1400 audit(1757607310.815:4647): avc: denied { relabelto } for pid=18349 comm="syz.0.6334" name="UNIX-STREAM" dev="sockfs" ino=52427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:lost_found_t:s0" [ 158.596913][ T29] audit: type=1400 audit(1757607310.931:4648): avc: denied { write } for pid=18360 comm="syz.5.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.648717][T18371] loop0: detected capacity change from 0 to 512 [ 158.656908][T18371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.663806][T18371] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.676753][T18371] EXT4-fs (loop0): 1 truncate cleaned up [ 158.683377][T18371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.722818][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.784446][T18393] loop5: detected capacity change from 0 to 2364 [ 158.826600][T18412] __nla_validate_parse: 7 callbacks suppressed [ 158.826611][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6357'. [ 158.842529][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6357'. [ 158.935099][T18419] SELinux: ebitmap: truncated map [ 158.941349][T18419] SELinux: failed to load policy [ 158.983127][T18428] SELinux: failed to load policy [ 159.008177][T18414] loop4: detected capacity change from 0 to 32768 [ 159.046955][T18439] loop5: detected capacity change from 0 to 2048 [ 159.059587][T18414] loop4: p1 p2 p3 < p5 p6 p7 > [ 159.065262][T18414] loop4: p2 size 16775168 extends beyond EOD, truncated [ 159.073383][T18414] loop4: p5 start 4294970168 is beyond EOD, truncated [ 159.099606][T18439] Alternate GPT is invalid, using primary GPT. [ 159.105913][T18439] loop5: p2 p3 p7 [ 159.202942][T18487] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.6380' sets config #1 [ 159.320062][T18506] SELinux: ebitmap: truncated map [ 159.325239][T18506] SELinux: failed to load policy [ 159.381492][T18524] SELinux: Context system_u:object_r:xserver_misc_device_t:s0 is not valid (left unmapped). [ 159.424385][T18537] loop4: detected capacity change from 0 to 512 [ 159.442080][T18537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.454763][T18537] ext4 filesystem being mounted at /1211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.471831][T18537] EXT4-fs (loop4): shut down requested (0) [ 159.485247][T18537] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 159.499066][T18537] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 159.508972][T18537] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 159.512593][T18556] bridge: RTM_NEWNEIGH with invalid ether address [ 159.519837][T18537] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 159.533786][T18537] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 159.542635][T18537] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 159.557643][T18557] loop1: detected capacity change from 0 to 2048 [ 159.589824][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.755939][T18605] tun0: tun_chr_ioctl cmd 1074025677 [ 159.761411][T18605] tun0: linktype set to 774 [ 159.776382][T18609] netlink: 'syz.0.6422': attribute type 6 has an invalid length. [ 159.784225][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6422'. [ 159.864910][T18651] loop1: detected capacity change from 0 to 512 [ 159.871785][T18651] EXT4-fs: Ignoring removed bh option [ 159.878268][T18651] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.911420][T18651] EXT4-fs (loop1): 1 truncate cleaned up [ 159.917523][T18651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.990399][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.005335][T18673] loop6: detected capacity change from 0 to 1024 [ 160.013046][T18673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.033755][T18673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 160.042258][T18679] loop4: detected capacity change from 0 to 1024 [ 160.048730][T18673] System zones: 0-1, 3-12 [ 160.052498][T18679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.061966][T18679] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.073129][T18673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.086746][T18679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 160.109831][T18679] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.6437: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.124161][T18679] EXT4-fs (loop4): Remounting filesystem read-only [ 160.128990][T18693] loop1: detected capacity change from 0 to 512 [ 160.130886][T18679] EXT4-fs (loop4): 1 orphan inode deleted [ 160.143831][ T3330] EXT4-fs (loop4): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 160.156161][T18679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.162068][T16563] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.185106][T18693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.198178][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.198942][T18693] ext4 filesystem being mounted at /1257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.235096][T18708] geneve2: entered promiscuous mode [ 160.240447][T18708] geneve2: entered allmulticast mode [ 160.247970][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.779438][T18782] netlink: 'syz.5.6472': attribute type 1 has an invalid length. [ 160.804155][T18787] ================================================================== [ 160.812252][T18787] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 160.819285][T18787] [ 160.821606][T18787] write to 0xffff888103203648 of 8 bytes by task 18785 on cpu 0: [ 160.829317][T18787] release_task+0x6f9/0xb60 [ 160.833825][T18787] do_exit+0xd81/0x15c0 [ 160.837990][T18787] kthread_exit+0x94/0x190 [ 160.842417][T18787] __module_put_and_kthread_exit+0x15/0x20 [ 160.848235][T18787] cryptomgr_probe+0x161/0x180 [ 160.852999][T18787] kthread+0x489/0x510 [ 160.857071][T18787] ret_from_fork+0x11f/0x1b0 [ 160.861747][T18787] ret_from_fork_asm+0x1a/0x30 [ 160.866507][T18787] [ 160.868826][T18787] read to 0xffff888103203180 of 3264 bytes by task 18787 on cpu 1: [ 160.876718][T18787] memcpy_and_pad+0x48/0x80 [ 160.881217][T18787] arch_dup_task_struct+0x2c/0x40 [ 160.886245][T18787] dup_task_struct+0x83/0x6a0 [ 160.890924][T18787] copy_process+0x399/0x2000 [ 160.895524][T18787] kernel_clone+0x16c/0x5c0 [ 160.900046][T18787] __se_sys_clone3+0x1c2/0x200 [ 160.904813][T18787] __x64_sys_clone3+0x31/0x40 [ 160.909499][T18787] x64_sys_call+0x1fc9/0x2ff0 [ 160.914179][T18787] do_syscall_64+0xd2/0x200 [ 160.918693][T18787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.924675][T18787] [ 160.927027][T18787] Reported by Kernel Concurrency Sanitizer on: [ 160.933183][T18787] CPU: 1 UID: 0 PID: 18787 Comm: syz.5.6473 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.944560][T18787] Tainted: [W]=WARN [ 160.948355][T18787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.958501][T18787] ==================================================================