last executing test programs: 3m47.770953721s ago: executing program 0 (id=1662): rt_sigqueueinfo(0x0, 0x22, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYBLOB="28d2fa5b76ebe264fc9a2554e88cca909fd6e5b6c9113eec611f6b2584ea6d089b4c0445c3b09210a5e72e2f6d0e2cb99db3b6e13cb74346c072d8cc6e1fbbe762589bb51744c575d6a23ac3bfd75288e1f2031ac97ae2718f41267ce5994977a5343eb1ba0d0c38b548393ca16c3ad5f996aa8a3605b56812e09acc118d3579b92ab7be8240e73cc5a6e3778dd6e3f08790b30073471b4b5d9ff67d1aafabef49c4a915508bc8fd"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0xb2, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x6f98, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x13, 0x83}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x3, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) io_submit(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffff0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 3m46.778040606s ago: executing program 0 (id=1674): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x7, 'Cr\a\x00\x00\x00\x00'}}) 3m46.676953027s ago: executing program 0 (id=1676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 3m46.675719037s ago: executing program 0 (id=1677): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x1, 0x3, 0x1, 0x4, 0xfffffffffffffffc}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x50}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x8a}], &(0x7f0000000280)='GPL\x00', 0xfffffff9, 0x30, &(0x7f00000002c0)=""/48, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x1, 0x1, 0x7, 0x9}], 0x10, 0x3}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0x1, 0x3, 0x1, 0x4, 0xfffffffffffffffc}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x50}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x8a}], &(0x7f0000000280)='GPL\x00', 0xfffffff9, 0x30, &(0x7f00000002c0)=""/48, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x1, 0x1, 0x7, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000180)='afs_edit_dir\x00', r0, 0x0, 0x1c}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x168, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0xe2, 0xc, "a02298597ebab58266ade5a45a5ce73315a08065924da2000da5e4219e3aa1f778b569bc6adc3a296bb1227cc12951b3723895081a8420469bee699b7b3ea7382f80ed09951294d10494e3e0246178c9d11c5267e20e8781cfb997c25f92991a8e5b696b78b5d507e28faeb2098cd0b30d0940b51ce12ac99d76c3904a49f1f05a50c2bdb30934f2823719598cbe12fd1a0e38dd294e7c4a49eccc2b62396655adf964fdc0d57692a20a3dea36a67aa7982411ce2f0e017cc8cdb9d4191ac659e28a94f62c496e827d21cac2506c6203784a99d10bf30338c73d190342d3"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x4d, 0xc, "f221bacd4781a5aa4c9b0cb0e86a8978b85d84f813795bbd3cdc965ff026c60ce519cdbc567424f8420344509f45227b076f68dac53aceb0ddd6eb746194dcef428e1152ee75e51ae0"}]}, 0x168}, 0x1, 0x0, 0x0, 0x44000}, 0x80) (async) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x168, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0xe2, 0xc, "a02298597ebab58266ade5a45a5ce73315a08065924da2000da5e4219e3aa1f778b569bc6adc3a296bb1227cc12951b3723895081a8420469bee699b7b3ea7382f80ed09951294d10494e3e0246178c9d11c5267e20e8781cfb997c25f92991a8e5b696b78b5d507e28faeb2098cd0b30d0940b51ce12ac99d76c3904a49f1f05a50c2bdb30934f2823719598cbe12fd1a0e38dd294e7c4a49eccc2b62396655adf964fdc0d57692a20a3dea36a67aa7982411ce2f0e017cc8cdb9d4191ac659e28a94f62c496e827d21cac2506c6203784a99d10bf30338c73d190342d3"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x4d, 0xc, "f221bacd4781a5aa4c9b0cb0e86a8978b85d84f813795bbd3cdc965ff026c60ce519cdbc567424f8420344509f45227b076f68dac53aceb0ddd6eb746194dcef428e1152ee75e51ae0"}]}, 0x168}, 0x1, 0x0, 0x0, 0x44000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r3 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r3, &(0x7f00000006c0)={0x23, 0x80, 0x7, 