last executing test programs: 1.834855522s ago: executing program 0 (id=1338): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 1.731679813s ago: executing program 0 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c26772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000000c0)="aa1d484ea0000000f7fc08fcd111fbdf2321d5bc27bd49eb067a0689fffb43f3f368654875e4cb5128ead3d2e4f813c4b3", 0x31}], 0x2) 1.731198104s ago: executing program 0 (id=1341): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="6629b0c6d59dba8fa9f1222c", @ANYRES8=r3, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES16], 0x0, 0x243, &(0x7f0000000840)="$eJzs3c9qE1scB/DfJGmb3rtIFnd1uXAHdOGqtH2CFKkgdqVkoS602BYkCQULgVYxdOUT+CQ+hxvfwAcQutNFYWQyadNC1Abzp9TPZ5MDM9/z+53khKzm5Pl/ndbO/sHe8ZvPUa0mUWpEIzmJqEcpcksBANw037IsTrLCeMlKaVo9AQDTdcXf/+UZtgQATNmjx08ebGxtbT5M02pE5123mUTxWlzf2IuX0Y7dWI1anEZk54rxvftbm1FJc/W43el1m3my8+zjYP6NLxH9/FrUoj46v5YWLuR73eZC/DWo38jz61GLf0bn10fko7kYd25d6H8lavHpRexHO3Yizw7zb9fS9G72/uvrp3nHeT7pdZtL/fuGsvLMPxwAAAAAAAAAAAAAAAAAAAAAAG6slTRN0yz7kGVZ1rt0/k75tH99JT1Tv3w+T5EfcT5QuT/XhfN1VvMSSXH/MF+JfytRmefaAQAAAAAAAAAAAAAAAAAA4Lo4ODxqbbfbu68mOjh7rH/yM//uIMqD1tpJxDXopz9YzvuZTa3/Y8xajTFLROnwqHW2u1rbSfwiVZ3SJslGbL/yD1OLE6q++PdkV5FExML5m/mzm0uxMOFvCgAAAAAAAAAAAAAAAAAAMGPDh35HXDyeQ0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfD//8fY9AbhK+YmvMSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AN8DwAA//8oAXoy") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.705284724s ago: executing program 1 (id=1342): r0 = socket$igmp(0x2, 0x3, 0x2) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff000000"]}, 0x107) 1.650098185s ago: executing program 0 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000580)) 1.619567865s ago: executing program 1 (id=1344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYBLOB="9e6d12d4ecccdf9b0f018b7a2d4aa6b00bc989ae3f4e84617813d86793d24e4d5af6f3ee79496869fa3e048e099b6b26ae28a328e0c90f12d6f432febd21e0bec24b041af3945a0efa76f311a757945472f5d52651e12350e0046648c6d310579a8ac95a7e698fa118d42a329fcaacb7f4816caad3cb32ef9d4ea6fc9a72d5d93a2a70e265f9889e384e2294fe77326189704a29731b898653e746ceeba96ea030da72972bc005b108f4199693df", @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) getgid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f0000000bc0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7ffff000) fallocate(r7, 0x0, 0x0, 0x1001f0) 1.619311085s ago: executing program 0 (id=1345): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.002658775s ago: executing program 4 (id=1354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) 984.195266ms ago: executing program 2 (id=1355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9851fd851afcec88, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) brk(0x200000001000) 927.020586ms ago: executing program 2 (id=1356): pipe(&(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="796100ff00000000000007"], 0x20}}, 0x4000054) 926.814136ms ago: executing program 4 (id=1357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 912.106707ms ago: executing program 4 (id=1358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) 877.116777ms ago: executing program 4 (id=1360): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040600) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x5}, 0x50) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x64, 0x63, 0x38, 0x3b, 0x33, 0x62, 0x37, 0x64, 0x61, 0x34, 0x39, 0x61, 0x61, 0x61, 0x38]}, &(0x7f00000002c0)={0x0, "de442bfc9610e10ac69ac094b0fac70100000000000040d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d490254eab4152b6e6d87cd6088e97a9d06d29143", 0x33}, 0x48, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/14], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) keyctl$chown(0x4, r3, 0xee01, 0xee00) keyctl$chown(0x4, r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r6, r7, 0x0) 875.816767ms ago: executing program 3 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c26772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000000c0)="aa1d484ea0000000f7fc08fcd111fbdf2321d5bc27bd49eb067a0689fffb43f3f368654875e4cb5128ead3d2e4f813c4b3", 0x31}], 0x2) 836.857157ms ago: executing program 2 (id=1362): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 820.518078ms ago: executing program 3 (id=1363): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 786.098678ms ago: executing program 0 (id=1364): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 740.550039ms ago: executing program 1 (id=1365): syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a600000001ff0200000000000000000000000000fbfd8000000000000000000000000000aa4d2ae65b4cdb1b1a0930a8a66e0a74f62f3f5259f2fd29fc847ae51299e3336965b73bdd17edcae1cebc2b9683f58be22a366405ea84"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES16], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4b}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0xfe}, 'port1\x00', 0x4c, 0x400, 0xfffffffc, 0x3, 0x6c54, 0x3d, 0xccf6, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f0000000680)={{0x80}, 'port1\x00', 0x28, 0x71430, 0x0, 0x4, 0x3ff, 0x7, 0x0, 0x0, 0xa, 0x3}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000000280)=0x5) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c40), 0x140) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f00000005c0)={0x4, 0x1, {0x3, 0x1, 0x8, 0x1, 0x7}, 0x5}) setuid(r8) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r8, &(0x7f0000000440)={0xffffffffffffff06, 0xffffffff80000000, 0x5, 0x4, 0x4, 0x2, 0x4, 0x6, 0x5}) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0xffffffff, 0x14, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "5cb9310978042a8b000006584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x7]}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000004c0)=""/26) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) 333.240795ms ago: executing program 3 (id=1366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c26772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000000c0)="aa1d484ea0000000f7fc08fcd111fbdf2321d5bc27bd49eb067a0689fffb43f3f368654875e4cb5128ead3d2e4f813c4b3", 0x31}], 0x2) 331.648015ms ago: executing program 2 (id=1367): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9851fd851afcec88, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) brk(0x200000001000) 316.037715ms ago: executing program 1 (id=1368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) 262.810216ms ago: executing program 2 (id=1369): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711069000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703040000020000850000001b000000b607000000"], &(0x7f0000000300)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) eventfd2(0x9, 0x100001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000230040000000000000004d02000000000000f6ffffff000038000100fdff7f000800030000000400000007000000000000b1f200000000000000010100000000000006"], 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000480)='./file0/../file0\x00', 0x80) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'e\x01B\xbdu\x12\xc0.\x9d\xebY\xca\x85\x94\xed&/\x95\xfe\xc8\xb2\xfd\x99J\xee\x83\xdd\n\x8c\xe4b[bp\x14\xa1\xe5UG[/\xc8\xc5\xd1\xf7Z\x89c%\xbc)\xde9w\x93\x8c\xc9\xa7&\xe7\xff\xd3UK\b\f\x99\xe2\x8a\xc1nG\xab{\xe6\xc9\xb0\xfe\xc2\xb5\xc9f\x92\xe9*\" \xd5[x&\xf5\xc0\xb7\x8e\\\xe5h\xfe\x1b;\xf8\x1d\x1b\x9a\'\x90\xb7\x0e\xddZk\xf5\xd1\x83\xf1n\xd0\x8bDu\f \"\x89\x17}\xf6\x17ar\"\x90T!t\xf4U\xec\xc8*\xf6\x82\xae\x1dH\xffk\x01\x81_\xd9\xd2\x98i\xe2\x9bS\xc4R%\xa5\x98\xc2\x16ts\xe8&\xcb\xb5S\x9eC\x92\x01\x10vS\"'}}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") link(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000740)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000ff0f0000074778b8390599c57fc5dd57efb727d37239e407c978f73eb1195e9e26473973a5a2561fcbf63e44f52483877af82c7cbe7b2288ac32f9113f23e0c8ef02a41c6ed5ee051399dece87baca70c18ada315102d022cf2e4313b35a3ba3b6c709b5d3a847785b044678906a459d08e225dd5577198b598119d6878144f43e55dab1f1d2c92843e00690abd333e0482b9856727f8217f60cbc5fd8d47c516740810f79be9a30c37f095ad55334627551adc028f40cca4d201930cea91f5807de5f4ab972a623c0adadf6a40cf69346ae5b184de511", @ANYRESOCT, @ANYRESHEX=r2], 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x3, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x810, r3, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0xfe, 0x1, 0xfc, 0x0, 0x0, 0x307, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0x2}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x4, 0x0, 0x20000}, 0x0, 0x0, r3, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x40850) 262.660176ms ago: executing program 1 (id=1370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 261.099567ms ago: executing program 1 (id=1371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYBLOB="9e6d12d4ecccdf9b0f018b7a2d4aa6b00bc989ae3f4e84617813d86793d24e4d5af6f3ee79496869fa3e048e099b6b26ae28a328e0c90f12d6f432febd21e0bec24b041af3945a0efa76f311a757945472f5d52651e12350e0046648c6d310579a8ac95a7e698fa118d42a329fcaacb7f4816caad3cb32ef9d4ea6fc9a72d5d93a2a70e265f9889e384e2294fe77326189704a29731b898653e746ceeba96ea030da72972bc005b108f4199693df", @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) getgid() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f0000000bc0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7ffff000) fallocate(r7, 0x0, 0x0, 0x1001f0) 250.062067ms ago: executing program 3 (id=1372): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ffffe7d, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8c80fff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000600)='2', 0x1}, {&(0x7f0000000080)='-6', 0x2}], 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000000015d0af58c16a7b70", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r8, 0x0, 0x3}, 0x18) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)=r3}, 0x20) 219.615197ms ago: executing program 3 (id=1373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={@none, 0x9, 0xd, 0xfff4, 0xb6, 0x5, "241407d72a4848fd77896dc23728eb65d740162e548a35ab14099f48c0690e8e3531722295a0813f4eef885cfd3dbe73f9e9901445adf4534a6204d701b09b6b1b1f25c79d2094b46dfb2fca5fe85d91dbeb6510f06e9ebfe3873d6a53067ad2dddaede9dff83c52f344f2e2ff05b2a95c77f80ac45d36ca95ff83d57ecd8dd9"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) read$char_usb(r2, &(0x7f0000000740)=""/253, 0xfd) mq_open(&(0x7f0000000840)='\x10\x87\x9f\xdd\xdc\xfc\x1a\xc2\x7fW\x8f\x8c\xc2\xca\x93\xee\xb7\xffAx\xad^r\f\xe2Y\xe9/\x18\xa0&)\xbd\xa2\x1d\xf4\x01\xf4\x89\xd8\xacd\xaa7V\x89\vi\x9dqR\x94;L\xc3\xe2\xe8p\xc8\\\xdfM\x1d\x85\\k~\x8aX\x97\x81,\xe1.\x81\xbc\xc1\xe0],\x8b:L=S\x17\x81\xd1\x8csY\xc7\xbd\xe3]\xd8h\xd1\xb3\x12\xb2\xa2.\xeb\t\xbc\xf4(`b\xda\x1c\xd9Iq\x19\xa3\xdah\xb9\xb0g\xc9\xad[5\xa2\x03\x96\x17\x87T\xbbO7~\xefAO\xd1\x99\n\xee\xcd\xa9\x8d\xcf\xcdj\x817[r\xbc \xcc*\xcc\xb4\xfa8\xa7ukJ\x90\xa6\x03\xff\x80\xd1\xd7\xd4F6\\\x1e\xfb\x15\xf4\xcd\x91d\xeefX\x00=\xf9\xbd>\x11\x17\x8d\xe7(b\xa2\x8f\xd7\xca^p\xdfr\xae\xe3\xb4\xfe\x83ZY]O\xa0(\xd5b}\xe5U\x88\xad\"\x98j\xc2\xcc\xe6\xd8%rW\x1dSdj\x8c\x00<\xf3}', 0x882, 0x69, &(0x7f00000003c0)={0x828, 0x1, 0x100000000, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000a00)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x100000004}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46400) lchown(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) lsetxattr$system_posix_acl(&(0x7f00000073c0)='.\x00', &(0x7f0000007400)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100631302000000000002000200b7f8b5b3fc6b47d8c727338273ab771cdfaf74", @ANYRES32, @ANYBLOB="040007000000000010000000000000002000000000000000"], 0x2c, 0x3) 178.561008ms ago: executing program 2 (id=1374): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 76.61527ms ago: executing program 3 (id=1375): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 20.35894ms ago: executing program 4 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000580)) 0s ago: executing program 4 (id=1377): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): BIOS Google 05/07/2025 [ 71.896496][ T5395] Call Trace: [ 71.896502][ T5395] [ 71.896508][ T5395] __dump_stack+0x1d/0x30 [ 71.896584][ T5395] dump_stack_lvl+0xe8/0x140 [ 71.896610][ T5395] dump_stack+0x15/0x1b [ 71.896627][ T5395] should_fail_ex+0x265/0x280 [ 71.896706][ T5395] should_fail+0xb/0x20 [ 71.896813][ T5395] should_fail_usercopy+0x1a/0x20 [ 71.896846][ T5395] _copy_from_iter+0xcf/0xe40 [ 71.896878][ T5395] ? should_fail_ex+0xdb/0x280 [ 71.896982][ T5395] ? should_failslab+0x8c/0xb0 [ 71.897007][ T5395] ? __kmalloc_noprof+0x1dd/0x3e0 [ 71.897029][ T5395] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 71.897076][ T5395] kernfs_fop_write_iter+0x129/0x2d0 [ 71.897125][ T5395] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 71.897150][ T5395] vfs_write+0x49d/0x8e0 [ 71.897239][ T5395] ksys_write+0xda/0x1a0 [ 71.897327][ T5395] __x64_sys_write+0x40/0x50 [ 71.897342][ T5395] x64_sys_call+0x2cdd/0x2fb0 [ 71.897362][ T5395] do_syscall_64+0xd2/0x200 [ 71.897382][ T5395] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.897413][ T5395] ? clear_bhb_loop+0x40/0x90 [ 71.897499][ T5395] ? clear_bhb_loop+0x40/0x90 [ 71.897517][ T5395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.897537][ T5395] RIP: 0033:0x7f8f4b35e929 [ 71.897565][ T5395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.897580][ T5395] RSP: 002b:00007f8f499c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.897600][ T5395] RAX: ffffffffffffffda RBX: 00007f8f4b585fa0 RCX: 00007f8f4b35e929 [ 71.897611][ T5395] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000006 [ 71.897621][ T5395] RBP: 00007f8f499c7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.897632][ T5395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.897645][ T5395] R13: 0000000000000000 R14: 00007f8f4b585fa0 R15: 00007ffc46b26008 [ 71.897674][ T5395] [ 71.912251][ T29] audit: type=1400 audit(1750841410.731:5061): avc: denied { mount } for pid=5382 comm="syz.4.623" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.130193][ T29] audit: type=1400 audit(1750841410.741:5062): avc: denied { add_name } for pid=5382 comm="syz.4.623" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.150873][ T29] audit: type=1400 