last executing test programs: 8.146740436s ago: executing program 0 (id=416): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) 7.155746525s ago: executing program 0 (id=421): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) socket(0x22, 0xa, 0xfffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 6.205980783s ago: executing program 3 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) rmdir(0x0) 6.196132573s ago: executing program 3 (id=426): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) inotify_init1(0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) gettid() tkill(0x0, 0x14) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b40000001000090400000000000000", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYRESOCT], 0xb4}}, 0x0) 4.869159538s ago: executing program 0 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 4.863346608s ago: executing program 1 (id=429): getresuid(&(0x7f00000001c0), &(0x7f0000000240), 0x0) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80003, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x220c084, &(0x7f0000000880)=ANY=[], 0x9, 0x224, &(0x7f0000000380)="$eJzs3cFKG10UAOCTmMTk51+4KxQKt3TRrqTtE1iKhdJAwZJFuxPqyqx0E93oY/QV+l59gOLKTbklTsZEO2oanITK9208zjn3eu+MkwRCTnIUfjz6Ft1uI5pbsRXnjdiIZpROAwB4SM5zjp+58PejW3UsCQCo2RzP/7+WvCQAoGafPn/58Kbf395JqRtxdjoajAbFzyL/7n1/+2W6sDEddTYaDdYu86/S9dcO43w7/pvkX6eU2imly3cUOhEx6MSLZ0V+PPnbj/10dfx6fK178wAAAAAAAAAAAAAAAAAAAAAAsCJPIpUq+/tsbqaU2jGT703yxW8z/YGu9e9pxeOyPfC0PVA+WcamAAAAAAAAAAAAAAAAAAAA4B9zeHS8vzsc7h1Mg/WImD3Sqqi5OWhMJp6ruM6gOd7GncXNOWqqgt5kmwssrDE5RRWp2Lq3k9CrvrhXg5yLhgxXU9Fa6YW7hyDNHunFAvNcu00qanrRuGWenMdB9V1QtsW4cXgn4o41P99Z9Pyc59wZfn86/mfLtxZPN79e94MQAAAAAAAAAAAAAAAAAABwYeZT33/orq1iRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfIdHx+W3/B/v7w6HeweHR3MHJxHxf9xZXP6tdnRXt1EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAetN8BAAD//8OPFRQ=") socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) sendto(r3, 0x0, 0x0, 0x24040000, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 4.862759048s ago: executing program 3 (id=430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) 4.860901118s ago: executing program 4 (id=431): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) connect$unix(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, 0x0, 0x2de0d2a06d7aeea8) 4.73818432s ago: executing program 3 (id=432): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) 4.006781494s ago: executing program 1 (id=434): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x38, 0x5}, &(0x7f00000000c0)) 3.970485575s ago: executing program 0 (id=435): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 3.466798955s ago: executing program 3 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2.530530242s ago: executing program 4 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) rmdir(0x0) 2.502344583s ago: executing program 3 (id=438): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x48000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x42000000) 2.464976473s ago: executing program 4 (id=439): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x22, 0xa, 0xfffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.196205058s ago: executing program 2 (id=440): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.870177794s ago: executing program 0 (id=441): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) inotify_init1(0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) gettid() tkill(0x0, 0x14) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b40000001000090400000000000000", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYRESOCT], 0xb4}}, 0x0) 1.755719576s ago: executing program 2 (id=442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) 1.722263657s ago: executing program 2 (id=443): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r3], 0x4) 1.655168298s ago: executing program 2 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1.623866179s ago: executing program 1 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 1.485275501s ago: executing program 2 (id=446): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) 930.350962ms ago: executing program 0 (id=447): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) connect$unix(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, 0x0, 0x2de0d2a06d7aeea8) 890.724943ms ago: executing program 4 (id=448): socket(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 855.695653ms ago: executing program 4 (id=449): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000ac0)='ext3\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000c80)={[], [{@subj_type={'subj_type', 0x3d, 'Y]-'}}, {@obj_role={'obj_role', 0x3d, 'noauto_da_alloc'}}, {@appraise_type}, {@fowner_eq}, {@uid_lt}, {@appraise_type}, {@measure}, {@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, ','}}, {@euid_gt={'euid>', 0xee01}}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) 724.170386ms ago: executing program 1 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) rmdir(0x0) 712.641046ms ago: executing program 4 (id=451): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setrlimit(0x9, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) io_setup(0x2004, &(0x7f0000000680)) 577.224859ms ago: executing program 1 (id=452): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x80000000, 0x5}, 0x10000, 0xc8, 0xa90, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001600)=@in6={0xa, 0x4e23, 0x5, @mcast1, 0x10000}, 0x1c, &(0x7f0000000240), 0x10000000000002fc}, {&(0x7f0000001640)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001680)="ed25921cd2b2fcabe15f65633912abd008", 0x11}, {&(0x7f00000016c0)="37caddc178c1c41ca9f3be4bb21e446c4c20a1925213dac5ac8686532e4170adee2b38e42d470c38d6a404f37d9f96704f8f2cd42d9d7b9a21e7f7a08a13041095c85cf67792b2ff2d7582d005dc39d5f8a348ca46ad54015d1eb8fbcaf1a2e3074d7309c8bc39ce48d85666f55f3414c93d731186a49591c102cba0771679c3b5bee8bb895b23d4b391aa8af2a5d14d6d5b94ca9af20a933bc5de3f3f1686cab733a4ed71c02fb99be2e83361891d", 0xaf}, {&(0x7f0000001780)="c5155709cf906e1fde55453cb1966e90933f1d6c743b0114df082c75b817e3f27be8f954d7e5360ec26b586bd4a6a93c11681046ad8d71f24bb1a7c72026fd0b6ac7600b002047e8d5ecfe8f586bb8db9830397d6380bda13d97078ebb2403ba5928ebdeed3f52d06f82280e8320b07c6bd2711de672d24e7b20f381e019ccc7f21aad5f3fc0ab9f3e794becd7ce0b5dcfcb3096345e4521824074a029b3003865376732665b991d", 0xa8}], 0x3, 0x0, 0x0, 0x4004044}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0802}]}) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_delete(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x50}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={r5, 0x200}, &(0x7f00000001c0)=0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRESOCT, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4040841}, 0x20010814) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000014c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x127a, &(0x7f0000003700)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000280)={0x5, 0x2, 0x6}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) timer_delete(0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) syz_io_uring_setup(0x5273, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x1a92, &(0x7f0000000280)={0x0, 0x3, 0x10, 0x1, 0x2a9}, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) sendto$inet6(r8, &(0x7f0000001500)="9043037ec2f5a1e3edfabfb0c5edd92e", 0x10, 0x4000010, &(0x7f0000001540)={0xa, 0x4e22, 0xd77, @private1, 0x4}, 0x1c) 574.094459ms ago: executing program 2 (id=453): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x1b, 0x0, 0x1, 0x401, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1c6c71616e31323700"], 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000e1fae19002b14e571451277906000000010000000000000b01000000040000000000000e0100000002000000050000000000000b040000000c0000000000fa7a7b90890708af0941213ca69c622a7b7e9a2690ecff82cda05ffdbb9ebedf0645d7"], &(0x7f0000000680)=""/4096, 0x52, 0x1000, 0x0, 0x40}, 0x28) 0s ago: executing program 1 (id=454): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 33.371395][ T29] audit: type=1400 audit(1759323522.754:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.394623][ T29] audit: type=1400 audit(1759323522.774:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.395633][ T3287] cgroup: Unknown subsys name 'net' [ 33.422510][ T29] audit: type=1400 audit(1759323522.804:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.560880][ T3287] cgroup: Unknown subsys name 'cpuset' [ 33.567381][ T3287] cgroup: Unknown subsys name 'rlimit' [ 33.728812][ T29] audit: type=1400 audit(1759323523.104:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.752559][ T29] audit: type=1400 audit(1759323523.104:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.773345][ T29] audit: type=1400 audit(1759323523.114:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.788273][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.793882][ T29] audit: type=1400 audit(1759323523.114:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.832701][ T29] audit: type=1400 audit(1759323523.114:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.857602][ T29] audit: type=1400 audit(1759323523.114:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.874643][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.881093][ T29] audit: type=1400 audit(1759323523.184:71): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.699138][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 35.768167][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.789327][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.796544][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.803916][ T3298] bridge_slave_0: entered allmulticast mode [ 35.810547][ T3298] bridge_slave_0: entered promiscuous mode [ 35.817131][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 35.837225][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.844387][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.851604][ T3298] bridge_slave_1: entered allmulticast mode [ 35.858033][ T3298] bridge_slave_1: entered promiscuous mode [ 35.909969][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.924083][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.939144][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.976538][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.983687][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.990999][ T3301] bridge_slave_0: entered allmulticast mode [ 35.997700][ T3301] bridge_slave_0: entered promiscuous mode [ 36.009107][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 36.027678][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.035192][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.042512][ T3301] bridge_slave_1: entered allmulticast mode [ 36.049198][ T3301] bridge_slave_1: entered promiscuous mode [ 36.056183][ T3298] team0: Port device team_slave_0 added [ 36.062950][ T3298] team0: Port device team_slave_1 added [ 36.074678][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.081915][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.089147][ T3297] bridge_slave_0: entered allmulticast mode [ 36.095805][ T3297] bridge_slave_0: entered promiscuous mode [ 36.122710][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.129691][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.156163][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.166995][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.174247][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.181581][ T3297] bridge_slave_1: entered allmulticast mode [ 36.188221][ T3297] bridge_slave_1: entered promiscuous mode [ 36.207479][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.214542][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.240868][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.257995][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.283333][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.294092][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.318743][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.341024][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.348983][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.357259][ T3302] bridge_slave_0: entered allmulticast mode [ 36.363989][ T3302] bridge_slave_0: entered promiscuous mode [ 36.382003][ T3298] hsr_slave_0: entered promiscuous mode [ 36.388049][ T3298] hsr_slave_1: entered promiscuous mode [ 36.404895][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.412027][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.419251][ T3302] bridge_slave_1: entered allmulticast mode [ 36.425782][ T3302] bridge_slave_1: entered promiscuous mode [ 36.437594][ T3301] team0: Port device team_slave_0 added [ 36.449515][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.456835][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.464285][ T3305] bridge_slave_0: entered allmulticast mode [ 36.470783][ T3305] bridge_slave_0: entered promiscuous mode [ 36.483254][ T3297] team0: Port device team_slave_0 added [ 36.494455][ T3301] team0: Port device team_slave_1 added [ 36.511070][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.518433][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.526448][ T3305] bridge_slave_1: entered allmulticast mode [ 36.533901][ T3305] bridge_slave_1: entered promiscuous mode [ 36.541639][ T3297] team0: Port device team_slave_1 added [ 36.554915][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.565382][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.583085][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.590122][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.616225][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.645096][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.652214][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.678224][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.695435][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.704979][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.712074][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.738301][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.756039][ T3302] team0: Port device team_slave_0 added [ 36.774611][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.784761][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.791843][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.818016][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.829381][ T3302] team0: Port device team_slave_1 added [ 36.860996][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.868052][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.894112][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.913759][ T3305] team0: Port device team_slave_0 added [ 36.920822][ T3305] team0: Port device team_slave_1 added [ 36.931536][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.938705][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.964817][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.998610][ T3301] hsr_slave_0: entered promiscuous mode [ 37.004731][ T3301] hsr_slave_1: entered promiscuous mode [ 37.010785][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.016559][ T3301] Cannot create hsr debugfs directory [ 37.034526][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.041660][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.067989][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.079375][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.086451][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.112369][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.135877][ T3297] hsr_slave_0: entered promiscuous mode [ 37.142044][ T3297] hsr_slave_1: entered promiscuous mode [ 37.147932][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 37.153739][ T3297] Cannot create hsr debugfs directory [ 37.188353][ T3302] hsr_slave_0: entered promiscuous mode [ 37.194531][ T3302] hsr_slave_1: entered promiscuous mode [ 37.200604][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 37.206536][ T3302] Cannot create hsr debugfs directory [ 37.233987][ T3305] hsr_slave_0: entered promiscuous mode [ 37.240042][ T3305] hsr_slave_1: entered promiscuous mode [ 37.246137][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 37.251979][ T3305] Cannot create hsr debugfs directory [ 37.380733][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.399470][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.417590][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.431802][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.461063][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.476709][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.487804][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.501981][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.524475][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.533696][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.547135][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.556883][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.588995][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.597930][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.607843][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.618770][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.667168][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.698723][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.708056][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.717015][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.734119][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.751552][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.764116][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.784187][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.793815][ T1721] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.800935][ T1721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.817478][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.828821][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.841001][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.850600][ T1721] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.857884][ T1721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.868008][ T1721] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.875195][ T1721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.886814][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.893940][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.915489][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.922670][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.931534][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.938678][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.955344][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.986534][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.993665][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.011347][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.018507][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.052749][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.071295][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.093691][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.142372][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.155456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.162600][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.192133][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.199248][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.221688][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.245254][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.256986][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.278271][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.397870][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.456969][ T3301] veth0_vlan: entered promiscuous mode [ 38.492116][ T3297] veth0_vlan: entered promiscuous mode [ 38.499429][ T3298] veth0_vlan: entered promiscuous mode [ 38.514220][ T3297] veth1_vlan: entered promiscuous mode [ 38.523294][ T3301] veth1_vlan: entered promiscuous mode [ 38.535220][ T3298] veth1_vlan: entered promiscuous mode [ 38.554749][ T3302] veth0_vlan: entered promiscuous mode [ 38.567055][ T3302] veth1_vlan: entered promiscuous mode [ 38.589839][ T3301] veth0_macvtap: entered promiscuous mode [ 38.604327][ T3297] veth0_macvtap: entered promiscuous mode [ 38.622344][ T3297] veth1_macvtap: entered promiscuous mode [ 38.629320][ T3305] veth0_vlan: entered promiscuous mode [ 38.635408][ T3301] veth1_macvtap: entered promiscuous mode [ 38.642551][ T3298] veth0_macvtap: entered promiscuous mode [ 38.656199][ T3298] veth1_macvtap: entered promiscuous mode [ 38.667047][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.680793][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.688433][ T3305] veth1_vlan: entered promiscuous mode [ 38.695387][ T3302] veth0_macvtap: entered