0xff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$eJzs3M1rHPUbAPBnJtmkL/n9NoLgy0GEFloonSTNpT01XrwVCgWvNSSTEDLJhuymdmPB1rNQm4uCIOrZo1eh1D/AmxQUvAuiNR7Ey8psXkpjNt02TVbazwcm+3xnZ+Z5nuzwzQ5kJoAX1pvljyRiKCIuR0R1c30aEQPt6EjEzY3t1h/cmCqXJFqtK78l5W6x3qpuHyvZfD0e7V3i1Yi4V4k48+G/89abq/OTRZEvb45HGgtLI/Xm6tm5hcnZfDZfHBu/MHp+fPz86Phje3ily15PvnPh6J3v315b++Gbxu03+s8mMdHuOzZ76/IwT2Tjd1KJiR3rFw8iWQ8lvS4AAICulN/z+yKiv/0ttRp97QgAAAB4nrQGWwAAAMBzL4leVwAAAAAcrK3/A9i6t/eg7oPt5Ne3ImJ4t/z97XuII45EJSKOrSeP3JmQbOwG+3LzVkTcndh5/n1VnmE393ns0R3jR++RHtjn0XkW7pbzz8Ru80+6Pf/ELvNP/9azE/ap8/z3MH9fh/nvcpc5vv38tUrH/LciXu/fLX+ynT/pkP/dLvPfXvvoTjvYpYrWlxGndv37kzySa4/nQ0zMzBV7Pn7g3t+n7+/V/7FO+ZO9+1/qsv/31/+Y7zSXlPlPn9j7898tf3lOfLxZRxoRdzZfy/HajhwnFn78bq/+pyNaT/P5f9Fl/z9/PXi9y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgLY2IoUjSbDtO0yyLOB4RL8extKjVG2dmaiuL0+V7EcNRSWfminw0Iqob46Qcj7Xjh+NzO8bjEfHST0c3ks4VeTZVK6Z73TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbjkfEUCRpFhFpRPxZTdMsi+jvYt/BQ6gPAAAAeEaGe10AAAAAcOC6uP4fOIw6AAAAgINTXv/3PcV+yQHUAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy3Ll+6VC6t9Qc3psrx9LXmynzt2tnpvD6fLaxMZVO15aVstlabLfJsqrbwuOMVtdrS2IVYuT7SyOuNkXpz9epCbWWxcXVuYXI2v5pXDqUrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntRQe0nSLCLSdpymWRbxv4gYjkoyM1fkoxHx/4i4X60MluOxXhcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM1dvrs5PFkW+LBAIDi34ICL+A2XsEfR6ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfqzdX5yaLIl+u9rgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDeSn9JIqJcTlVPDu18dyD5q9p+jYj3PrvyyfXJRmN5rFz/+/b6xqeb68/1on4AAAB4IVx8ko23rtO3ruMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6VW+uzk8WRb68v+BiNFdbSYdtet0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdP4JAAD//2T7x0Y=") chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000640)={0x2, 0x1, 0x6, 0x4}) (async) fcntl$lock(r4, 0x5, &(0x7f0000000640)={0x2, 0x1, 0x6, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m46.44811006s ago: executing program 0 (id=1678): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xffc}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) 3m46.422804541s ago: executing program 0 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 3m46.406958232s ago: executing program 32 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 10.885021234s ago: executing program 2 (id=4821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x18, 0x2a, [@mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0x88}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0xf}}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44) 10.765567116s ago: executing program 2 (id=4825): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000001, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 10.743849356s ago: executing program 2 (id=4826): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x0, 0x4, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x1, 0x0, 0x29}}) 10.691787717s ago: executing program 2 (id=4828): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000000080)={[], [{@uid_eq}], 0x2c}, 0x1, 0x9d7, &(0x7f0000001800)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) 10.666619137s ago: executing program 2 (id=4829): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@orlov}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1f) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.550587149s ago: executing program 2 (id=4830): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x4}, {0x3, 0x5, 0x1}}}]}]}]}}]}, 0x54}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.550335609s ago: executing program 33 (id=4830): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x4}, {0x3, 0x5, 0x1}}}]}]}]}}]}, 0x54}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.549418655s ago: executing program 6 (id=4890): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 4.473749112s ago: executing program 3 (id=4892): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0xfffffffffffffffe, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 4.227414025s ago: executing program 3 (id=4894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x7f) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) 