audit(1750841410.741:5063): avc: denied { create } for pid=5382 comm="syz.4.623" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.164437][ T5405] lo speed is unknown, defaulting to 1000 [ 72.173399][ T29] audit: type=1400 audit(1750841410.941:5064): avc: denied { create } for pid=5398 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.197055][ T29] audit: type=1400 audit(1750841410.941:5065): avc: denied { write } for pid=5398 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.217341][ T29] audit: type=1400 audit(1750841410.941:5066): avc: denied { read } for pid=5398 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.237566][ T29] audit: type=1400 audit(1750841410.941:5067): avc: denied { ioctl } for pid=5398 comm="syz.1.632" path="socket:[11720]" dev="sockfs" ino=11720 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.340985][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.350425][ T5417] lo speed is unknown, defaulting to 1000 [ 72.370866][ T5419] FAULT_INJECTION: forcing a failure. [ 72.370866][ T5419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.384199][ T5419] CPU: 1 UID: 0 PID: 5419 Comm: syz.1.638 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 72.384230][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.384248][ T5419] Call Trace: [ 72.384255][ T5419] [ 72.384262][ T5419] __dump_stack+0x1d/0x30 [ 72.384343][ T5419] dump_stack_lvl+0xe8/0x140 [ 72.384362][ T5419] dump_stack+0x15/0x1b [ 72.384379][ T5419] should_fail_ex+0x265/0x280 [ 72.384427][ T5419] should_fail_alloc_page+0xf2/0x100 [ 72.384452][ T5419] __alloc_frozen_pages_noprof+0xff/0x360 [ 72.384489][ T5419] alloc_pages_mpol+0xb3/0x250 [ 72.384591][ T5419] alloc_pages_noprof+0x90/0x130 [ 72.384718][ T5419] __pmd_alloc+0x47/0x470 [ 72.384765][ T5419] handle_mm_fault+0x19d1/0x2be0 [ 72.384786][ T5419] ? __rcu_read_unlock+0x4f/0x70 [ 72.384815][ T5419] do_user_addr_fault+0x3fe/0x1090 [ 72.384914][ T5419] exc_page_fault+0x62/0xa0 [ 72.384981][ T5419] asm_exc_page_fault+0x26/0x30 [ 72.385002][ T5419] RIP: 0010:__put_user_4+0xd/0x20 [ 72.385062][ T5419] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 72.385081][ T5419] RSP: 0018:ffffc9001213bea0 EFLAGS: 00050202 [ 72.385097][ T5419] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000004940 [ 72.385111][ T5419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 72.385124][ T5419] RBP: 0000000000000000 R08: 0001ffff8685ed03 R09: 0000000000000000 [ 72.385242][ T5419] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 72.385255][ T5419] R13: ffffffff8685ed00 R14: 0000000000000000 R15: 00002000000049c0 [ 72.385335][ T5419] __se_sys_getresuid+0xb9/0x130 [ 72.385368][ T5419] __x64_sys_getresuid+0x43/0x50 [ 72.385401][ T5419] x64_sys_call+0x2ca6/0x2fb0 [ 72.385423][ T5419] do_syscall_64+0xd2/0x200 [ 72.385476][ T5419] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.385591][ T5419] ? clear_bhb_loop+0x40/0x90 [ 72.385666][ T5419] ? clear_bhb_loop+0x40/0x90 [ 72.385688][ T5419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.385710][ T5419] RIP: 0033:0x7f8f4b35e929 [ 72.385768][ T5419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.385787][ T5419] RSP: 002b:00007f8f499c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000076 [ 72.385805][ T5419] RAX: ffffffffffffffda RBX: 00007f8f4b585fa0 RCX: 00007f8f4b35e929 [ 72.385836][ T5419] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940 [ 72.385849][ T5419] RBP: 00007f8f499c7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.385862][ T5419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.385875][ T5419] R13: 0000000000000001 R14: 00007f8f4b585fa0 R15: 00007ffc46b26008 [ 72.385893][ T5419] [ 72.687017][ T5421] loop4: detected capacity change from 0 to 512 [ 72.694714][ T5421] journal_path: Lookup failure for './file0/../file0/file0' [ 72.702141][ T5421] EXT4-fs: error: could not find journal device path [ 72.803043][ T5430] pimreg: entered allmulticast mode [ 72.827080][ T5430] pimreg: left allmulticast mode [ 72.870929][ T5440] FAULT_INJECTION: forcing a failure. [ 72.870929][ T5440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.884236][ T5440] CPU: 0 UID: 0 PID: 5440 Comm: syz.2.643 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 72.884267][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.884279][ T5440] Call Trace: [ 72.884295][ T5440] [ 72.884302][ T5440] __dump_stack+0x1d/0x30 [ 72.884320][ T5440] dump_stack_lvl+0xe8/0x140 [ 72.884418][ T5440] dump_stack+0x15/0x1b [ 72.884504][ T5440] should_fail_ex+0x265/0x280 [ 72.884536][ T5440] should_fail+0xb/0x20 [ 72.884562][ T5440] should_fail_usercopy+0x1a/0x20 [ 72.884589][ T5440] _copy_to_user+0x20/0xa0 [ 72.884674][ T5440] simple_read_from_buffer+0xb5/0x130 [ 72.884703][ T5440] proc_fail_nth_read+0x100/0x140 [ 72.884783][ T5440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.884811][ T5440] vfs_read+0x19d/0x6f0 [ 72.884841][ T5440] ? __rcu_read_unlock+0x4f/0x70 [ 72.884925][ T5440] ? __rcu_read_unlock+0x4f/0x70 [ 72.884948][ T5440] ? __fget_files+0x184/0x1c0 [ 72.884971][ T5440] ksys_read+0xda/0x1a0 [ 72.884997][ T5440] __x64_sys_read+0x40/0x50 [ 72.885106][ T5440] x64_sys_call+0x2d77/0x2fb0 [ 72.885129][ T5440] do_syscall_64+0xd2/0x200 [ 72.885147][ T5440] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.885173][ T5440] ? clear_bhb_loop+0x40/0x90 [ 72.885268][ T5440] ? clear_bhb_loop+0x40/0x90 [ 72.885286][ T5440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.885306][ T5440] RIP: 0033:0x7fa96d84d33c [ 72.885322][ T5440] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.885338][ T5440] RSP: 002b:00007fa96beb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.885362][ T5440] RAX: ffffffffffffffda RBX: 00007fa96da75fa0 RCX: 00007fa96d84d33c [ 72.885373][ T5440] RDX: 000000000000000f RSI: 00007fa96beb70a0 RDI: 0000000000000006 [ 72.885385][ T5440] RBP: 00007fa96beb7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.885398][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.885408][ T5440] R13: 0000000000000000 R14: 00007fa96da75fa0 R15: 00007fff14096328 [ 72.885423][ T5440] [ 73.196219][ T5447] loop4: detected capacity change from 0 to 1024 [ 73.207465][ T5447] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 73.466990][ T5461] loop3: detected capacity change from 0 to 2048 [ 73.509622][ T5461] loop3: p1 < > p4 [ 73.515042][ T5461] loop3: p4 size 8388608 extends beyond EOD, truncated [ 73.531110][ T5474] loop4: detected capacity change from 0 to 128 [ 73.541509][ T5475] netlink: 'syz.1.656': attribute type 13 has an invalid length. [ 73.553035][ T5474] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.565832][ T5474] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.590413][ T5474] lo speed is unknown, defaulting to 1000 [ 73.789640][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.797481][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.806601][ T5475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.867175][ T5486] lo speed is unknown, defaulting to 1000 [ 73.966052][ T5491] FAULT_INJECTION: forcing a failure. [ 73.966052][ T5491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.979158][ T5491] CPU: 1 UID: 0 PID: 5491 Comm: syz.1.662 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 73.979182][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.979193][ T5491] Call Trace: [ 73.979198][ T5491] [ 73.979205][ T5491] __dump_stack+0x1d/0x30 [ 73.979252][ T5491] dump_stack_lvl+0xe8/0x140 [ 73.979270][ T5491] dump_stack+0x15/0x1b [ 73.979285][ T5491] should_fail_ex+0x265/0x280 [ 73.979313][ T5491] should_fail+0xb/0x20 [ 73.979388][ T5491] should_fail_usercopy+0x1a/0x20 [ 73.979418][ T5491] _copy_from_iter+0xcf/0xe40 [ 73.979447][ T5491] ? __build_skb_around+0x1a0/0x200 [ 73.979528][ T5491] ? __alloc_skb+0x223/0x320 [ 73.979552][ T5491] pfkey_sendmsg+0x126/0x900 [ 73.979613][ T5491] ? avc_has_perm+0x128/0x150 [ 73.979634][ T5491] ? avc_has_perm+0x149/0x150 [ 73.979657][ T5491] ? selinux_socket_sendmsg+0x175/0x1b0 [ 73.979804][ T5491] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 73.979879][ T5491] __sock_sendmsg+0x142/0x180 [ 73.979901][ T5491] ____sys_sendmsg+0x31e/0x4e0 [ 73.979935][ T5491] ___sys_sendmsg+0x17b/0x1d0 [ 73.980046][ T5491] __x64_sys_sendmsg+0xd4/0x160 [ 73.980082][ T5491] x64_sys_call+0x2999/0x2fb0 [ 73.980103][ T5491] do_syscall_64+0xd2/0x200 [ 73.980121][ T5491] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.980170][ T5491] ? clear_bhb_loop+0x40/0x90 [ 73.980188][ T5491] ? clear_bhb_loop+0x40/0x90 [ 73.980272][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.980364][ T5491] RIP: 0033:0x7f8f4b35e929 [ 73.980379][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.980397][ T5491] RSP: 002b:00007f8f499c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.980416][ T5491] RAX: ffffffffffffffda RBX: 00007f8f4b585fa0 RCX: 00007f8f4b35e929 [ 73.980427][ T5491] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 73.980437][ T5491] RBP: 00007f8f499c7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.980447][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.980473][ T5491] R13: 0000000000000000 R14: 00007f8f4b585fa0 R15: 00007ffc46b26008 [ 73.980493][ T5491] [ 74.253163][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.269709][ T5493] loop2: detected capacity change from 0 to 512 [ 74.278543][ T5493] journal_path: Lookup failure for './file0/../file0/file0' [ 74.285863][ T5493] EXT4-fs: error: could not find journal device path [ 74.327968][ T5499] FAULT_INJECTION: forcing a failure. [ 74.327968][ T5499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.341059][ T5499] CPU: 1 UID: 0 PID: 5499 Comm: syz.2.667 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 74.341085][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.341102][ T5499] Call Trace: [ 74.341109][ T5499] [ 74.341116][ T5499] __dump_stack+0x1d/0x30 [ 74.341203][ T5499] dump_stack_lvl+0xe8/0x140 [ 74.341220][ T5499] dump_stack+0x15/0x1b [ 74.341234][ T5499] should_fail_ex+0x265/0x280 [ 74.341264][ T5499] should_fail+0xb/0x20 [ 74.341370][ T5499] should_fail_usercopy+0x1a/0x20 [ 74.341402][ T5499] _copy_from_user+0x1c/0xb0 [ 74.341422][ T5499] kstrtouint_from_user+0x69/0xf0 [ 74.341451][ T5499] ? 0xffffffff81000000 [ 74.341465][ T5499] ? selinux_file_permission+0x1e4/0x320 [ 74.341501][ T5499] proc_fail_nth_write+0x50/0x160 [ 74.341517][ T5499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.341544][ T5499] vfs_write+0x266/0x8e0 [ 74.341626][ T5499] ? vfs_read+0x47f/0x6f0 [ 74.341660][ T5499] ? __rcu_read_unlock+0x4f/0x70 [ 74.341690][ T5499] ? __fget_files+0x184/0x1c0 [ 74.341709][ T5499] ksys_write+0xda/0x1a0 [ 74.341738][ T5499] __x64_sys_write+0x40/0x50 [ 74.341793][ T5499] x64_sys_call+0x2cdd/0x2fb0 [ 74.341814][ T5499] do_syscall_64+0xd2/0x200 [ 74.341832][ T5499] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.341854][ T5499] ? clear_bhb_loop+0x40/0x90 [ 74.341872][ T5499] ? clear_bhb_loop+0x40/0x90 [ 74.341978][ T5499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.341996][ T5499] RIP: 0033:0x7fa96d84d3df [ 74.342073][ T5499] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.342088][ T5499] RSP: 002b:00007fa96beb7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.342104][ T5499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa96d84d3df [ 74.342115][ T5499] RDX: 0000000000000001 RSI: 00007fa96beb70a0 RDI: 0000000000000004 [ 74.342125][ T5499] RBP: 00007fa96beb7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.342167][ T5499] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 74.342180][ T5499] R13: 0000000000000000 R14: 00007fa96da75fa0 R15: 00007fff14096328 [ 74.342196][ T5499] [ 74.656677][ T5506] loop2: detected capacity change from 0 to 1024 [ 74.664316][ T5506] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 74.677482][ T5506] siw: device registration error -23 [ 74.770011][ T5505] IPVS: Error connecting to the multicast addr [ 74.791072][ T5515] loop2: detected capacity change from 0 to 2048 [ 74.818949][ T5515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.869117][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.949226][ T5524] loop2: detected capacity change from 0 to 2048 [ 74.967156][ T5525] lo speed is unknown, defaulting to 1000 [ 74.998540][ T5524] loop2: p1 < > p4 [ 75.004435][ T5524] loop2: p4 size 8388608 extends beyond EOD, truncated [ 75.041703][ T5527] __nla_validate_parse: 9 callbacks suppressed [ 75.041718][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 75.113505][ T5529] loop3: detected capacity change from 0 to 512 [ 75.120732][ T5529] journal_path: Lookup failure for './file0/../file0/file0' [ 75.128068][ T5529] EXT4-fs: error: could not find journal device path [ 75.139118][ T5529] netlink: 68 bytes leftover after parsing attributes in process `syz.3.677'. [ 75.173966][ T5534] xt_TPROXY: Can be used only with -p tcp or -p udp [ 75.206351][ T5536] loop3: detected capacity change from 0 to 1024 [ 75.219878][ T5536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.245349][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.272312][ T5541] random: crng reseeded on system resumption [ 75.300461][ T5543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.354778][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.368770][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.379812][ T5543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.416824][ T5545] lo speed is unknown, defaulting to 1000 [ 75.485495][ T5548] loop4: detected capacity change from 0 to 512 [ 75.493337][ T5548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.507294][ T5548] EXT4-fs (loop4): 1 truncate cleaned up [ 75.514727][ T5543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.526645][ T5548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.620160][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.671622][ T5543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.739060][ T5551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 75.796932][ T5543] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.809975][ T5543] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822953][ T5543] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.835524][ T5543] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.933070][ T5572] lo speed is