promiscuous mode [ 38.703550][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.716601][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.727763][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.737641][ T3302] veth1_macvtap: entered promiscuous mode [ 38.745829][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.757186][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.765941][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.774950][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.783944][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.806234][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.819090][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836669][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.836685][ T29] audit: type=1400 audit(1759323528.214:81): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.XZ5yed/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.848758][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.868018][ T29] audit: type=1400 audit(1759323528.214:82): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.897121][ T29] audit: type=1400 audit(1759323528.214:83): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.XZ5yed/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.922566][ T29] audit: type=1400 audit(1759323528.214:84): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.944753][ T29] audit: type=1400 audit(1759323528.214:85): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.XZ5yed/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.971503][ T29] audit: type=1400 audit(1759323528.214:86): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.XZ5yed/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.999114][ T29] audit: type=1400 audit(1759323528.224:87): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.019839][ T29] audit: type=1400 audit(1759323528.394:88): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.042871][ T29] audit: type=1400 audit(1759323528.394:89): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="gadgetfs" ino=3930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.047444][ T3305] veth0_macvtap: entered promiscuous mode [ 39.079506][ T3305] veth1_macvtap: entered promiscuous mode [ 39.088142][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.105214][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.115311][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.122789][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.141479][ T29] audit: type=1400 audit(1759323528.514:90): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.170601][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.179882][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.213679][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.224255][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.259269][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.267299][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.292612][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.337632][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.558584][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.891131][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.954688][ T3486] Zero length message leads to an empty skb [ 39.973755][ T3486] loop3: detected capacity change from 0 to 512 [ 39.993935][ T3486] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.001352][ T3486] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.4: Failed to acquire dquot type 1 [ 40.013879][ T3486] EXT4-fs (loop3): 1 truncate cleaned up [ 40.040445][ T3486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.401157][ T3486] syz.3.4 (3486) used greatest stack depth: 10176 bytes left [ 40.428765][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.428814][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.428854][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.428972][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.510794][ T3492] loop1: detected capacity change from 0 to 512 [ 40.578197][ T3496] loop2: detected capacity change from 0 to 512 [ 40.639095][ T3496] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 40.639126][ T3496] System zones: 0-7 [ 40.640026][ T3496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.515323][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.584748][ T3512] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 41.620030][ T3508] loop1: detected capacity change from 0 to 1024 [ 41.627793][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.639770][ T3514] loop2: detected capacity change from 0 to 512 [ 41.646543][ T3508] EXT4-fs: Ignoring removed i_version option [ 41.655711][ T3508] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.686924][ T3508] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.12: Invalid block bitmap block 0 in block_group 0 [ 41.719495][ T3508] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.12: Failed to acquire dquot type 0 [ 41.738514][ T3508] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.12: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.753972][ T3508] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.12: Invalid inode bitmap blk 0 in block_group 0 [ 41.778056][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 41.822442][ T3508] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 41.833158][ T3508] EXT4-fs (loop1): 1 orphan inode deleted [ 41.839286][ T3514] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 41.848851][ T3508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.848913][ T3514] System zones: 0-7 [ 41.849516][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.939434][ T3532] FAT-fs (loop7): unable to read boot sector [ 42.817874][ T3508] syz.1.12 (3508) used greatest stack depth: 9416 bytes left [ 42.845338][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.857823][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.915145][ T3545] syzkaller0: entered allmulticast mode [ 43.159487][ T3542] loop3: detected capacity change from 0 to 256 [ 43.459708][ T3574] loop0: detected capacity change from 0 to 512 [ 44.351952][ T3574] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.359803][ T3574] __quota_error: 43 callbacks suppressed [ 44.359823][ T3574] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 44.376172][ T3574] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 44.385817][ T3574] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.29: Failed to acquire dquot type 1 [ 44.876951][ T3574] EXT4-fs (loop0): 1 truncate cleaned up [ 44.983064][ T3574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.749318][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.056579][ T3605] loop3: detected capacity change from 0 to 256 [ 46.152518][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 46.184318][ T29] audit: type=1400 audit(1759323535.564:129): avc: denied { create } for pid=3590 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 47.019423][ T3609] vlan2: entered allmulticast mode [ 47.024634][ T3609] bridge0: entered allmulticast mode [ 47.309011][ T3612] syz_tun: entered allmulticast mode [ 47.327566][ T3610] syz_tun: left allmulticast mode [ 47.506502][ T29] audit: type=1400 audit(1759323536.884:130): avc: denied { read } for pid=3618 comm="syz.2.42" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.528298][ T29] audit: type=1400 audit(1759323536.884:131): avc: denied { open } for pid=3618 comm="syz.2.42" path="net:[4026532833]" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.595353][ T3616] loop0: detected capacity change from 0 to 256 [ 47.652556][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 48.175909][ T3638] FAT-fs (loop7): unable to read boot sector [ 48.724471][ T3649] syz_tun: entered allmulticast mode [ 48.731419][ T3648] syz_tun: left allmulticast mode [ 48.827743][ T3652] loop4: detected capacity change from 0 to 512 [ 48.867461][ T3643] loop2: detected capacity change from 0 to 256 [ 48.884550][ T3652] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.891801][ T3652] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 48.902281][ T3652] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 48.911827][ T3652] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.50: Failed to acquire dquot type 1 [ 48.925034][ T3652] EXT4-fs (loop4): 1 truncate cleaned up [ 48.944017][ T29] audit: type=1326 audit(1759323538.324:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 49.018303][ T29] audit: type=1326 audit(1759323538.344:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 49.041811][ T29] audit: type=1326 audit(1759323538.344:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 49.667096][ T3652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.692262][ T3665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 50.154158][ T3674] loop1: detected capacity change from 0 to 512 [ 50.339823][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.454897][ T3677] loop4: detected capacity change from 0 to 512 [ 50.706856][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 50.706871][ T29] audit: type=1400 audit(1759323540.084:156): avc: denied { write } for pid=3672 comm="syz.3.57" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.838354][ T3683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 51.301233][ T29] audit: type=1400 audit(1759323540.684:157): avc: denied { allowed } for pid=3695 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.472864][ T29] audit: type=1400 audit(1759323540.704:158): avc: denied { create } for pid=3695 comm="syz.2.63" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.494130][ T29] audit: type=1400 audit(1759323540.704:159): avc: denied { map } for pid=3695 comm="syz.2.63" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.518134][ T29] audit: type=1400 audit(1759323540.704:160): avc: denied { read write } for pid=3695 comm="syz.2.63" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.525845][ T3698] netlink: 148 bytes leftover after parsing attributes in process `syz.4.64'. [ 51.627669][ T29] audit: type=1400 audit(1759323540.904:161): avc: denied { ioctl } for pid=3697 comm="syz.4.64" path="socket:[5500]" dev="sockfs" ino=5500 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.652719][ T29] audit: type=1326 audit(1759323540.944:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725c88eec9 code=0x7ffc0000 [ 51.676310][ T29] audit: type=1326 audit(1759323540.944:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725c88eec9 