4.150310546s ago: executing program 6 (id=4895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x1000000, 0x2000000, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 3.95500697s ago: executing program 6 (id=4896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 3.780239372s ago: executing program 6 (id=4898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.778397412s ago: executing program 6 (id=4900): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 2.151233707s ago: executing program 5 (id=4909): syz_io_uring_setup(0x1f6b, 0x0, &(0x7f0000000800), &(0x7f0000000840)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x420, 0x3f3, 0x0, 0x70bd28, 0x25dfdbff, {0x2, 0x1, 0x26, [0x8, 0x2, 0x80000000, 0x2, 0x1, 0x8, 0x1, 0x5, 0x3, 0x8, 0x1, 0xb, 0x1ff, 0x4d, 0x9, 0xffffffff, 0x3ff, 0x10000, 0x4, 0x400, 0x7fff, 0x10, 0x4, 0xff, 0x7, 0x8, 0x0, 0x6, 0x400, 0x6, 0x7, 0x2, 0x1, 0x574, 0x1, 0x4, 0x3, 0x10000, 0x6, 0x3, 0x2, 0x6, 0x100, 0x0, 0x8, 0x5, 0x9, 0x8, 0x5, 0x200, 0x6, 0x7fffffff, 0xa, 0x2, 0x6, 0x40, 0x1, 0x2, 0x7fffffff, 0x1, 0xa16e, 0x3, 0x5, 0x8], [0x4, 0x2, 0x37, 0xe, 0x1d, 0x10001, 0xa0, 0x30000000, 0x63f, 0x3, 0x1, 0x6, 0x5, 0x4, 0x7ef674fa, 0xb5b, 0x53, 0x5, 0x1, 0x4, 0xd7bc, 0xde, 0x7, 0x6, 0xfc, 0x1, 0xfffffffc, 0xf, 0x1, 0xffff, 0x85, 0x1, 0x10, 0x3, 0x0, 0x4, 0x5f, 0x8, 0x0, 0x48000, 0x3, 0x618d4e6d, 0xda3, 0xff, 0x8001, 0x2, 0x4, 0x4, 0x8, 0x9, 0x3, 0x7, 0x40, 0x3, 0x7ff, 0x4, 0xc5, 0x9, 0x9, 0x8, 0x5, 0x4, 0xffff28ca, 0x22], [0x0, 0xfffffffe, 0xc, 0x1, 0x1, 0x8001, 0x7, 0x3, 0x7f, 0x40, 0x7, 0x1ff, 0x100, 0x5, 0x4, 0x8001, 0x800, 0x0, 0x80000001, 0x81, 0x2, 0x3, 0x5, 0x4, 0xe, 0x0, 0x0, 0x80000001, 0x0, 0x80000001, 0x94, 0x5, 0xef2, 0x0, 0x101, 0x1, 0x3, 0x2, 0xf97, 0x7, 0xb, 0x3000, 0xffff1e20, 0x4, 0x75e, 0x7000000, 0x2, 0x4, 0x7, 0x7, 0x3e9, 0x40, 0x1, 0x6, 0x8, 0xff, 0x7fff, 0xa9b2, 0x7, 0x0, 0xffffffff, 0x10000, 0x6, 0xe], [0x7, 0x1fe, 0x1, 0x3, 0x843e, 0xbc1f, 0x1, 0x2, 0x7, 0x7, 0x1, 0xc, 0xf, 0xfc, 0xfffffffb, 0x10, 0x800, 0x60, 0x8, 0x7, 0x4, 0x4, 0x80000000, 0x7, 0x101, 0x9, 0x7, 0xdf, 0x6, 0x5, 0x1, 0x98fa, 0x86e6, 0x5, 0x7fff, 0x0, 0x7, 0x0, 0x61, 0x7, 0xd, 0x8, 0x5, 0x600000, 0xb, 0x7, 0x7, 0x2, 0x4, 0x8, 0x61c, 0x0, 0x10000, 0x9, 0x638, 0x9, 0xb2a, 0xfffffffb, 0x1, 0x5c5e, 0x1, 0x7, 0xb1fb, 0xfff]}, ["", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x40080}, 0x20000080) io_setup(0x222, 0x0) io_submit(0x0, 0x0, 0x0) 2.107348097s ago: executing program 4 (id=4912): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) 2.106952657s ago: executing program 5 (id=4913): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.106700777s ago: executing program 6 (id=4914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500faff000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.072238708s ago: executing program 4 (id=4916): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.071929168s ago: executing program 5 (id=4917): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)={0x40, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0xae}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 1.981996009s ago: executing program 5 (id=4920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xb, 0x0, &(0x7f0000000700)="04d31fcd275bfc58188e69", 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsopen(0x0, 0x1) syz_clone(0x80, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)="20fd2970cb4a") 1.816234512s ago: executing program 3 (id=4922): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0xfffffffffffffffe, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1.815831922s ago: executing program 3 (id=4923): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.696421174s ago: executing program 4 (id=4924): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x19, 0x2, 0x0, 0x4}}) 1.565264236s ago: executing program 4 (id=4925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r6, &(0x7f0000000180)=""/147, 0xfdef) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) 