unknown, defaulting to 1000 [ 76.057937][ T5575] xt_nfacct: accounting object `syz1' does not exists [ 76.892352][ T29] kauditd_printk_skb: 1828 callbacks suppressed [ 76.892366][ T29] audit: type=1400 audit(1750841415.001:6896): avc: denied { create } for pid=5558 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.918435][ T29] audit: type=1400 audit(1750841415.001:6897): avc: denied { setopt } for pid=5558 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.281697][ T5583] loop4: detected capacity change from 0 to 2048 [ 77.298961][ T5577] lo speed is unknown, defaulting to 1000 [ 77.356245][ T5582] netlink: 68 bytes leftover after parsing attributes in process `syz.1.690'. [ 77.370012][ T5583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.699444][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.741392][ T5592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.694'. [ 77.782850][ T29] audit: type=1326 audit(1750841416.731:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.806659][ T29] audit: type=1326 audit(1750841416.731:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.808930][ T5605] loop4: detected capacity change from 0 to 512 [ 77.830192][ T29] audit: type=1326 audit(1750841416.731:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.837536][ T5605] EXT4-fs: Ignoring removed oldalloc option [ 77.859501][ T29] audit: type=1326 audit(1750841416.731:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.859530][ T29] audit: type=1326 audit(1750841416.731:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.867091][ T5605] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 77.888826][ T29] audit: type=1326 audit(1750841416.731:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.919160][ T5605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e118, mo2=0002] [ 77.920277][ T29] audit: type=1326 audit(1750841416.731:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.944670][ T5605] System zones: [ 77.951394][ T29] audit: type=1326 audit(1750841416.731:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5602 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 77.974647][ T5605] 1-12 [ 78.005385][ T5605] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.698: corrupted in-inode xattr: e_name out of bounds [ 78.020561][ T5605] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.698: couldn't read orphan inode 15 (err -117) [ 78.034148][ T5605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.178806][ T5620] loop3: detected capacity change from 0 to 1024 [ 78.185771][ T5620] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 78.199381][ T5620] siw: device registration error -23 [ 78.226497][ T5623] netlink: 'syz.3.703': attribute type 6 has an invalid length. [ 78.234200][ T5623] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.277805][ T5625] loop2: detected capacity change from 0 to 512 [ 78.285393][ T5625] EXT4-fs: Ignoring removed orlov option [ 78.292161][ T5625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.307475][ T5625] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.314625][ T5625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.704: bg 0: block 248: padding at end of block bitmap is not set [ 78.337047][ T5625] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.704: Failed to acquire dquot type 1 [ 78.351388][ T5628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.705'. [ 78.361592][ T5625] EXT4-fs (loop2): 1 truncate cleaned up [ 78.430042][ T5605] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.698: Directory hole found for htree leaf block 0 [ 78.443402][ T5625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.482600][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.510925][ T5639] lo speed is unknown, defaulting to 1000 [ 78.634130][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 78.642966][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 78.651862][ T5646] netlink: 2 bytes leftover after parsing attributes in process `syz.1.710'. [ 78.761927][ T5655] netlink: 68 bytes leftover after parsing attributes in process `syz.0.713'. [ 78.798786][ T5657] lo speed is unknown, defaulting to 1000 [ 79.112366][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.204524][ T5670] netlink: 'syz.2.716': attribute type 6 has an invalid length. [ 79.212308][ T5670] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.221886][ T5671] program syz.1.719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.253651][ T5673] rdma_op ffff88811a32f180 conn xmit_rdma 0000000000000000 [ 79.276864][ T5675] loop2: detected capacity change from 0 to 1024 [ 79.284740][ T5675] EXT4-fs: Ignoring removed orlov option [ 79.290484][ T5675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.336063][ T5680] loop3: detected capacity change from 0 to 128 [ 79.356133][ T5675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002] [ 79.366813][ T5675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.397327][ T5680] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.410011][ T5680] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.453392][ T5680] lo speed is unknown, defaulting to 1000 [ 80.034471][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.049076][ T5700] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 80.118132][ T5701] lo speed is unknown, defaulting to 1000 [ 80.365057][ T5704] __nla_validate_parse: 3 callbacks suppressed [ 80.365128][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 80.380354][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 80.404656][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.465969][ T5706] loop3: detected capacity change from 0 to 2048 [ 80.493504][ T5714] lo speed is unknown, defaulting to 1000 [ 80.518483][ T5706] loop3: p1 < > p4 [ 80.524845][ T5706] loop3: p4 size 8388608 extends beyond EOD, truncated [ 80.587934][ T5722] loop3: detected capacity change from 0 to 2048 [ 80.603895][ T5724] netlink: 'syz.1.741': attribute type 3 has an invalid length. [ 80.611798][ T5724] netlink: 'syz.1.741': attribute type 3 has an invalid length. [ 80.638531][ T5722] loop3: p1 < > p4 [ 80.649754][ T5722] loop3: p4 size 8388608 extends beyond EOD, truncated [ 80.702817][ T5730] loop3: detected capacity change from 0 to 1024 [ 80.709528][ T5730] EXT4-fs: Ignoring removed orlov option [ 80.715219][ T5730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.785863][ T5733] lo speed is unknown, defaulting to 1000 [ 80.857716][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 80.866607][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 80.876606][ T5732] netlink: 2 bytes leftover after parsing attributes in process `syz.0.744'. [ 80.895800][ T5730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002] [ 80.918734][ T5730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.034804][ T5739] rdma_op ffff888100064d80 conn xmit_rdma 0000000000000000 [ 81.063990][ T5742] vhci_hcd: invalid port number 216 [ 81.069260][ T5742] vhci_hcd: default hub control req: 8015 v0004 i00d8 l0 [ 81.114999][ T5750] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 81.114999][ T5750] program syz.1.750 not setting count and/or reply_len properly [ 81.276778][ T5759] lo speed is unknown, defaulting to 1000 [ 81.329646][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 81.336945][ T5762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.755'. [ 81.338558][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 81.356279][ T5764] netlink: 2 bytes leftover after parsing attributes in process `syz.1.756'. [ 81.527306][ T5774] lo speed is unknown, defaulting to 1000 [ 81.621735][ T5777] lo speed is unknown, defaulting to 1000 [ 81.771719][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.941332][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 81.941346][ T29] audit: type=1400 audit(1750841420.891:7652): avc: denied { module_request } for pid=5781 comm="syz.1.762" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 81.956061][ T5784] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 81.980160][ T29] audit: type=1400 audit(1750841420.931:7653): avc: denied { sys_module } for pid=5781 comm="syz.1.762" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.061585][ T29] audit: type=1326 audit(1750841421.011:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 82.092388][ T29] audit: type=1326 audit(1750841421.011:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f648c89d290 code=0x7ffc0000 [ 82.115812][ T29] audit: type=1326 audit(1750841421.011:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f648c8a0157 code=0x7ffc0000 [ 82.139185][ T29] audit: type=1326 audit(1750841421.011:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 82.162457][ T29] audit: type=1326 audit(1750841421.011:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f648c8a0157 code=0x7ffc0000 [ 82.185781][ T29] audit: type=1326 audit(1750841421.011:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f648c89d58a code=0x7ffc0000 [ 82.208991][ T29] audit: type=1326 audit(1750841421.011:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 82.218114][ T5794] lo speed is unknown, defaulting to 1000 [ 82.232441][ T29] audit: type=1326 audit(1750841421.011:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 82.308295][ T5790] loop3: detected capacity change from 0 to 2048 [ 82.342941][ T5799] loop2: detected capacity change from 0 to 1024 [ 82.349656][ T5799] EXT4-fs: Ignoring removed orlov option [ 82.349934][ T5790] loop3: p1 < > p4 [ 82.360843][ T5790] loop3: p4 size 8388608 extends beyond EOD, truncated [ 82.389284][ T5799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.626153][ T5812] lo speed is unknown, defaulting to 1000 [ 82.841306][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.901457][ T5822] loop4: detected capacity change from 0 to 1024 [ 82.920612][ T5822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.939236][ T5826] loop2: detected capacity change from 0 to 128 [ 82.948550][ T5826] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.961218][ T5826] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.985137][ T5826] lo speed is unknown, defaulting to 1000 [ 82.998126][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.030726][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.105959][ T5836] loop2: detected capacity change from 0 to 2048 [ 83.119832][ T5836] loop2: p1 < > p4 [ 83.127660][ T5836] loop2: p4 size 8388608 extends beyond EOD, truncated [ 83.294462][ T5857] netlink: 68 bytes leftover after parsing attributes in process `syz.0.791'. [ 83.412612][ T5861] loop3: detected capacity change from 0 to 1024 [ 83.461326][ T5861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.492131][ T5869] lo speed is unknown, defaulting to 1000 [ 83.572932][ T5861] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.893210][ T5892] loop4: detected capacity change from 0 to 128 [ 84.029006][ T5894] lo speed is unknown, defaulting to 1000 [ 84.223499][ T5892] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.236538][ T5892] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.272719][ T5892] lo speed is unknown, defaulting to 1000 [ 84.579123][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.615681][ T5905] siw: device registration error -23 [ 84.695227][ T5910] lo speed is unknown, defaulting to 1000 [ 84.788931][ T5913] loop2: detected capacity change from 0 to 512 [ 85.124497][ T5939] lo speed is unknown, defaulting to 1000 [ 85.131390][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.138922][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.146827][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.147166][ T5937] loop4: detected capacity change from 0 to 512 [ 85.154249][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.167931][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.172770][ T5937] journal_path: Lookup failure for './file0/../file0/file0' [ 85.175342][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.182656][ T5937] EXT4-fs: error: could not find journal device path [ 85.196779][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.204203][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.211695][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.219109][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.226607][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.234013][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.279421][ T5942] loop4: detected capacity change from 0 to 512 [ 85.290699][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.298323][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.300662][ T5942] journal_path: Lookup failure for './file0/../file0/file0' [ 85.305696][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.305719][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.305784][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.313091][ T5942] EXT4-fs: error: could not find journal device path [ 85.320464][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.349395][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.356777][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.364221][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.371629][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.379046][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.386433][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.393909][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.395218][ T5942] __nla_validate_parse: 7 callbacks suppressed [ 85.395294][ T5942] netlink: 68 bytes leftover after parsing attributes in process `syz.4.820'. [ 85.401341][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.423918][ T1050] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.433294][ T1050] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 85.511412][ T5946] loop4: detected capacity change from 0 to 2048 [ 85.639216][ T5946] loop4: p1 < > p4 [ 85.649796][ T5946] loop4: p4 size 8388608 extends beyond EOD, truncated [ 85.671519][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 85.680357][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 85.689149][ T5952] netlink: 2 bytes leftover after parsing attributes in process `syz.0.824'. [ 85.728967][ T5955] loop3: detected capacity change from 0 to 128 [ 85.751546][ T5955] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.780332][ T5955] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.808399][ T5955] lo speed is unknown, defaulting to 1000 [ 85.863168][ T5963] loop4: detected capacity change from 0 to 2048 [ 85.926547][ T5963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.140780][ T5974] siw: device registration error -23 [ 86.203698][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.302409][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.834'. [ 86.314301][ T5983] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.322542][ T5983] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.330788][ T5983] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.339086][ T5983] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.388350][ T5980] lo speed is unknown, defaulting to 1000 [ 86.437125][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.463985][ T5986] lo speed is unknown, defaulting to 1000 [ 86.526020][ T5988] lo speed is unknown, defaulting to 1000 [ 87.183032][ T29] kauditd_printk_skb: 876 callbacks suppressed [ 87.183112][ T29] audit: type=1400 audit(1750841426.131:8538): avc: denied { read } for pid=5993 comm="syz.4.836" dev="nsfs" ino=4026532739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.210493][ T29] audit: type=1400 audit(1750841426.131:8539): avc: denied { open } for pid=5993 comm="syz.4.836" path="net:[4026532739]" dev="nsfs" ino=4026532739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.233733][ T29] audit: type=1400 audit(1750841426.131:8540): avc: denied { create } for pid=5993 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.235160][ T5997] loop3: detected capacity change from 0 to 2048 [ 87.264507][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.836'. [ 87.274559][ T29] audit: type=1400 audit(1750841426.211:8541): avc: denied { ioctl } for pid=5993 comm="syz.4.836" path="socket:[14065]" dev="sockfs" ino=14065 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.299842][ T29] audit: type=1400 audit(1750841426.211:8542): avc: denied { create } for pid=5993 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.320232][ T29] audit: type=1400 audit(1750841426.211:8543): avc: denied { write } for pid=5993 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.340832][ T29] audit: type=1400 audit(1750841426.211:8544): avc: denied { read } for pid=5993 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.361286][ T29] audit: type=1400 audit(1750841426.221:8545): avc: denied { read write } for pid=5993 comm="syz.4.836" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.384964][ T29] audit: type=1400 audit(1750841426.221:8546): avc: denied { open } for pid=5993 comm="syz.4.836" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.408676][ T29] audit: type=1400 audit(1750841426.271:8547): avc: denied { mounton } for pid=5991 comm="syz.3.846" path="/154/file1" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.410494][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 87.437561][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.469256][ T6005] loop2: detected capacity change from 0 to 1024 [ 87.483121][ T6005] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 87.519019][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.522347][ T6005] siw: device registration error -23 [ 87.600756][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.847'. [ 87.665673][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'. [ 87.692371][ T6043] loop2: detected capacity change from 0 to 2048 [ 87.733186][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 87.748418][ T6043] loop2: p1 < > p4 [ 87.754202][ T6043] loop2: p4 size 8388608 extends beyond EOD, truncated [ 87.823156][ T6059] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 87.823156][ T6059] program syz.2.853 not setting count and/or reply_len properly [ 87.937450][ T6076] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 87.937450][ T6076] program syz.3.861 not setting count and/or reply_len properly [ 87.959658][ T6070] siw: device registration error -23 [ 87.988489][ T6080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.017872][ T6080] lo speed is unknown, defaulting to 1000 [ 88.067821][ T6080] loop4: detected capacity change from 0 to 512 [ 88.077372][ T6090] loop3: detected capacity change from 0 to 1024 [ 88.077834][ T6091] lo speed is unknown, defaulting to 1000 [ 88.084252][ T6080] EXT4-fs: Ignoring removed bh option [ 88.105425][ T6090] EXT4-fs: Ignoring removed orlov option [ 88.111182][ T6080] ext3: Unknown parameter 'smackfsdef' [ 88.130530][ T6090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.266778][ T6101] loop4: detected capacity change from 0 to 128 [ 88.296190][ T6101] bio_check_eod: 4 callbacks suppressed [ 88.296206][ T6101] syz.4.872: attempt to access beyond end of device [ 88.296206][ T6101] loop4: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 88.318956][ T6101] syz.4.872: attempt to access beyond end of device [ 88.318956][ T6101] loop4: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 88.334124][ T6101] syz.4.872: attempt to access beyond end of device [ 88.334124][ T6101] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 88.347493][ T6101] buffer_io_error: 2 callbacks suppressed [ 88.347513][ T6101] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 88.363658][ T6101] syz.4.872: attempt to access beyond end of device [ 88.363658][ T6101] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 88.377053][ T6101] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 88.385816][ T6101] syz.4.872: attempt to access beyond end of device [ 88.385816][ T6101] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 88.399168][ T6101] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 88.407903][ T6101] syz.4.872: attempt to access beyond end of device [ 88.407903][ T6101] loop4: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 88.421366][ T6101] Buffer I/O error on dev loop4, logical block 145, lost async page write [ 88.432566][ T6101] syz.4.872: attempt to access beyond end of device [ 88.432566][ T6101] loop4: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 88.445944][ T6101] Buffer I/O error on dev loop4, logical block 146, lost async page write [ 88.455053][ T6101] syz.4.872: attempt to access beyond end of device [ 88.455053][ T6101] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 88.468404][ T6101] Buffer I/O error on dev loop4, logical block 147, lost async page write [ 88.479386][ T6101] syz.4.872: attempt to access beyond end of device [ 88.479386][ T6101] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 88.493118][ T6101] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 88.501971][ T6101] syz.4.872: attempt to access beyond end of device [ 88.501971][ T6101] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 88.515411][ T6101] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 88.553698][ T6101] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 88.576120][ T6101] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 88.680666][ T6107] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 88.680666][ T6107] program syz.2.873 not setting count and/or reply_len properly [ 88.723421][ T6109] loop4: detected capacity change from 0 to 1024 [ 88.732163][ T6109] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 88.770681][ T6111] loop4: detected capacity change from 0 to 1024 [ 88.778782][ T6111] EXT4-fs: Ignoring removed bh option [ 88.786535][ T6111] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 88.815904][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.870383][ T6111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.899894][ T6111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.915599][ T6120] loop3: detected capacity change from 0 to 2048 [ 88.930819][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.969354][ T6120] loop3: p1 < > p4 [ 88.975757][ T6120] loop3: p4 size 8388608 extends beyond EOD, truncated [ 89.008770][ T6128] loop4: detected capacity change from 0 to 1024 [ 89.015503][ T6128] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 89.065709][ T6134] loop4: detected capacity change from 0 to 1024 [ 89.072674][ T6134] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 89.095160][ T6132] loop3: detected capacity change from 0 to 128 [ 89.146061][ T6137] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 89.146061][ T6137] program syz.4.886 not setting count and/or reply_len properly [ 89.227069][ T6139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.265954][ T6139] lo speed is unknown, defaulting to 1000 [ 89.274398][ T6141] loop4: detected capacity change from 0 to 1024 [ 89.316424][ T6147] loop3: detected capacity change from 0 to 1024 [ 89.318827][ T6141] EXT4-fs: Ignoring removed orlov option [ 89.344804][ T6147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.372654][ T6147] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.382255][ T6141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.426156][ T6159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.439878][ T6158] loop2: detected capacity change from 0 to 2048 [ 89.470026][ T6161] loop3: detected capacity change from 0 to 128 [ 89.486672][ T6161] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.499432][ T6161] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.528801][ T6158] loop2: p1 < > p4 [ 89.534842][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.543228][ T6158] loop2: p4 size 8388608 extends beyond EOD, truncated [ 89.557434][ T6161] lo speed is unknown, defaulting to 1000 [ 89.566065][ T6164] siw: device registration error -23 [ 89.622653][ T6174] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 89.622653][ T6174] program syz.4.898 not setting count and/or reply_len properly [ 89.645065][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.707367][ T6186] loop3: detected capacity change from 0 to 2048 [ 89.720713][ T6186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.746804][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.769284][ T6193] loop4: detected capacity change from 0 to 1024 [ 89.782977][ T6193] EXT4-fs: Ignoring removed bh option [ 89.791440][ T6193] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 89.805232][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.812689][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.812844][ T6197] loop2: detected capacity change from 0 to 2048 [ 89.826214][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.834039][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.841571][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.842628][ T6199] lo speed is unknown, defaulting to 1000 [ 89.849033][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.849056][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.849076][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.849095][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.849174][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.892172][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.899835][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.907739][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.909914][ T6197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.915201][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.929601][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.934694][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.954384][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.961823][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.969392][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.977003][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.977292][ T6204] loop3: detected capacity change from 0 to 2048 [ 89.984685][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 89.998325][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.005966][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.013397][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.020956][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.028346][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.035816][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.043211][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.052112][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 90.052485][ T6193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.078833][ T6204] loop3: p1 < > p4 [ 90.083380][ T6204] loop3: p4 size 8388608 extends beyond EOD, truncated [ 90.228129][ T6230] loop3: detected capacity change from 0 to 1024 [ 90.234735][ T6233] loop2: detected capacity change from 0 to 1024 [ 90.241678][ T6233] EXT4-fs: Ignoring removed orlov option [ 90.330867][ T6239] loop3: detected capacity change from 0 to 1024 [ 90.337809][ T6239] EXT4-fs: Ignoring removed bh option [ 90.346409][ T6239] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 90.383724][ T6239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.400809][ T6247] loop4: detected capacity change from 0 to 1024 [ 90.407552][ T6247] EXT4-fs: Ignoring removed bh option [ 90.413362][ T6247] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 90.455543][ T6247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.479609][ T6252] __nla_validate_parse: 20 callbacks suppressed [ 90.479624][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 90.532441][ T6258] loop3: detected capacity change from 0 to 1024 [ 90.548713][ T6258] EXT4-fs: Ignoring removed orlov option [ 90.554419][ T6258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.623071][ T6258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002] [ 90.639928][ T6267] loop4: detected capacity change from 0 to 512 [ 90.650716][ T6267] journal_path: Lookup failure for './file0/../file0/file0' [ 90.658109][ T6267] EXT4-fs: error: could not find journal device path [ 90.667306][ T6267] netlink: 68 bytes leftover after parsing attributes in process `syz.4.933'. [ 90.715652][ T6270] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 90.715652][ T6270] program syz.4.935 not setting count and/or reply_len properly [ 90.750322][ T6273] loop2: detected capacity change from 0 to 1024 [ 90.806851][ T6278] loop4: detected capacity change from 0 to 128 [ 90.870238][ T6283] loop2: detected capacity change from 0 to 