code=0x7ffc0000 [ 51.676340][ T29] audit: type=1326 audit(1759323540.944:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725c88eec9 code=0x7ffc0000 [ 51.722961][ T29] audit: type=1326 audit(1759323540.944:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725c88eec9 code=0x7ffc0000 [ 51.748830][ T3705] loop4: detected capacity change from 0 to 512 [ 52.050914][ T3712] loop1: detected capacity change from 0 to 512 [ 52.765057][ T3712] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.576996][ T3712] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.66: Failed to acquire dquot type 1 [ 53.590292][ T3712] EXT4-fs (loop1): 1 truncate cleaned up [ 53.596977][ T3712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.774894][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.823290][ T3736] netlink: 148 bytes leftover after parsing attributes in process `syz.1.76'. [ 53.909068][ T3741] loop0: detected capacity change from 0 to 512 [ 53.978209][ T3741] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 53.992400][ T3741] System zones: 0-7 [ 54.005741][ T3741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.901487][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.063179][ T3751] loop0: detected capacity change from 0 to 8192 [ 55.077558][ T3751] vfat: Unknown parameter '@' [ 55.722008][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 55.722029][ T29] audit: type=1400 audit(1759323545.094:230): avc: denied { name_bind } for pid=3752 comm="syz.3.81" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.749743][ T29] audit: type=1400 audit(1759323545.094:231): avc: denied { node_bind } for pid=3752 comm="syz.3.81" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.050627][ T29] audit: type=1326 audit(1759323545.164:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 56.074027][ T29] audit: type=1326 audit(1759323545.164:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 56.097662][ T29] audit: type=1326 audit(1759323545.414:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 56.121014][ T29] audit: type=1400 audit(1759323545.414:235): avc: denied { tracepoint } for pid=3750 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.140543][ T29] audit: type=1326 audit(1759323545.424:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 56.164017][ T29] audit: type=1326 audit(1759323545.424:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 56.187373][ T29] audit: type=1326 audit(1759323545.424:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77819cd710 code=0x7ffc0000 [ 56.210622][ T29] audit: type=1326 audit(1759323545.424:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 56.316695][ T3772] loop2: detected capacity change from 0 to 1024 [ 56.340674][ T3772] ======================================================= [ 56.340674][ T3772] WARNING: The mand mount option has been deprecated and [ 56.340674][ T3772] and is ignored by this kernel. Remove the mand [ 56.340674][ T3772] option from the mount to silence this warning. [ 56.340674][ T3772] ======================================================= [ 56.448165][ T3772] EXT4-fs: Ignoring removed orlov option [ 56.460293][ T3772] EXT4-fs: Ignoring removed nobh option [ 56.465908][ T3772] EXT4-fs: Ignoring removed bh option [ 56.970422][ T3783] loop3: detected capacity change from 0 to 512 [ 56.994781][ T3783] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.001903][ T3783] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.87: Failed to acquire dquot type 1 [ 57.039611][ T3783] EXT4-fs (loop3): 1 truncate cleaned up [ 57.047597][ T3783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.381765][ T3772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.517820][ T3791] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3791 comm=syz.2.86 [ 57.805392][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.178224][ T3795] vlan2: entered allmulticast mode [ 58.377930][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.398906][ T3799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 59.207500][ T3803] loop3: detected capacity change from 0 to 256 [ 59.354507][ T3816] loop0: detected capacity change from 0 to 256 [ 59.451839][ T3827] loop1: detected capacity change from 0 to 512 [ 59.465104][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.474484][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.418794][ T3841] loop3: detected capacity change from 0 to 1024 [ 60.425771][ T3841] EXT4-fs: Ignoring removed i_version option [ 60.440786][ T3841] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.461909][ T3841] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.105: Invalid block bitmap block 0 in block_group 0 [ 60.488287][ T3841] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.105: Failed to acquire dquot type 0 [ 60.500166][ T3841] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.105: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.516867][ T3841] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.105: Invalid inode bitmap blk 0 in block_group 0 [ 60.537011][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 60.545670][ T3844] loop2: detected capacity change from 0 to 512 [ 60.550914][ T3841] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 60.565539][ T3841] EXT4-fs (loop3): 1 orphan inode deleted [ 60.571912][ T3841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.602538][ T3844] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002] [ 60.653573][ T3844] System zones: 0-7 [ 60.670740][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.046392][ T3857] vlan2: entered allmulticast mode [ 61.470367][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.740526][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.968572][ T3873] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.041760][ T3873] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 63.103227][ T3882] vlan2: entered allmulticast mode [ 63.108390][ T3882] bridge0: entered allmulticast mode [ 63.125278][ T3882] bridge0: entered promiscuous mode [ 63.139486][ T3882] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 63.173513][ T3877] loop3: detected capacity change from 0 to 256 [ 63.453580][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 63.453598][ T29] audit: type=1326 audit(1759323552.834:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.529015][ T29] audit: type=1326 audit(1759323552.834:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.554203][ T29] audit: type=1326 audit(1759323552.834:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.574978][ T3889] loop3: detected capacity change from 0 to 8192 [ 63.577937][ T29] audit: type=1326 audit(1759323552.834:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.608360][ T29] audit: type=1326 audit(1759323552.834:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.613181][ T3889] vfat: Unknown parameter '@' [ 63.632036][ T29] audit: type=1326 audit(1759323552.834:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.660754][ T29] audit: type=1326 audit(1759323552.834:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.684877][ T29] audit: type=1326 audit(1759323552.834:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.708275][ T29] audit: type=1326 audit(1759323552.834:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 63.731888][ T29] audit: type=1326 audit(1759323552.834:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3888 comm="syz.3.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 64.175272][ T3899] FAT-fs (loop7): unable to read boot sector [ 65.230353][ T3911] vlan2: entered allmulticast mode [ 66.127187][ T3917] loop0: detected capacity change from 0 to 512 [ 66.680916][ T3917] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 66.689181][ T3917] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 66.713797][ T3917] EXT4-fs (loop0): 1 truncate cleaned up [ 66.728183][ T3917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.632784][ T3940] loop2: detected capacity change from 0 to 1024 [ 67.639603][ T3940] EXT4-fs: Ignoring removed i_version option [ 67.835194][ T3940] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.008318][ T3940] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.131: Invalid block bitmap block 0 in block_group 0 [ 68.266409][ T3940] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.131: Failed to acquire dquot type 0 [ 68.711410][ T3940] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.131: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.735540][ T3940] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.131: Invalid inode bitmap blk 0 in block_group 0 [ 68.768785][ T3940] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 68.789032][ T3940] EXT4-fs (loop2): 1 orphan inode deleted [ 68.796472][ T3940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.819116][ T59] __quota_error: 73 callbacks suppressed [ 68.819134][ T59] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 68.833955][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 68.946018][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 68.985548][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.057013][ T3959] loop3: detected capacity change from 0 to 512 [ 69.161145][ T3959] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.168649][ T3959] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 69.179243][ T3959] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 69.188676][ T3959] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.135: Failed to acquire dquot type 1 [ 69.202400][ T3959] EXT4-fs (loop3): 1 truncate cleaned up [ 69.583320][ T3961] loop4: detected capacity change from 0 to 1024 [ 69.590540][ T3961] EXT4-fs: Ignoring removed i_version option [ 69.605621][ T3961] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.619637][ T3961] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.137: Invalid block bitmap block 0 in block_group 0 [ 69.634414][ T3961] Quota error (device loop4): write_blk: dquota write failed [ 69.641890][ T3961] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 69.651947][ T3961] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.137: Failed to acquire dquot type 0 [ 69.666496][ T3961] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.137: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.680598][ T3961] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.137: Invalid inode bitmap blk 0 in block_group 0 [ 69.693404][ T3961] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 69.702213][ T3961] EXT4-fs (loop4): 1 orphan inode deleted [ 69.708747][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.945464][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.962003][ T31] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 69.971139][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 70.002056][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.142107][ T3968] loop4: detected capacity change from 0 to 1024 [ 70.159324][ T3968] EXT4-fs: Ignoring removed orlov option [ 70.170279][ T3968] EXT4-fs: Ignoring removed nobh option [ 70.175997][ T3968] EXT4-fs: Ignoring removed bh option [ 70.198180][ T3969] loop1: detected capacity change from 0 to 256 [ 70.222921][ T3968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.304418][ T3972] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3972 comm=syz.4.139 [ 70.320466][ T3927] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 70.546864][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.655389][ T29] audit: type=1326 audit(1759323560.034:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 70.716758][ T29] audit: type=1326 audit(1759323560.034:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 70.740192][ T29] audit: type=1326 audit(1759323560.074:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 70.763650][ T29] audit: type=1326 audit(1759323560.074:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 70.796408][ T3977] loop3: detected capacity change from 0 to 8192 [ 70.818917][ T3977] vfat: Unknown parameter '@' [ 70.986171][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.215494][ T3986] loop4: detected capacity change from 0 to 512 [ 71.777862][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.947287][ T4001] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 72.234435][ T4009] loop3: detected capacity change from 0 to 256 [ 73.756237][ T4014] loop1: detected capacity change from 0 to 512 [ 73.783192][ T4014] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.790342][ T4014] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.151: Failed to acquire dquot type 1 [ 73.803978][ T4014] EXT4-fs (loop1): 1 truncate cleaned up [ 74.130764][ T4014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.104455][ T4028] loop3: detected capacity change from 0 to 256 [ 75.292681][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.316348][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 75.316366][ T29] audit: type=1400 audit(1759323564.694:457): avc: denied { bind } for pid=4032 comm="syz.2.158" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.342737][ T29] audit: type=1400 audit(1759323564.694:458): avc: denied { name_bind } for pid=4032 comm="syz.2.158" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 75.363870][ T29] audit: type=1400 audit(1759323564.694:459): avc: denied { node_bind } for pid=4032 comm="syz.2.158" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 75.437132][ T4033] loop2: detected capacity change from 0 to 1024 [ 75.452710][ T4033] ext4: Unknown parameter 'uid<00000000000000000000' [ 75.519783][ T29] audit: type=1400 audit(1759323564.834:460): avc: denied { mounton } for pid=4032 comm="syz.2.158" path="/30/file0" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.142582][ T29] audit: type=1400 audit(1759323565.524:461): avc: denied { sqpoll } for pid=4046 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.397054][ T4049] netlink: 'syz.3.161': attribute type 13 has an invalid length. [ 76.479509][ T29] audit: type=1400 audit(1759323565.734:462): avc: denied { append } for pid=4046 comm="syz.3.161" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.606910][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.614289][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.848768][ T29] audit: type=1400 audit(1759323566.224:463): avc: denied { write } for pid=4052 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.868804][ T29] audit: type=1400 audit(1759323566.224:464): avc: denied { nlmsg_write } for pid=4052 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.006557][ T29] audit: type=1326 audit(1759323566.384:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8c18075d67 code=0x0 [ 77.056887][ T4049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.077424][ T4049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.155389][ T4107] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.186019][ T4107] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.214205][ T4107] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.231930][ T4107] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.478629][ T4119] netlink: 'syz.0.166': attribute type 4 has an invalid length. [ 77.489954][ T4119] netlink: 'syz.0.166': attribute type 4 has an invalid length. [ 78.162469][ T4132] loop4: detected capacity change from 0 to 256 [ 78.276243][ T4133] vlan2: entered allmulticast mode [ 79.132427][ T4138] syzkaller0: entered allmulticast mode [ 80.379377][ T4157] loop4: detected capacity change from 0 to 256 [ 80.532074][ T4166] loop4: detected capacity change from 0 to 512 [ 80.543336][ T4166] ext4: Unknown parameter 'nouser_xattr' [ 80.579828][ T4166] loop4: detected capacity change from 0 to 1024 [ 80.624487][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.655245][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.665690][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.984039][ T4180] vlan2: entered allmulticast mode [ 81.724927][ T4190] loop3: detected capacity change from 0 to 256 [ 83.000087][ T29] audit: type=1400 audit(1759323572.374:466): avc: denied { write } for pid=4202 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.098337][ T4208] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.127792][ T4208] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 83.159321][ T4210] vlan2: entered allmulticast mode [ 83.164619][ T4210] bridge0: entered allmulticast mode [ 83.181552][ T4210] bridge0: entered promiscuous mode [ 83.191042][ T4210] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 83.584401][ T4226] loop0: detected capacity change from 0 to 1024 [ 83.596236][ T4226] EXT4-fs: Ignoring removed orlov option [ 83.616676][ T4226] EXT4-fs: Ignoring removed nobh option [ 83.622325][ T4226] EXT4-fs: Ignoring removed bh option [ 83.664329][ T4227] loop3: detected capacity change from 0 to 256 [ 84.593616][ T4226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.261903][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.299477][ T4236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4236 comm=syz.0.199 [ 85.720702][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.796194][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 85.965168][ T4252] loop4: detected capacity change from 0 to 256 [ 87.139832][ T4286] netlink: 'syz.1.215': attribute type 4 has an invalid length. [ 87.182893][ T4290] lo speed is unknown, defaulting to 1000 [ 87.188812][ T4290] lo speed is unknown, defaulting to 1000 [ 87.195162][ T4290] lo speed is unknown, defaulting to 1000 [ 87.201871][ T4290] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.209888][ T4290] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.243123][ T4290] lo speed is unknown, defaulting to 1000 [ 87.249672][ T4290] lo speed is unknown, defaulting to 1000 [ 87.256745][ T4290] lo speed is unknown, defaulting to 1000 [ 87.262981][ T4290] lo speed is unknown, defaulting to 1000 [ 87.269544][ T4290] lo speed is unknown, defaulting to 1000 [ 87.318274][ T29] audit: type=1400 audit(1759323576.564:467): avc: denied { write } for pid=4284 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.388485][ T4286] netlink: 'syz.1.215': attribute type 4 has an invalid length. [ 87.445401][ T29] audit: type=1326 audit(1759323576.794:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 87.469108][ T29] audit: type=1326 audit(1759323576.794:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 87.492649][ T29] audit: type=1326 audit(1759323576.794:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 87.516006][ T29] audit: type=1326 audit(1759323576.794:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 87.539717][ T29] audit: type=1326 audit(1759323576.794:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 87.563275][ T29] audit: type=1326 audit(1759323576.794:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 87.574876][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 87.586802][ T29] audit: type=1326 audit(1759323576.794:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 87.618937][ T29] audit: type=1326 audit(1759323576.794:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 88.811288][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 88.811306][ T29] audit: type=1326 audit(1759323578.194:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 88.840895][ T29] audit: type=1326 audit(1759323578.194:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 88.864460][ T29] audit: type=1326 audit(1759323578.194:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 88.888000][ T29] audit: type=1326 audit(1759323578.194:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 88.894563][ T4336] loop1: detected capacity change from 0 to 512 [ 88.914562][ T29] audit: type=1326 audit(1759323578.194:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 88.930629][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 88.941360][ T29] audit: type=1326 audit(1759323578.194:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 88.973980][ T29] audit: type=1326 audit(1759323578.194:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 88.997452][ T29] audit: type=1326 audit(1759323578.194:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 89.021026][ T29] audit: type=1326 audit(1759323578.194:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 89.044718][ T29] audit: type=1326 audit(1759323578.194:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 89.393607][ T4355] netlink: 'syz.2.234': attribute type 4 has an invalid length. [ 89.410187][ T4355] netlink: 'syz.2.234': attribute type 4 has an invalid length. [ 89.625870][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 90.252107][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.250'. [ 90.494168][ T4398] netlink: 148 bytes leftover after parsing attributes in process `syz.3.252'. [ 90.834615][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 90.845017][ T4401] loop1: detected capacity change from 0 to 512 [ 90.914675][ T4405] loop4: detected capacity change from 0 to 1024 [ 90.923306][ T4405] EXT4-fs: Ignoring removed orlov option [ 90.942253][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.108496][ T4411] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 91.130759][ T4411] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 91.801588][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.243300][ T4449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 92.274023][ T4450] loop0: detected capacity change from 0 to 256 [ 92.652694][ T4461] netlink: 148 bytes leftover after parsing attributes in process `syz.1.273'. [ 93.040295][ T4466] loop4: detected capacity change from 0 to 512 [ 93.107923][ T4469] loop2: detected capacity change from 0 to 1024 [ 93.123833][ T4469] EXT4-fs: Ignoring removed orlov option [ 93.143214][ T4469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.212982][ T4475] ip6erspan0: entered promiscuous mode [ 93.218601][ T4475] ip6erspan0: entered allmulticast mode [ 93.652339][ T4482] lo speed is unknown, defaulting to 1000 [ 94.067839][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.269991][ T4489] lo speed is unknown, defaulting to 1000 [ 94.678251][ T4498] lo speed is unknown, defaulting to 1000 [ 95.269500][ T3393] lo speed is unknown, defaulting to 1000 [ 95.275392][ T3393] syz0: Port: 1 Link DOWN [ 95.415244][ T4509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'. [ 95.666781][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 96.005906][ T4521] loop4: detected capacity change from 0 to 1024 [ 96.021448][ T4521] EXT4-fs: Ignoring removed orlov option [ 96.094403][ T4522] loop1: detected capacity change from 0 to 512 [ 96.222534][ T4522] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.230188][ T4522] __quota_error: 88 callbacks suppressed [ 96.230202][ T4522] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 96.246739][ T4522] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 96.256294][ T4522] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.291: Failed to acquire dquot type 1 [ 96.271202][ T4521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.290359][ T4522] EXT4-fs (loop1): 1 truncate cleaned up [ 96.981796][ T4522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.587722][ T4534] loop0: detected capacity change from 0 to 512 [ 97.596279][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.604882][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.623669][ T4534] lo speed is unknown, defaulting to 1000 [ 97.726719][ T4536] netlink: 'syz.3.295': attribute type 13 has an invalid length. [ 97.813566][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.868975][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.309689][ T4544] lo speed is unknown, defaulting to 1000 [ 99.701152][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 99.795271][ T4573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.305'. [ 100.187011][ T4579] netlink: 148 bytes leftover after parsing attributes in process `syz.1.306'. [ 100.921746][ T4595] loop0: detected capacity change from 0 to 512 [ 102.655810][ T4597] loop4: detected capacity change from 0 to 512 [ 102.750841][ T4595] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.760311][ T4595] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 102.770775][ T4595] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 102.780251][ T4595] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.307: Failed to acquire dquot type 1 [ 102.798656][ T4595] EXT4-fs (loop0): 1 truncate cleaned up [ 102.806210][ T4597] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.814264][ T4597] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 102.824761][ T4597] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 102.834989][ T4597] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.309: Failed to acquire dquot type 1 [ 102.849751][ T4597] EXT4-fs (loop4): 1 truncate cleaned up [ 103.613720][ T29] audit: type=1326 audit(1759323592.994:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 103.998916][ T4616] loop3: detected capacity change from 0 to 512 [ 104.007564][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.016164][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.034209][ T4616] lo speed is unknown, defaulting to 1000 [ 104.062296][ T29] audit: type=1326 audit(1759323593.014:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 104.085646][ T29] audit: type=1326 audit(1759323593.014:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 104.096876][ T4595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.109159][ T29] audit: type=1326 audit(1759323593.014:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 104.145718][ T29] audit: type=1326 audit(1759323593.014:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 104.169291][ T29] audit: type=1326 audit(1759323593.024:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 104.193345][ T4597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.342068][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.352080][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.436781][ T4620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.320'. [ 105.265556][ T4624] loop0: detected capacity change from 0 to 256 [ 105.479272][ T4633] siw: device registration error -23 [ 106.213839][ T4642] loop2: detected capacity change from 0 to 1024 [ 106.221020][ T4642] EXT4-fs: Ignoring removed orlov option [ 106.238941][ T4640] loop1: detected capacity change from 0 to 1024 [ 106.297750][ T4644] netlink: 148 bytes leftover after parsing attributes in process `syz.4.325'. [ 106.324061][ T4640] EXT4-fs: Ignoring removed orlov option [ 106.329907][ T4640] EXT4-fs: Ignoring removed nobh option [ 106.335665][ T4640] EXT4-fs: Ignoring removed bh option [ 106.367519][ T4636] lo speed is unknown, defaulting to 1000 [ 106.451315][ T4642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.694250][ T4640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.790202][ T4650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4650 comm=syz.1.326 [ 107.043446][ T4656] loop0: detected capacity change from 0 to 256 [ 107.165955][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.265772][ T4664] loop3: detected capacity change from 0 to 512 [ 107.412665][ T4664] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.420904][ T4664] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.329: Failed to acquire dquot type 1 [ 107.454261][ T4664] EXT4-fs (loop3): 1 truncate cleaned up [ 108.170713][ T4664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.201310][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.791432][ T4682] loop0: detected capacity change from 0 to 512 [ 108.799617][ T4682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.808133][ T4682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.826115][ T4682] lo speed is unknown, defaulting to 1000 [ 108.900014][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.970729][ T4685] lo speed is unknown, defaulting to 1000 [ 109.406245][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 109.406263][ T29] audit: type=1326 audit(1759323598.784:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.726659][ T29] audit: type=1326 audit(1759323598.814:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.750242][ T29] audit: type=1326 audit(1759323598.814:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.774188][ T29] audit: type=1326 audit(1759323598.814:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.797999][ T29] audit: type=1326 audit(1759323598.814:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.821307][ T29] audit: type=1326 audit(1759323598.814:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.844554][ T29] audit: type=1326 audit(1759323598.814:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.868166][ T29] audit: type=1326 audit(1759323598.824:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.891951][ T29] audit: type=1326 audit(1759323598.824:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 109.915557][ T29] audit: type=1326 audit(1759323598.824:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72479aeec9 code=0x7ffc0000 [ 110.494792][ T4701] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 110.701292][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 110.901568][ T4716] loop3: detected capacity change from 0 to 1024 [ 110.908844][ T4716] EXT4-fs: Ignoring removed i_version option [ 110.996306][ T4716] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.122238][ T4716] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.348: Invalid block bitmap block 0 in block_group 0 [ 111.137661][ T4716] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.348: Failed to acquire dquot type 0 [ 111.150180][ T4716] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.348: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.165996][ T4716] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.348: Invalid inode bitmap blk 0 in block_group 0 [ 111.179190][ T4716] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 111.190615][ T4716] EXT4-fs (loop3): 1 orphan inode deleted [ 111.197552][ T4716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.821244][ T4089] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:42: Failed to release dquot type 0 [ 111.841232][ T4728] netlink: 148 bytes leftover after parsing attributes in process `syz.0.351'. [ 112.707801][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.829096][ T4734] loop0: detected capacity change from 0 to 512 [ 112.910732][ T4734] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.918218][ T4734] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.352: Failed to acquire dquot type 1 [ 112.941229][ T4734] EXT4-fs (loop0): 1 truncate cleaned up [ 113.471740][ T4738] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 113.674474][ T4743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 113.717864][ T4734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.101982][ T4748] loop2: detected capacity change from 0 to 1024 [ 114.127204][ T4749] lo speed is unknown, defaulting to 1000 [ 114.134364][ T4748] EXT4-fs: Ignoring removed orlov option [ 114.150092][ T4748] EXT4-fs: Ignoring removed nobh option [ 114.155710][ T4748] EXT4-fs: Ignoring removed bh option [ 114.203037][ T4748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.337408][ T4753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4753 comm=syz.2.358 [ 114.350720][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.424144][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 