1.508229417s ago: executing program 3 (id=4926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080), 0x0) 751.968058ms ago: executing program 3 (id=4928): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/60, 0x3c}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x5, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000002840)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 636.38166ms ago: executing program 5 (id=4930): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a0014000180c2000002"], 0x48}}, 0x4000) 556.388871ms ago: executing program 4 (id=4932): socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) 555.620321ms ago: executing program 4 (id=4934): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r0}, 0x18) setgid(0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7, 0x7, 0x91, 0x7, {{0x5, 0x4, 0x0, 0x26, 0x14, 0x67, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010102}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 491.447482ms ago: executing program 5 (id=4935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 87.922448ms ago: executing program 1 (id=4942): syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x20000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001a240)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 87.731918ms ago: executing program 1 (id=4943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003d000107000000000000000003"], 0x18}}, 0x0) 78.244728ms ago: executing program 1 (id=4944): socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) 62.600829ms ago: executing program 1 (id=4945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 283.94µs ago: executing program 1 (id=4946): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x2004c880) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=4947): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") kernel console output (not intermixed with test programs): [ 309.886605][T15674] dump_stack_lvl+0xe8/0x140 [ 309.886626][T15674] dump_stack+0x15/0x1b [ 309.886643][T15674] should_fail_ex+0x265/0x280 [ 309.886673][T15674] should_fail+0xb/0x20 [ 309.886753][T15674] should_fail_usercopy+0x1a/0x20 [ 309.886784][T15674] _copy_from_user+0x1c/0xb0 [ 309.886805][T15674] copy_from_sockptr+0x5e/0xa0 [ 309.886836][T15674] packet_setsockopt+0x7c1/0xfd0 [ 309.886925][T15674] ? __pfx_packet_setsockopt+0x10/0x10 [ 309.886948][T15674] __sys_setsockopt+0x181/0x200 [ 309.886980][T15674] __x64_sys_setsockopt+0x64/0x80 [ 309.887010][T15674] x64_sys_call+0x2bd5/0x2fb0 [ 309.887064][T15674] do_syscall_64+0xd2/0x200 [ 309.887095][T15674] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.887127][T15674] ? clear_bhb_loop+0x40/0x90 [ 309.887149][T15674] ? clear_bhb_loop+0x40/0x90 [ 309.887234][T15674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.887317][T15674] RIP: 0033:0x7f88116ee929 [ 309.887334][T15674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.887353][T15674] RSP: 002b:00007f880fd57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.887374][T15674] RAX: ffffffffffffffda RBX: 00007f8811915fa0 RCX: 00007f88116ee929 [ 309.887396][T15674] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 309.887451][T15674] RBP: 00007f880fd57090 R08: 000000000000001c R09: 0000000000000000 [ 309.887464][T15674] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 309.887477][T15674] R13: 0000000000000000 R14: 00007f8811915fa0 R15: 00007fff05d1ce78 [ 309.887496][T15674] [ 310.109513][T15676] EXT4-fs mount: 53 callbacks suppressed [ 310.109600][T15676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.232664][T15686] lo speed is unknown, defaulting to 1000 [ 310.286302][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.337201][T15698] lo speed is unknown, defaulting to 1000 [ 310.439398][T15708] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 310.631225][T15719] loop4: detected capacity change from 0 to 1024 [ 310.631726][T15719] EXT4-fs: Ignoring removed