2048 [ 90.880725][ T6281] loop4: detected capacity change from 0 to 2048 [ 90.925339][ T6283] loop2: p1 < > p4 [ 90.937564][ T6283] loop2: p4 size 8388608 extends beyond EOD, truncated [ 90.965183][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 91.021005][ T6295] loop4: detected capacity change from 0 to 1024 [ 91.036554][ T6295] EXT4-fs: Ignoring removed orlov option [ 91.407135][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.421077][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.441469][ T6304] loop3: detected capacity change from 0 to 512 [ 91.468320][ T6304] journal_path: Lookup failure for './file0/../file0/file0' [ 91.475642][ T6304] EXT4-fs: error: could not find journal device path [ 91.498438][ T6307] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 91.498438][ T6307] program syz.4.947 not setting count and/or reply_len properly [ 91.569984][ T6304] netlink: 68 bytes leftover after parsing attributes in process `syz.3.946'. [ 91.592803][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.948'. [ 91.819829][ T6316] loop3: detected capacity change from 0 to 1024 [ 91.913493][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 91.948130][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 91.955656][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 91.974514][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 91.981990][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 91.989460][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 91.996928][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.004389][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.012144][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.019657][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.027100][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.034547][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.041950][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.054416][ T6328] loop4: detected capacity change from 0 to 1024 [ 92.061677][ T6328] EXT4-fs: Ignoring removed bh option [ 92.061763][ T6334] lo speed is unknown, defaulting to 1000 [ 92.067516][ T6328] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 92.084261][ T6340] loop2: detected capacity change from 0 to 256 [ 92.093390][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.100829][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.108301][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.115715][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.123138][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.130681][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.138155][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.145628][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.153045][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.160537][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.168212][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.175599][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.183078][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.190482][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.197979][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 92.283489][ T6349] lo speed is unknown, defaulting to 1000 [ 92.367663][ T29] kauditd_printk_skb: 1135 callbacks suppressed [ 92.367678][ T29] audit: type=1326 audit(1750841431.311:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6344 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 92.593576][ T6352] loop4: detected capacity change from 0 to 512 [ 92.636924][ T6352] journal_path: Lookup failure for './file0/../file0/file0' [ 92.644273][ T6352] EXT4-fs: error: could not find journal device path [ 92.726666][ T6352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.959'. [ 92.767541][ T6353] lo speed is unknown, defaulting to 1000 [ 92.805558][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 92.866192][ T29] audit: type=1400 audit(1750841431.811:9684): avc: denied { map } for pid=6358 comm="syz.1.962" path="socket:[15837]" dev="sockfs" ino=15837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 92.902069][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 93.028792][ T6366] loop2: detected capacity change from 0 to 2048 [ 93.188236][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 93.197161][ T29] audit: type=1326 audit(1750841432.131:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.220578][ T29] audit: type=1326 audit(1750841432.131:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.243892][ T29] audit: type=1326 audit(1750841432.131:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.267267][ T29] audit: type=1326 audit(1750841432.131:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.290601][ T29] audit: type=1326 audit(1750841432.131:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.313855][ T29] audit: type=1326 audit(1750841432.131:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.337138][ T29] audit: type=1326 audit(1750841432.141:9691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.371111][ T6388] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.379419][ T6388] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.387626][ T6388] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.395840][ T6388] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.469053][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.970'. [ 93.489738][ T29] audit: type=1326 audit(1750841432.361:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96d84e929 code=0x7ffc0000 [ 93.495476][ T6390] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.521327][ T6390] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.529553][ T6390] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.537749][ T6390] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.655905][ T6398] loop3: detected capacity change from 0 to 512 [ 93.673873][ T6398] journal_path: Lookup failure for './file0/../file0/file0' [ 93.681273][ T6398] EXT4-fs: error: could not find journal device path [ 93.704170][ T6400] loop2: detected capacity change from 0 to 1024 [ 93.711806][ T6400] EXT4-fs: Ignoring removed orlov option [ 93.717535][ T6400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.750370][ T6400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002] [ 93.762917][ T6406] loop3: detected capacity change from 0 to 1024 [ 93.770159][ T6406] EXT4-fs: Ignoring removed orlov option [ 93.857418][ T6413] loop3: detected capacity change from 0 to 2048 [ 93.906275][ T6417] futex_wake_op: syz.4.977 tries to shift op by -1; fix this program [ 93.914841][ T6413] loop3: p1 < > p4 [ 93.919854][ T6413] loop3: p4 size 8388608 extends beyond EOD, truncated [ 93.983327][ T6420] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 93.983327][ T6420] program syz.3.979 not setting count and/or reply_len properly [ 94.083166][ T6435] xt_hashlimit: max too large, truncated to 1048576 [ 94.098786][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.106258][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.123557][ T6435] loop3: detected capacity change from 0 to 2048 [ 94.135468][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.143038][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.150518][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.157905][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.158692][ T6436] lo speed is unknown, defaulting to 1000 [ 94.165300][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.178481][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.185863][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.193263][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.200713][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.208119][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.215950][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.223370][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.230835][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.238270][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.245670][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.253071][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.260543][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.267976][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.275382][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.282838][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.290259][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.297648][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.305075][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.312552][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.320020][ T36] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.328434][ T36] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.339035][ T6442] lo speed is unknown, defaulting to 1000 [ 94.503925][ T6450] lo speed is unknown, defaulting to 1000 [ 94.560657][ T6452] loop2: detected capacity change from 0 to 1024 [ 94.567586][ T6452] EXT4-fs: Ignoring removed bh option [ 94.573456][ T6452] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 94.610507][ T6455] lo speed is unknown, defaulting to 1000 [ 94.686021][ T6452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.764945][ T6461] loop4: detected capacity change from 0 to 1024 [ 94.771646][ T6461] EXT4-fs: Ignoring removed orlov option [ 94.777375][ T6461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.785241][ T6459] loop2: detected capacity change from 0 to 1024 [ 94.793369][ T6459] EXT4-fs: Ignoring removed orlov option [ 94.809288][ T6461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002] [ 94.886726][ T6472] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 94.886726][ T6472] program syz.2.993 not setting count and/or reply_len properly [ 94.923178][ T6474] loop2: detected capacity change from 0 to 1024 [ 94.930047][ T6474] EXT4-fs: Ignoring removed orlov option [ 95.027785][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.035303][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.052702][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.053983][ T6487] lo speed is unknown, defaulting to 1000 [ 95.060187][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.060222][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.080789][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.088199][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.095701][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.103215][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.110680][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.118093][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.125524][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.139269][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.146735][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.154288][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.161857][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.169327][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.176848][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.184314][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.191751][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.199221][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.206681][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.214085][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.221491][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.228900][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.236284][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.243836][ T1050] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 95.252121][ T1050] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.288604][ T6491] loop2: detected capacity change from 0 to 2048 [ 95.318930][ T6491] loop2: p1 < > p4 [ 95.323179][ T6491] loop2: p4 size 8388608 extends beyond EOD, truncated [ 95.403251][ T6512] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 95.403251][ T6512] program syz.3.1005 not setting count and/or reply_len properly [ 95.412231][ T6513] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 95.451849][ T6495] loop2: detected capacity change from 0 to 2048 [ 95.499687][ T6495] loop2: p1 < > p4 [ 95.504178][ T6495] loop2: p4 size 8388608 extends beyond EOD, truncated [ 95.545368][ T6526] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.566905][ T6528] siw: device registration error -23 [ 95.601863][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.620460][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.631076][ T3310] EXT4-fs unmount: 37 callbacks suppressed [ 95.631088][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.647160][ T6526] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.648825][ T6536] xt_hashlimit: max too large, truncated to 1048576 [ 95.666436][ T6539] __nla_validate_parse: 14 callbacks suppressed [ 95.666451][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 95.737441][ T6544] loop4: detected capacity change from 0 to 2048 [ 95.748781][ T6526] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.829926][ T6526] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.841695][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1019'. [ 95.850917][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1019'. [ 96.181680][ T6553] lo speed is unknown, defaulting to 1000 [ 96.208832][ T6526] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245809][ T6526] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.292384][ T6526] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.314131][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 96.323241][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 96.332235][ T6561] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1021'. [ 96.343023][ T6544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.372892][ T6526] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.383886][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.549675][ T6575] lo speed is unknown, defaulting to 1000 [ 96.556394][ T6573] loop4: detected capacity change from 0 to 1024 [ 96.563304][ T6573] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 96.674402][ T6587] loop4: detected capacity change from 0 to 1024 [ 96.682207][ T6589] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 96.682207][ T6589] program syz.1.1031 not setting count and/or reply_len properly [ 96.699743][ T6587] EXT4-fs: Ignoring removed orlov option [ 96.705410][ T6587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.741442][ T6587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002] [ 96.750977][ T6587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.117225][ T6641] lo speed is unknown, defaulting to 1000 [ 97.507206][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 97.507221][ T29] audit: type=1400 audit(1750841436.451:10505): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.533920][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.591192][ T6653] loop4: detected capacity change from 0 to 1024 [ 97.598181][ T6653] EXT4-fs: Ignoring removed orlov option [ 97.606958][ T6653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.626012][ T29] audit: type=1400 audit(1750841436.571:10506): avc: denied { add_name } for pid=6652 comm="syz.4.1055" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.646811][ T29] audit: type=1400 audit(1750841436.571:10507): avc: denied { create } for pid=6652 comm="syz.4.1055" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.674708][ T29] audit: type=1400 audit(1750841436.621:10508): avc: denied { read open } for pid=6652 comm="syz.4.1055" path="/174/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.698138][ T29] audit: type=1400 audit(1750841436.651:10509): avc: denied { write } for pid=6652 comm="syz.4.1055" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.768537][ T6657] futex_wake_op: syz.2.1054 tries to shift op by -1; fix this program [ 97.798241][ T29] audit: type=1400 audit(1750841436.741:10510): avc: denied { block_suspend } for pid=6650 comm="syz.2.1054" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.882272][ T29] audit: type=1326 audit(1750841436.801:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 97.905881][ T29] audit: type=1326 audit(1750841436.801:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.3.