114.490956][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 114.490975][ T29] audit: type=1326 audit(1759323603.864:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.520539][ T29] audit: type=1326 audit(1759323603.864:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.544342][ T29] audit: type=1326 audit(1759323603.864:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.567940][ T29] audit: type=1326 audit(1759323603.874:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.591455][ T29] audit: type=1326 audit(1759323603.874:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.614871][ T29] audit: type=1326 audit(1759323603.874:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.638298][ T29] audit: type=1326 audit(1759323603.874:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.662073][ T29] audit: type=1326 audit(1759323603.874:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 114.689390][ T4762] loop0: detected capacity change from 0 to 512 [ 114.697680][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.706606][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.725368][ T4762] lo speed is unknown, defaulting to 1000 [ 115.015892][ T29] audit: type=1326 audit(1759323603.874:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 115.039671][ T29] audit: type=1326 audit(1759323603.874:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 115.078025][ T4767] siw: device registration error -23 [ 115.655666][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.261896][ T4771] loop1: detected capacity change from 0 to 1024 [ 116.268835][ T4771] EXT4-fs: Ignoring removed i_version option [ 116.313002][ T4771] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.343666][ T4771] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.364: Invalid block bitmap block 0 in block_group 0 [ 116.357796][ T4771] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.364: Failed to acquire dquot type 0 [ 116.370940][ T4771] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.364: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.385503][ T4771] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.364: Invalid inode bitmap blk 0 in block_group 0 [ 116.398412][ T4061] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:19: Failed to release dquot type 0 [ 116.410417][ T4771] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 116.419773][ T4771] EXT4-fs (loop1): 1 orphan inode deleted [ 116.426566][ T4771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.796732][ T4781] netlink: 148 bytes leftover after parsing attributes in process `syz.2.363'. [ 117.757791][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 117.961426][ T4787] loop3: detected capacity change from 0 to 256 [ 118.299085][ T4790] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 118.311990][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.332728][ T3373] lo speed is unknown, defaulting to 1000 [ 118.338599][ T3373] syz0: Port: 1 Link ACTIVE [ 118.411534][ T4797] loop2: detected capacity change from 0 to 512 [ 118.501786][ T4797] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.511055][ T4797] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.370: Failed to acquire dquot type 1 [ 118.525774][ T4797] EXT4-fs (loop2): 1 truncate cleaned up [ 118.885686][ T4802] loop0: detected capacity change from 0 to 256 [ 119.135359][ T4805] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 119.289185][ T4808] vlan2: entered allmulticast mode [ 119.294450][ T4808] bridge0: entered allmulticast mode [ 119.301078][ T4797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.358713][ T4808] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 119.613951][ T4815] lo speed is unknown, defaulting to 1000 [ 119.996880][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'. [ 120.152000][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.269485][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 120.269503][ T29] audit: type=1326 audit(1759323609.644:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.299270][ T29] audit: type=1326 audit(1759323609.644:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.337431][ T29] audit: type=1326 audit(1759323609.654:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.360877][ T29] audit: type=1326 audit(1759323609.654:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.384594][ T29] audit: type=1326 audit(1759323609.654:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.408355][ T29] audit: type=1326 audit(1759323609.654:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.432014][ T29] audit: type=1326 audit(1759323609.654:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.455563][ T29] audit: type=1326 audit(1759323609.654:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.479161][ T29] audit: type=1326 audit(1759323609.654:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.502419][ T29] audit: type=1326 audit(1759323609.654:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.4.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1807eec9 code=0x7ffc0000 [ 120.605652][ T4832] lo speed is unknown, defaulting to 1000 [ 120.725610][ T4836] netlink: 148 bytes leftover after parsing attributes in process `syz.1.379'. [ 120.983638][ T4835] loop3: detected capacity change from 0 to 512 [ 120.992163][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.000736][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.035237][ T4837] lo speed is unknown, defaulting to 1000 [ 121.088536][ T4835] lo speed is unknown, defaulting to 1000 [ 121.530689][ T4845] lo speed is unknown, defaulting to 1000 [ 122.776891][ T4850] loop1: detected capacity change from 0 to 1024 [ 122.784169][ T4850] EXT4-fs: Ignoring removed i_version option [ 122.932354][ T4850] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.946666][ T4850] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.383: Invalid block bitmap block 0 in block_group 0 [ 122.961804][ T4850] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.383: Failed to acquire dquot type 0 [ 122.973727][ T4850] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.383: Freeing blocks not in datazone - block = 0, count = 4096 [ 122.988070][ T4850] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.383: Invalid inode bitmap blk 0 in block_group 0 [ 123.001067][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 123.016764][ T4850] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 123.026493][ T4850] EXT4-fs (loop1): 1 orphan inode deleted [ 123.033295][ T4850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.083798][ T4852] syzkaller0: entered allmulticast mode [ 123.536497][ T4857] netlink: 'syz.4.385': attribute type 4 has an invalid length. [ 123.942778][ T4865] loop3: detected capacity change from 0 to 512 [ 123.979240][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.071439][ T4872] loop1: detected capacity change from 0 to 1024 [ 124.078306][ T4872] EXT4-fs: Ignoring removed orlov option [ 124.089184][ T4872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.176334][ T4875] loop4: detected capacity change from 0 to 512 [ 124.193658][ T4875] ext4: Unknown parameter 'nouser_xattr' [ 124.227133][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.252194][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.659525][ T4887] loop0: detected capacity change from 0 to 256 [ 124.811662][ T4891] netlink: 148 bytes leftover after parsing attributes in process `syz.3.395'. [ 124.961946][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.157117][ T4894] lo speed is unknown, defaulting to 1000 [ 125.562750][ T4901] loop0: detected capacity change from 0 to 512 [ 125.571302][ T4901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.579992][ T4901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.598980][ T4901] lo speed is unknown, defaulting to 1000 [ 127.135100][ T4906] loop3: detected capacity change from 0 to 1024 [ 127.141976][ T4906] EXT4-fs: Ignoring removed i_version option [ 127.201933][ T4906] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.234813][ T4906] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.399: Invalid block bitmap block 0 in block_group 0 [ 127.250300][ T4906] __quota_error: 17 callbacks suppressed [ 127.250321][ T4906] Quota error (device loop3): write_blk: dquota write failed [ 127.263653][ T4906] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 127.273679][ T4906] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.399: Failed to acquire dquot type 0 [ 127.305227][ T4906] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.399: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.322541][ T4906] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.399: Invalid inode bitmap blk 0 in block_group 0 [ 127.336694][ T4906] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 127.348300][ T4906] EXT4-fs (loop3): 1 orphan inode deleted [ 127.355218][ T4906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.520420][ T59] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 127.529529][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 128.017408][ T4918] vlan3: entered allmulticast mode [ 128.559405][ T29] audit: type=1326 audit(1759323617.934:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 128.582915][ T29] audit: type=1326 audit(1759323617.934:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 128.606277][ T29] audit: type=1326 audit(1759323617.934:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 128.714826][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.761222][ T29] audit: type=1326 audit(1759323618.014:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 128.784670][ T29] audit: type=1326 audit(1759323618.014:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 128.808423][ T29] audit: type=1326 audit(1759323618.014:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 128.832179][ T29] audit: type=1326 audit(1759323618.034:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77819ceec9 code=0x7ffc0000 [ 129.068187][ T4938] loop0: detected capacity change from 0 to 512 [ 129.080516][ T4938] EXT4-fs (loop0): orphan cleanup on readonly fs [ 129.088694][ T4938] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.407: Failed to acquire dquot type 1 [ 129.148473][ T4942] loop1: detected capacity change from 0 to 256 [ 129.231812][ T4938] EXT4-fs (loop0): 1 truncate cleaned up [ 129.612061][ T4938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.635584][ T4948] lo speed is unknown, defaulting