nobh option [ 310.643651][T15719] EXT4-fs: Ignoring removed bh option [ 310.712611][T15727] 9pnet_fd: Insufficient options for proto=fd [ 310.715744][T15727] loop2: detected capacity change from 0 to 256 [ 310.716603][T15727] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 310.759447][T15727] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.836497][T15726] lo speed is unknown, defaulting to 1000 [ 311.080669][T15719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.292438][T15740] net_ratelimit: 5 callbacks suppressed [ 311.292457][T15740] sock: sock_set_timeout: `syz.5.4120' (pid 15740) tries to set negative timeout [ 311.432282][T15738] loop3: detected capacity change from 0 to 1024 [ 311.448980][T15738] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 311.478154][T15738] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 311.507107][T15738] EXT4-fs (loop3): orphan cleanup on readonly fs [ 311.565189][T15752] loop2: detected capacity change from 0 to 2048 [ 311.612276][T15738] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4119: bg 0: block 10: padding at end of block bitmap is not set [ 311.640746][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.643525][T15752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.662797][T15738] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4119: Failed to acquire dquot type 0 [ 311.681504][T15738] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4119: Failed to acquire dquot type 0 [ 311.698508][T15738] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4119: Freeing blocks not in datazone - block = 0, count = 4096 [ 311.720312][T15738] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4119: Failed to acquire dquot type 0 [ 311.756262][T15738] EXT4-fs (loop3): 1 orphan inode deleted [ 311.792198][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.799435][T15760] lo speed is unknown, defaulting to 1000 [ 311.851523][T15738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.963782][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.993654][T15786] loop3: detected capacity change from 0 to 1024 [ 312.000530][T15786] EXT4-fs: Ignoring removed nobh option [ 312.006294][T15786] EXT4-fs: Ignoring removed bh option [ 312.012572][T15786] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 312.037029][T15786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.104419][T15795] 9pnet_fd: Insufficient options for proto=fd [ 312.428525][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.479816][ T3419] hid-generic 0003:0004:0000.0051: unknown main item tag 0x0 [ 312.487310][ T3419] hid-generic 0003:0004:0000.0051: unknown main item tag 0x0 [ 312.494717][ T3419] hid-generic 0003:0004:0000.0051: unknown main item tag 0x0 [ 312.504517][ T3419] hid-generic 0003:0004:0000.0051: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 312.532165][T15803] lo speed is unknown, defaulting to 1000 [ 312.602192][T15810] lo speed is unknown, defaulting to 1000 [ 312.628490][T15814] FAULT_INJECTION: forcing a failure. [ 312.628490][T15814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.642020][T15814] CPU: 0 UID: 0 PID: 15814 Comm: syz.3.4144 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 312.642174][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.642188][T15814] Call Trace: [ 312.642197][T15814] [ 312.642206][T15814] __dump_stack+0x1d/0x30 [ 312.642232][T15814] dump_stack_lvl+0xe8/0x140 [ 312.642271][T15814] dump_stack+0x15/0x1b [ 312.642286][T15814] should_fail_ex+0x265/0x280 [ 312.642373][T15814] should_fail+0xb/0x20 [ 312.642397][T15814] should_fail_usercopy+0x1a/0x20 [ 312.642425][T15814] _copy_from_user+0x1c/0xb0 [ 312.642450][T15814] ___sys_sendmsg+0xc1/0x1d0 [ 312.642490][T15814] __x64_sys_sendmsg+0xd4/0x160 [ 312.642525][T15814] x64_sys_call+0x2999/0x2fb0 [ 312.642618][T15814] do_syscall_64+0xd2/0x200 [ 312.642654][T15814] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 312.642685][T15814] ? clear_bhb_loop+0x40/0x90 [ 312.642705][T15814] ? clear_bhb_loop+0x40/0x90 [ 312.642793][T15814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.642815][T15814] RIP: 0033:0x7f8201b6e929 [ 312.642830][T15814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.642847][T15814] RSP: 002b:00007f82001d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.642867][T15814] RAX: ffffffffffffffda RBX: 00007f8201d95fa0 RCX: 00007f8201b6e929 [ 312.642880][T15814] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 312.642895][T15814] RBP: 00007f82001d7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.642990][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.643004][T15814] R13: 0000000000000000 R14: 00007f8201d95fa0 R15: 00007ffece5bf078 [ 312.643087][T15814] [ 312.683414][T15818] netlink: 'syz.4.4145': attribute type 1 has an invalid length. [ 312.841248][T15818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4145'. [ 312.942640][T15824] loop2: detected capacity change from 0 to 256 [ 312.943224][T15824] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.963304][T15824] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.085410][ T3419] hid-generic 0003:0004:0000.0052: unknown main item tag 0x0 [ 313.085438][ T3419] hid-generic 0003:0004:0000.0052: unknown main item tag 0x0 [ 313.085459][ T3419] hid-generic 0003:0004:0000.0052: unknown main item tag 0x0 [ 313.087346][ T3419] hid-generic 0003:0004:0000.0052: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 313.273587][T15856] lo speed is unknown, defaulting to 1000 [ 313.433936][T15866] 9pnet_fd: Insufficient options for proto=fd [ 313.437852][T15866] loop2: detected capacity change from 0 to 256 [ 313.438562][T15866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.492308][T15860] FAULT_INJECTION: forcing a failure. [ 313.492308][T15860] name failslab, interval 1, probability 0, space 0, times 0 [ 313.492401][T15860] CPU: 1 UID: 0 PID: 15860 Comm: syz.3.4157 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 313.492428][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.492442][T15860] Call Trace: [ 313.492450][T15860] [ 313.492458][T15860] __dump_stack+0x1d/0x30 [ 313.492535][T15860] dump_stack_lvl+0xe8/0x140 [ 313.492587][T15860] dump_stack+0x15/0x1b [ 313.492606][T15860] should_fail_ex+0x265/0x280 [ 313.492638][T15860] should_failslab+0x8c/0xb0 [ 313.492732][T15860] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 313.492759][T15860] ? sidtab_sid2str_get+0xa0/0x130 [ 313.492779][T15860] ? skb_put+0xa9/0xf0 [ 313.492805][T15860] kmemdup_noprof+0x2b/0x70 [ 313.492857][T15860] sidtab_sid2str_get+0xa0/0x130 [ 313.492920][T15860] security_sid_to_context_core+0x1eb/0x2e0 [ 313.492949][T15860] security_sid_to_context+0x27/0x40 [ 313.492972][T15860] avc_audit_post_callback+0x9d/0x520 [ 313.492997][T15860] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 313.493038][T15860] common_lsm_audit+0x1bb/0x230 [ 313.493056][T15860] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 313.493081][T15860] slow_avc_audit+0x104/0x140 [ 313.493187][T15860] avc_has_perm+0x128/0x150 [ 313.493213][T15860] selinux_socket_setsockopt+0x17c/0x1e0 [ 313.493251][T15860] security_socket_setsockopt+0x46/0x80 [ 313.493284][T15860] __sys_setsockopt+0x98/0x200 [ 313.493369][T15860] __x64_sys_setsockopt+0x64/0x80 [ 313.493402][T15860] x64_sys_call+0x2bd5/0x2fb0 [ 313.493423][T15860] do_syscall_64+0xd2/0x200 [ 313.493500][T15860] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.493525][T15860] ? clear_bhb_loop+0x40/0x90 [ 313.493547][T15860] ? clear_bhb_loop+0x40/0x90 [ 313.493571][T15860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.493599][T15860] RIP: 0033:0x7f8201b6e929 [ 313.493659][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.493696][T15860] RSP: 002b:00007f82001d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.493715][T15860] RAX: ffffffffffffffda RBX: 00007f8201d95fa0 RCX: 00007f8201b6e929 [ 313.493728][T15860] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 313.493796][T15860] RBP: 00007f82001d7090 R08: 0000000000000550 R09: 0000000000000000 [ 313.493812][T15860] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.493824][T15860] R13: 0000000000000000 R14: 00007f8201d95fa0 R15: 00007ffece5bf078 [ 313.493845][T15860] [ 313.517723][T15866] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.795201][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 313.795218][ T29] audit: type=1400 audit(1751859923.127:9994): avc: denied { create } for pid=15874 comm="syz.4.