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 97.963538][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.975306][ T29] audit: type=1326 audit(1750841436.921:10513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 98.008006][ T29] audit: type=1326 audit(1750841436.951:10514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648c89e929 code=0x7ffc0000 [ 98.043089][ T6668] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1060'. [ 98.053741][ T6670] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.097212][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.105972][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.129323][ T6670] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.198132][ T6670] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.268615][ T6670] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.363924][ T6670] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.376799][ T6670] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.392594][ T6689] loop3: detected capacity change from 0 to 1024 [ 98.402230][ T6689] EXT4-fs: Ignoring removed orlov option [ 98.407974][ T6689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.408954][ T6670] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.427977][ T6670] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.457391][ T6689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002] [ 98.460555][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'. [ 98.475903][ T6689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.684036][ T6708] loop2: detected capacity change from 0 to 1024 [ 98.692010][ T6708] EXT4-fs: Ignoring removed orlov option [ 98.700041][ T6708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.900198][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.956570][ T6714] loop2: detected capacity change from 0 to 2048 [ 99.006841][ T6714] loop2: p1 < > p4 [ 99.016008][ T6714] loop2: p4 size 8388608 extends beyond EOD, truncated [ 99.030697][ T6716] loop4: detected capacity change from 0 to 1024 [ 99.073183][ T6716] EXT4-fs: Ignoring removed orlov option [ 99.086572][ T6716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.087910][ T6722] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 99.087910][ T6722] program syz.1.1076 not setting count and/or reply_len properly [ 99.140315][ T6723] lo speed is unknown, defaulting to 1000 [ 99.148999][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.156410][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.186741][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.194208][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.201641][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.209130][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.216538][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.223948][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.231357][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.238768][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.246217][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.253614][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.279748][ T6723] loop2: detected capacity change from 0 to 256 [ 99.295602][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.374453][ T6738] loop3: detected capacity change from 0 to 1024 [ 99.449498][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.456951][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.464513][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.472028][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.479476][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.486863][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.494345][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.501844][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.509324][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.516753][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.524303][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.531751][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.538553][ T6738] EXT4-fs: Ignoring removed bh option [ 99.539133][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.539155][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.548950][ T6738] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 99.551948][ T4584] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.577391][ T4584] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.599837][ T6745] futex_wake_op: syz.1.1080 tries to shift op by -1; fix this program [ 99.612390][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.659326][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.671447][ T6738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.692653][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.766943][ T6762] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 99.766943][ T6762] program syz.2.1088 not setting count and/or reply_len properly [ 99.970598][ T6770] loop2: detected capacity change from 0 to 2048 [ 100.013399][ T6772] lo speed is unknown, defaulting to 1000 [ 100.020659][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.028074][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.038455][ T6773] loop4: detected capacity change from 0 to 128 [ 100.059695][ T6774] loop3: detected capacity change from 0 to 256 [ 100.127164][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.134728][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.142238][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.149840][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.157243][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.165081][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.172498][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.179896][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.187267][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.194742][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.383487][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.390956][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.398383][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.405823][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.413254][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.420730][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.428206][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.435640][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.443036][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.450510][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.457881][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.465361][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.472768][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.480162][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.487644][ T4584] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 100.495391][ T6770] loop2: p1 < > p4 [ 100.508199][ T6770] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.518393][ T6773] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.531012][ T6773] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.587452][ T4584] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.620434][ T6767] lo speed is unknown, defaulting to 1000 [ 100.803151][ T6797] loop2: detected capacity change from 0 to 512 [ 100.819394][ T6797] journal_path: Lookup failure for './file0/../file0/file0' [ 100.824165][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.826847][ T6797] EXT4-fs: error: could not find journal device path [ 100.842967][ T6793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.855139][ T6797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1099'. [ 100.909631][ T6813] loop2: detected capacity change from 0 to 1024 [ 100.921770][ T6813] EXT4-fs: Ignoring removed orlov option [ 100.933986][ T6813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.937098][ T6811] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 100.937098][ T6811] program syz.4.1102 not setting count and/or reply_len properly [ 100.984782][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 100.992269][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.008490][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.015904][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.023419][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.030903][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.038382][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.045776][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.053212][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.060617][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.068001][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.076646][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.085640][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.093130][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.101230][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.108643][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.116042][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.123516][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.130961][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.138608][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.146282][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.153701][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.161109][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.168527][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.175990][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.183406][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.190954][ T2960] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 101.199026][ T2960] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 101.259587][ T6827] loop3: detected capacity change from 0 to 2048 [ 101.272213][ T6827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.340374][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.389925][ T6839] xt_hashlimit: max too large, truncated to 1048576 [ 101.530873][ T6840] vlan2: entered allmulticast mode [ 101.652929][ T6846] loop3: detected capacity change from 0 to 2048 [ 101.708736][ T6846] loop3: p1 < > p4 [ 101.713193][ T6846] loop3: p4 size 8388608 extends beyond EOD, truncated [ 101.734491][ T6848] loop4: detected capacity change from 0 to 512 [ 101.742296][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.748397][ T6848] journal_path: Lookup failure for './file0/../file0/file0' [ 101.758609][ T6848] EXT4-fs: error: could not find journal device path [ 101.776815][ T6848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1117'. [ 101.805531][ T6851] loop4: detected capacity change from 0 to 1024 [ 101.812225][ T6851] EXT4-fs: Ignoring removed orlov option [ 101.813121][ T6852] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 101.813121][ T6852] program syz.2.1118 not setting count and/or reply_len properly [ 101.836339][ T6851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.858210][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.865650][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.879506][ T6855] loop3: detected capacity change from 0 to 256 [ 101.933838][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.941324][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.948837][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.956291][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.963739][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.971303][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.978896][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.986318][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 101.993892][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.001462][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.118542][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.126002][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.133418][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.140835][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.148343][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.155807][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.163315][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.170711][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.178157][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.185588][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.192983][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.200401][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.207850][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.215242][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.222677][ T3388] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.233717][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.252966][ T6867] loop2: detected capacity change from 0 to 2048 [ 102.263047][ T3388] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 102.307282][ T6867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.317013][ T6876] loop3: detected capacity change from 0 to 1024 [ 102.338227][ T6876] EXT4-fs: Ignoring removed orlov option [ 102.350709][ T6871] loop4: detected capacity change from 0 to 1024 [ 102.357723][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.358004][ T6876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.368125][ T6871] EXT4-fs: Ignoring removed bh option [ 102.422708][ T6871] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 102.465817][ T6882] lo speed is unknown, defaulting to 1000 [ 102.511965][ T6871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.567488][ T6871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.632472][ T6888] loop2: detected capacity change from 0 to 512 [ 102.639219][ T6888] journal_path: Lookup failure for './file0/../file0/file0' [ 102.646592][ T6888] EXT4-fs: error: could not find journal device path [ 102.655292][ T6888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1129'. [ 102.677548][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.689511][ T6892] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 102.689511][ T6892] program syz.2.1132 not setting count and/or reply_len properly [ 102.733905][ T6897] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 102.733905][ T6897] program syz.4.1131 not setting count and/or reply_len properly [ 102.837767][ T6899] loop2: detected capacity change from 0 to 1024 [ 102.866085][ T6899] EXT4-fs: Ignoring removed orlov option [ 102.891011][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 102.891026][ T29] audit: type=1400 audit(1750841441.841:11396): avc: denied { prog_load } for pid=6902 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.915909][ T29] audit: type=1400 audit(1750841441.841:11397): avc: denied { bpf } for pid=6902 comm="+}[@" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.936401][ T29] audit: type=1400 audit(1750841441.841:11398): avc: denied { perfmon } for pid=6902 comm="+}[@" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.977654][ T6903] loop4: detected capacity change from 0 to 1024 [ 102.988461][ T6899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.004698][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 103.008159][ T29] audit: type=1400 audit(1750841441.911:11399): avc: denied { prog_run } for pid=6902 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.013580][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 103.013594][ T6906] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1134'. [ 103.018484][ T6903] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 103.032198][ T29] audit: type=1400 audit(1750841441.921:11400): avc: denied { create } for pid=6902 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.078292][ T29] audit: type=1400 audit(1750841441.921:11401): avc: denied { write } for pid=6902 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.078316][ T29] audit: type=1400 audit(1750841441.921:11402): avc: denied { read write } for pid=6902 comm="+}[@" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.078340][ T29] audit: type=1400 audit(1750841441.921:11403): avc: denied { open } for pid=6902 comm="+}[@" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.078416][ T29] audit: type=1400 audit(1750841441.921:11404): avc: denied { ioctl } for pid=6902 comm="+}[@" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.124079][ T29] audit: type=1400 audit(1750841441.961:11405): avc: denied { mounton } for pid=6902 comm="+}[@" path="/187/file1" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.125282][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.241405][ T6914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.352104][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.470938][ T6938] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 103.470938][ T6938] program syz.0.1149 not setting count and/or reply_len properly [ 103.527695][ T6942] loop3: detected capacity change from 0 to 1024 [ 103.542423][ T6946] loop2: detected capacity change from 0 to 512 [ 103.550716][ T6946] journal_path: Lookup failure for './file0/../file0/file0' [ 103.558094][ T6946] EXT4-fs: error: could not find journal device path [ 103.567644][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1153'. [ 103.599442][ T6942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.612484][ T6951] loop4: detected capacity change from 0 to 1024 [ 103.619331][ T6942] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.628694][ T6951] EXT4-fs: Ignoring removed orlov option [ 103.643367][ T6958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.678930][ T6951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.940403][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.128642][ T6985] lo speed is unknown, defaulting to 1000 [ 104.187342][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1168'. [ 104.212903][ T6993] xt_hashlimit: max too large, truncated to 1048576 [ 104.251607][ T6993] loop4: detected capacity change from 0 to 2048 [ 104.279782][ T6993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.301648][ T6998] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.431096][ T6998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.551996][ T6998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.611134][ T6998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.682589][ T6998] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.701609][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.711194][ T6998] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.773148][ T6998] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.798949][ T6998] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.818473][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 104.827373][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 104.921452][ T7020] loop4: detected capacity change from 0 to 2048 [ 104.945765][ T7027] loop2: detected capacity change from 0 to 1024 [ 104.954271][ T7027] EXT4-fs: Ignoring removed orlov option [ 104.963270][ T7027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.989863][ T7020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.066414][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.220629][ T7046] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.299682][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.310162][ T7046] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.349658][ T7046] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.389530][ T7046] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.412192][ T7067] loop4: detected capacity change from 0 to 1024 [ 105.445401][ T7046] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.457261][ T7046] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.468922][ T7046] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.480698][ T7046] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.499819][ T7067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.528796][ T7067] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.540713][ T7080] futex_wake_op: syz.1.1198 tries to shift op by -1; fix this program [ 105.558957][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.566377][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.599994][ T7079] lo speed is unknown, defaulting to 1000 [ 105.609324][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.616754][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.624301][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.631715][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.639117][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.646572][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.653976][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.661430][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.669022][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.676422][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.685185][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.692699][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.700130][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.707513][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.714921][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.722319][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.729710][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.737165][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.744562][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.751948][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.759428][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.766837][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.766861][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.766881][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.766902][ T4584] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 105.800310][ T7086] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.843716][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.843848][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.855647][ T7083] lo speed is unknown, defaulting to 1000 [ 105.874059][ T7079] loop3: detected capacity change from 0 to 256 [ 105.912539][ T4584] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 105.920911][ T7086] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.026932][ T7086] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.062126][ T7086] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.093026][ T7096] loop3: detected capacity change from 0 to 1024 [ 106.094659][ T7096] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 106.124582][ T7096] siw: device registration error -23 [ 106.154496][ T7086] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.224793][ T7086] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.237286][ T7086] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.272556][ T7086] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.320562][ T7104] __nla_validate_parse: 5 callbacks suppressed [ 106.320578][ T7104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1207'. [ 106.433621][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.441230][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.461877][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.469313][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.476750][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.484270][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.491682][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.499182][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.506681][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.514083][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.514865][ T7116] lo speed is unknown, defaulting to 1000 [ 106.521573][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.534653][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.539565][ T7120] loop3: detected capacity change from 0 to 1024 [ 106.583061][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.590522][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.598113][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.605589][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.613178][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.620628][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.628058][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.635544][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.642981][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.648274][ T7125] xt_hashlimit: max too large, truncated to 1048576 [ 106.650396][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.650417][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.650446][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.679263][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.686700][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.694100][ T2960] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 106.709411][ T2960] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 106.709504][ T7120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.740639][ T7125] vlan2: entered allmulticast mode [ 106.746641][ T7120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.858785][ T7138] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 106.858785][ T7138] program syz.1.1219 not setting count and/or reply_len properly [ 106.942573][ T7152] futex_wake_op: syz.3.1218 tries to shift op by -1; fix this program [ 106.980941][ T7160] lo speed is unknown, defaulting to 1000 [ 107.012170][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 107.021118][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 107.030053][ T7166] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1228'. [ 107.162745][ T7177] lo speed is unknown, defaulting to 1000 [ 107.293906][ T7182] lo speed is unknown, defaulting to 1000 [ 107.551425][ T7184] lo speed is unknown, defaulting to 1000 [ 107.729720][ T7193] xt_hashlimit: max too large, truncated to 1048576 [ 108.006323][ T29] kauditd_printk_skb: 1058 callbacks suppressed [ 108.006338][ T29] audit: type=1400 audit(1750841446.921:12464): avc: denied { create } for pid=7211 comm="syz.1.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.033512][ T29] audit: type=1400 audit(1750841446.921:12465): avc: denied { write } for pid=7211 comm="syz.1.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.053973][ T29] audit: type=1400 audit(1750841446.921:12466): avc: denied { read } for pid=7211 comm="syz.1.