to 1000 [ 130.235833][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 130.272335][ T4957] loop4: detected capacity change from 0 to 512 [ 130.338543][ T4957] ext4: Unknown parameter 'nouser_xattr' [ 130.373452][ T4957] loop4: detected capacity change from 0 to 1024 [ 130.431373][ T4957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.454120][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.477081][ T4957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.496059][ T4957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.595057][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 130.654588][ T4970] loop1: detected capacity change from 0 to 1024 [ 130.661767][ T4970] EXT4-fs: Ignoring removed i_version option [ 130.684297][ T4970] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.738500][ T4970] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.418: Invalid block bitmap block 0 in block_group 0 [ 130.752820][ T4970] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.418: Failed to acquire dquot type 0 [ 130.765224][ T4970] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.418: Freeing blocks not in datazone - block = 0, count = 4096 [ 130.779463][ T4970] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.418: Invalid inode bitmap blk 0 in block_group 0 [ 130.795828][ T4970] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 130.805503][ T4970] EXT4-fs (loop1): 1 orphan inode deleted [ 130.812497][ T4970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.537580][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 132.249450][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.433091][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 132.433108][ T29] audit: type=1326 audit(1759323621.814:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 132.462921][ T29] audit: type=1326 audit(1759323621.814:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 132.487575][ T4999] netlink: 148 bytes leftover after parsing attributes in process `syz.3.426'. [ 132.497364][ T29] audit: type=1326 audit(1759323621.864:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 132.521792][ T29] audit: type=1326 audit(1759323621.864:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 132.545914][ T29] audit: type=1326 audit(1759323621.864:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 132.632466][ T29] audit: type=1326 audit(1759323621.954:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 132.873402][ T5004] loop2: detected capacity change from 0 to 512 [ 132.894927][ T5004] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.910209][ T5004] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 132.920819][ T5004] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 132.930723][ T5004] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.427: Failed to acquire dquot type 1 [ 132.951917][ T5004] EXT4-fs (loop2): 1 truncate cleaned up [ 132.959843][ T5004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.652951][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.905185][ T5012] lo speed is unknown, defaulting to 1000 [ 133.937363][ T5016] loop1: detected capacity change from 0 to 256 [ 133.955881][ T5017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 134.404473][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.463774][ T5024] loop2: detected capacity change from 0 to 1024 [ 134.485246][ T5024] EXT4-fs: Ignoring removed orlov option [ 134.504374][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.751448][ T5033] loop0: detected capacity change from 0 to 1024 [ 134.758322][ T5033] EXT4-fs: Ignoring removed i_version option [ 134.769607][ T5033] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.853988][ T5033] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.435: Invalid block bitmap block 0 in block_group 0 [ 134.874831][ T5033] Quota error (device loop0): write_blk: dquota write failed [ 134.882526][ T5033] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 134.892654][ T5033] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.435: Failed to acquire dquot type 0 [ 134.905109][ T5033] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.435: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.919192][ T5033] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.435: Invalid inode bitmap blk 0 in block_group 0 [ 134.933002][ T5033] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 134.941982][ T5033] EXT4-fs (loop0): 1 orphan inode deleted [ 134.948654][ T5033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.968292][ T4056] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:14: Failed to release dquot type 0 [ 135.453150][ T5038] vlan2: entered allmulticast mode [ 136.303213][ T5049] loop3: detected capacity change from 0 to 512 [ 136.348683][ T5044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.364360][ T5044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.392448][ T5044] lo speed is unknown, defaulting to 1000 [ 136.461724][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.731926][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.792639][ T5054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.799988][ T5054] IPv6: NLM_F_CREATE should be set when creating new route [ 136.876574][ T5059] netlink: 148 bytes leftover after parsing attributes in process `syz.0.441'. [ 136.958596][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 137.214328][ T5072] lo speed is unknown, defaulting to 1000 [ 137.336567][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 137.763171][ T5082] loop4: detected capacity change from 0 to 512 [ 137.967503][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 137.967520][ T29] audit: type=1326 audit(1759323627.344:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 137.997128][ T29] audit: type=1326 audit(1759323627.344:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.021209][ T29] audit: type=1326 audit(1759323627.344:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.044786][ T29] audit: type=1326 audit(1759323627.344:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.068367][ T29] audit: type=1326 audit(1759323627.344:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.174327][ T5093] loop2: detected capacity change from 0 to 1024 [ 138.191626][ T5093] EXT4-fs: Ignoring removed orlov option [ 138.223139][ T5089] loop1: detected capacity change from 0 to 8192 [ 138.230445][ T5093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.251509][ T5089] vfat: Unknown parameter '@' [ 138.285982][ T29] audit: type=1326 audit(1759323627.424:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.309570][ T29] audit: type=1326 audit(1759323627.424:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.309609][ T29] audit: type=1326 audit(1759323627.424:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.309654][ T29] audit: type=1326 audit(1759323627.424:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.309680][ T29] audit: type=1326 audit(1759323627.424:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e049eec9 code=0x7ffc0000 [ 138.612086][ T5093] ================================================================== [ 138.620229][ T5093] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 138.628268][ T5093] [ 138.630621][ T5093] write to 0xffff88811a06a008 of 4 bytes by task 5097 on cpu 1: [ 138.638280][ T5093] writeback_single_inode+0x150/0x3f0 [ 138.643725][ T5093] sync_inode_metadata+0x5b/0x90 [ 138.648880][ T5093] generic_buffers_fsync_noflush+0xd9/0x120 [ 138.654924][ T5093] ext4_sync_file+0x1ab/0x690 [ 138.659666][ T5093] vfs_fsync_range+0x10d/0x130 [ 138.664496][ T5093] ext4_buffered_write_iter+0x34f/0x3c0 [ 138.670080][ T5093] ext4_file_write_iter+0x383/0xf00 [ 138.675319][ T5093] iter_file_splice_write+0x663/0xa60 [ 138.680769][ T5093] direct_splice_actor+0x156/0x2a0 [ 138.686015][ T5093] splice_direct_to_actor+0x312/0x680 [ 138.691523][ T5093] do_splice_direct+0xda/0x150 [ 138.696552][ T5093] do_sendfile+0x380/0x650 [ 138.701015][ T5093] __x64_sys_sendfile64+0x105/0x150 [ 138.706433][ T5093] x64_sys_call+0x2bb4/0x3000 [ 138.711229][ T5093] do_syscall_64+0xd2/0x200 [ 138.715781][ T5093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.721717][ T5093] [ 138.724246][ T5093] read to 0xffff88811a06a008 of 4 bytes by task 5093 on cpu 0: [ 138.731807][ T5093] vfs_fsync_range+0x9b/0x130 [ 138.736606][ T5093] ext4_buffered_write_iter+0x34f/0x3c0 [ 138.742267][ T5093] ext4_file_write_iter+0x383/0xf00 [ 138.747524][ T5093] iter_file_splice_write+0x663/0xa60 [ 138.752919][ T5093] direct_splice_actor+0x156/0x2a0 [ 138.758090][ T5093] splice_direct_to_actor+0x312/0x680 [ 138.763491][ T5093] do_splice_direct+0xda/0x150 [ 138.768288][ T5093] do_sendfile+0x380/0x650 [ 138.772727][ T5093] __x64_sys_sendfile64+0x105/0x150 [ 138.778676][ T5093] x64_sys_call+0x2bb4/0x3000 [ 138.783404][ T5093] do_syscall_64+0xd2/0x200 [ 138.788126][ T5093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.794053][ T5093] [ 138.796392][ T5093] value changed: 0x00000070 -> 0x00000002 [ 138.802121][ T5093] [ 138.804547][ T5093] Reported by Kernel Concurrency Sanitizer on: [ 138.810909][ T5093] CPU: 0 UID: 0 PID: 5093 Comm: syz.2.453 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.820596][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.830854][ T5093] ================================================================== [ 138.896903][ T5102] loop1: detected capacity change from 0 to 1024 [ 138.903929][ T5102] EXT4-fs: Ignoring removed i_version option [ 138.916360][ T5102] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.009030][ T5102] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.454: Invalid block bitmap block 0 in block_group 0 [ 139.022815][ T5102] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.454: Failed to acquire dquot type 0 [ 139.034589][ T5102] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.454: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.048833][ T5102] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.454: Invalid inode bitmap blk 0 in block_group 0 [ 139.063902][ T5102] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 139.072683][ T5102] EXT4-fs (loop1): 1 orphan inode deleted [ 139.079591][ T5102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.789410][ T4056] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:14: Failed to release dquot type 0 [ 139.812509][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.426650][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.