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.150162][ T7212] loop2: detected capacity change from 0 to 256 [ 108.254334][ T29] audit: type=1326 audit(1750841446.951:12467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 108.278051][ T29] audit: type=1326 audit(1750841446.951:12468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 108.301615][ T29] audit: type=1326 audit(1750841446.961:12469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 108.325173][ T29] audit: type=1326 audit(1750841446.961:12470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 108.349115][ T29] audit: type=1326 audit(1750841446.961:12471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 108.372860][ T29] audit: type=1326 audit(1750841446.961:12472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 108.393968][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 108.396379][ T29] audit: type=1326 audit(1750841446.961:12473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7214 comm="syz.1.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4b35e929 code=0x7ffc0000 [ 108.405200][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 108.405215][ T7219] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1243'. [ 108.694395][ T7226] xt_hashlimit: max too large, truncated to 1048576 [ 108.731953][ T7233] loop2: detected capacity change from 0 to 1024 [ 108.739570][ T7233] EXT4-fs: Ignoring removed orlov option [ 108.749633][ T7233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.763761][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 108.772744][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 108.781653][ T7236] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1251'. [ 108.815919][ T7239] lo speed is unknown, defaulting to 1000 [ 108.974819][ T7241] lo speed is unknown, defaulting to 1000 [ 109.003633][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.035247][ T7250] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.069865][ T7250] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.100687][ T7250] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.130491][ T7250] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.192526][ T7250] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.217784][ T7250] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.244290][ T7250] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.257793][ T7250] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.393653][ T7277] loop2: detected capacity change from 0 to 1024 [ 109.411992][ T7277] EXT4-fs: Ignoring removed orlov option [ 109.419720][ T7277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.630301][ T7282] lo speed is unknown, defaulting to 1000 [ 109.668437][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.975567][ T7295] loop3: detected capacity change from 0 to 1024 [ 110.095872][ T7295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.111697][ T7295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.185592][ T7307] loop4: detected capacity change from 0 to 128 [ 110.343662][ T7307] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.356584][ T7307] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.387632][ T7307] lo speed is unknown, defaulting to 1000 [ 110.641629][ T7312] loop3: detected capacity change from 0 to 2048 [ 110.679674][ T7312] loop3: p1 < > p4 [ 110.684640][ T7312] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.778504][ T7334] xt_hashlimit: max too large, truncated to 1048576 [ 110.795883][ T7334] loop2: detected capacity change from 0 to 2048 [ 110.809424][ T7335] $H: renamed from bond0 (while UP) [ 110.817426][ T7335] $H: entered promiscuous mode [ 110.822510][ T7335] bond_slave_0: entered promiscuous mode [ 110.828327][ T7335] bond_slave_1: entered promiscuous mode [ 110.880682][ T7335] dummy0: entered promiscuous mode [ 110.888335][ T7339] futex_wake_op: syz.3.1283 tries to shift op by -1; fix this program [ 110.897132][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.897429][ T7334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.943868][ T7343] loop4: detected capacity change from 0 to 256 [ 110.952169][ T7343] vfat: Unknown parameter 'f)՝"' [ 111.115330][ T7353] lo speed is unknown, defaulting to 1000 [ 111.640133][ T7363] FAULT_INJECTION: forcing a failure. [ 111.640133][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.653338][ T7363] CPU: 0 UID: 0 PID: 7363 Comm: syz.3.1294 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 111.653412][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.653425][ T7363] Call Trace: [ 111.653432][ T7363] [ 111.653440][ T7363] __dump_stack+0x1d/0x30 [ 111.653461][ T7363] dump_stack_lvl+0xe8/0x140 [ 111.653482][ T7363] dump_stack+0x15/0x1b [ 111.653499][ T7363] should_fail_ex+0x265/0x280 [ 111.653530][ T7363] should_fail+0xb/0x20 [ 111.653557][ T7363] should_fail_usercopy+0x1a/0x20 [ 111.653705][ T7363] _copy_from_user+0x1c/0xb0 [ 111.653727][ T7363] __x64_sys_epoll_ctl+0x92/0x100 [ 111.653817][ T7363] x64_sys_call+0x26ef/0x2fb0 [ 111.653839][ T7363] do_syscall_64+0xd2/0x200 [ 111.653857][ T7363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.653884][ T7363] ? clear_bhb_loop+0x40/0x90 [ 111.653946][ T7363] ? clear_bhb_loop+0x40/0x90 [ 111.653968][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.654004][ T7363] RIP: 0033:0x7f648c89e929 [ 111.654019][ T7363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.654037][ T7363] RSP: 002b:00007f648af07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 111.654056][ T7363] RAX: ffffffffffffffda RBX: 00007f648cac5fa0 RCX: 00007f648c89e929 [ 111.654068][ T7363] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000007 [ 111.654080][ T7363] RBP: 00007f648af07090 R08: 0000000000000000 R09: 0000000000000000 [ 111.654097][ T7363] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 111.654110][ T7363] R13: 0000000000000000 R14: 00007f648cac5fa0 R15: 00007ffc67e275b8 [ 111.654129][ T7363] [ 111.899554][ T7363] loop3: detected capacity change from 0 to 1024 [ 111.906479][ T7363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.906698][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.933126][ T7363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.989517][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.065741][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 112.074751][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 112.083616][ T7387] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1303'. [ 112.155467][ T7392] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1306'. [ 112.169858][ T7393] loop3: detected capacity change from 0 to 1024 [ 112.189183][ T7393] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 112.244780][ T7393] siw: device registration error -23 [ 112.272191][ T7402] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 112.272191][ T7402] program syz.1.1309 not setting count and/or reply_len properly [ 112.964186][ T7436] lo speed is unknown, defaulting to 1000 [ 113.080693][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 113.080708][ T29] audit: type=1400 audit(1750841452.031:13015): avc: denied { create } for pid=7440 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.170510][ T29] audit: type=1400 audit(1750841452.061:13016): avc: denied { setopt } for pid=7440 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.230161][ T29] audit: type=1326 audit(1750841452.161:13017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.4.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9eb3e929 code=0x7ffc0000 [ 113.253804][ T29] audit: type=1326 audit(1750841452.161:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.4.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9eb3e929 code=0x7ffc0000 [ 113.277346][ T29] audit: type=1400 audit(1750841452.161:13019): avc: denied { name_bind } for pid=7451 comm="syz.1.1329" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 113.299356][ T29] audit: type=1400 audit(1750841452.161:13020): avc: denied { node_bind } for pid=7451 comm="syz.1.1329" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 113.321905][ T29] audit: type=1400 audit(1750841452.161:13021): avc: denied { write } for pid=7451 comm="gtp" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.344678][ T29] audit: type=1326 audit(1750841452.161:13022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.4.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9eb3e929 code=0x7ffc0000 [ 113.368174][ T29] audit: type=1326 audit(1750841452.161:13023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.4.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9eb3e929 code=0x7ffc0000 [ 113.391880][ T29] audit: type=1326 audit(1750841452.161:13024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.4.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9eb3e929 code=0x7ffc0000 [ 113.564068][ T7469] xt_hashlimit: max too large, truncated to 1048576 [ 113.582585][ T7469] loop4: detected capacity change from 0 to 2048 [ 113.599100][ T7471] siw: device registration error -23 [ 113.626168][ T7469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.700168][ T7482] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 113.700168][ T7482] program syz.0.1340 not setting count and/or reply_len properly [ 113.755674][ T7485] vlan2: entered allmulticast mode [ 113.848843][ T7493] xt_hashlimit: max too large, truncated to 1048576 [ 113.896187][ T7494] lo speed is unknown, defaulting to 1000 [ 114.039375][ T7504] loop2: detected capacity change from 0 to 1024 [ 114.046434][ T7504] EXT4-fs: Ignoring removed orlov option [ 114.055206][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.359320][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.389296][ T7516] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 114.389296][ T7516] program syz.2.1352 not setting count and/or reply_len properly [ 114.420494][ T7514] loop3: detected capacity change from 0 to 1024 [ 114.441725][ T7514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.455725][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.460362][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.551978][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'. [ 114.599191][ T7534] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 114.599191][ T7534] program syz.3.1361 not setting count and/or reply_len properly [ 114.640469][ T7536] loop2: detected capacity change from 0 to 1024 [ 114.647032][ T7536] EXT4-fs: Ignoring removed orlov option [ 114.662959][ T7539] loop3: detected capacity change from 0 to 1024 [ 114.675212][ T7539] EXT4-fs: Ignoring removed orlov option [ 114.694306][ T7536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.761067][ T7549] futex_wake_op: syz.4.1360 tries to shift op by -1; fix this program [ 115.150744][ T7558] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 115.150744][ T7558] program syz.3.1366 not setting count and/or reply_len properly [ 115.201019][ T7563] loop2: detected capacity change from 0 to 1024 [ 115.215893][ T7566] xt_hashlimit: max too large, truncated to 1048576 [ 115.292216][ T7571] loop3: detected capacity change from 0 to 2048 [ 115.313379][ T7573] lo speed is unknown, defaulting to 1000 [ 115.338366][ T7571] loop3: p1 < > p4 [ 115.344285][ T7571] loop3: p4 size 8388608 extends beyond EOD, truncated [ 115.412696][ T7577] loop3: detected capacity change from 0 to 1024 [ 115.435059][ T7577] EXT4-fs: Ignoring removed orlov option [ 115.580625][ T7583] loop4: detected capacity change from 0 to 1024 [ 115.610907][ T7583] EXT4-fs: Ignoring removed orlov option [ 115.906207][ T7588] ================================================================== [ 115.914327][ T7588] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 115.923542][ T7588] [ 115.925863][ T7588] write to 0xffff888106b5dbb0 of 4 bytes by task 7587 on cpu 0: [ 115.933500][ T7588] writeback_single_inode+0x14a/0x3e0 [ 115.938885][ T7588] sync_inode_metadata+0x5b/0x90 [ 115.943829][ T7588] generic_buffers_fsync_noflush+0xd9/0x120 [ 115.949736][ T7588] ext4_sync_file+0x1ab/0x690 [ 115.954427][ T7588] vfs_fsync_range+0x10a/0x130 [ 115.959210][ T7588] ext4_buffered_write_iter+0x34f/0x3c0 [ 115.964760][ T7588] ext4_file_write_iter+0x383/0xf00 [ 115.969963][ T7588] iter_file_splice_write+0x5ef/0x970 [ 115.975350][ T7588] direct_splice_actor+0x153/0x2a0 [ 115.980482][ T7588] splice_direct_to_actor+0x30f/0x680 [ 115.985884][ T7588] do_splice_direct+0xda/0x150 [ 115.990649][ T7588] do_sendfile+0x380/0x650 [ 115.995167][ T7588] __x64_sys_sendfile64+0x105/0x150 [ 116.000377][ T7588] x64_sys_call+0xb39/0x2fb0 [ 116.004979][ T7588] do_syscall_64+0xd2/0x200 [ 116.009493][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.015398][ T7588] [ 116.017719][ T7588] read to 0xffff888106b5dbb0 of 4 bytes by task 7588 on cpu 1: [ 116.025264][ T7588] generic_buffers_fsync_noflush+0x80/0x120 [ 116.031188][ T7588] ext4_sync_file+0x1ab/0x690 [ 116.035886][ T7588] vfs_fsync_range+0x10a/0x130 [ 116.040673][ T7588] ext4_buffered_write_iter+0x34f/0x3c0 [ 116.046234][ T7588] ext4_file_write_iter+0x383/0xf00 [ 116.051438][ T7588] iter_file_splice_write+0x5ef/0x970 [ 116.056827][ T7588] direct_splice_actor+0x153/0x2a0 [ 116.061958][ T7588] splice_direct_to_actor+0x30f/0x680 [ 116.067351][ T7588] do_splice_direct+0xda/0x150 [ 116.072136][ T7588] do_sendfile+0x380/0x650 [ 116.076564][ T7588] __x64_sys_sendfile64+0x105/0x150 [ 116.081770][ T7588] x64_sys_call+0xb39/0x2fb0 [ 116.086374][ T7588] do_syscall_64+0xd2/0x200 [ 116.090886][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.096788][ T7588] [ 116.099113][ T7588] value changed: 0x00000038 -> 0x00000002 [ 116.104830][ T7588] [ 116.107153][ T7588] Reported by Kernel Concurrency Sanitizer on: [ 116.113292][ T7588] CPU: 1 UID: 0 PID: 7588 Comm: syz.4.1377 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 116.125701][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.135749][ T7588] ================================================================== [ 116.171034][ T7590] loop3: detected capacity change from 0 to 1024 [ 116.177730][ T7590] EXT4-fs: Ignoring removed orlov option [ 116.183597][ T7590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.199044][ T7590] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c118, mo2=0002]