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.829658][T15875] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 313.847699][ T29] audit: type=1400 audit(1751859923.167:9995): avc: denied { setopt } for pid=15874 comm="syz.4.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.882315][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4166'. [ 313.888709][ T29] audit: type=1326 audit(1751859923.197:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 313.892584][T15884] netlink: 'syz.1.4164': attribute type 4 has an invalid length. [ 313.895891][ T29] audit: type=1326 audit(1751859923.197:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 313.938589][T15884] Cannot find del_set index 4 as target [ 313.943063][ T29] audit: type=1326 audit(1751859923.197:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 313.943122][ T29] audit: type=1326 audit(1751859923.197:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 313.974706][T15885] loop4: detected capacity change from 0 to 2048 [ 313.988999][ T29] audit: type=1326 audit(1751859923.197:10000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15878 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 314.260903][ T29] audit: type=1400 audit(1751859923.247:10001): avc: denied { create } for pid=15874 comm="syz.4.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 314.280800][ T29] audit: type=1400 audit(1751859923.247:10002): avc: denied { bind } for pid=15874 comm="syz.4.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 314.349896][T15904] loop5: detected capacity change from 0 to 1024 [ 314.360916][T15904] EXT4-fs: Ignoring removed nobh option [ 314.368975][T15904] EXT4-fs: Ignoring removed bh option [ 314.376612][T15904] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 314.392433][ T29] audit: type=1400 audit(1751859923.677:10003): avc: denied { read } for pid=15903 comm="syz.5.4169" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 314.425898][T15904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.446003][T15902] loop2: detected capacity change from 0 to 1024 [ 314.455674][T15902] EXT4-fs: Ignoring removed nobh option [ 314.461417][T15902] EXT4-fs: Ignoring removed bh option [ 314.483040][T15909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4170'. [ 314.549694][T15902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.620325][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.672869][ T3419] hid-generic 0003:0004:0000.0053: unknown main item tag 0x0 [ 314.680521][ T3419] hid-generic 0003:0004:0000.0053: unknown main item tag 0x0 [ 314.688012][ T3419] hid-generic 0003:0004:0000.0053: unknown main item tag 0x0 [ 314.699509][ T3419] hid-generic 0003:0004:0000.0053: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 314.750119][T15924] SELinux: failed to load policy [ 314.852040][T15905] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.4168: Allocating blocks 497-513 which overlap fs metadata [ 315.052662][T15942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4180'. [ 315.448761][T15902] EXT4-fs (loop2): pa ffff888100490e70: logic 512, phys. 241, len 17 [ 315.457011][T15902] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 315.584742][T15954] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 315.621504][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.643322][T15957] loop3: detected capacity change from 0 to 1024 [ 315.646686][T15957] EXT4-fs: Ignoring removed nobh option [ 315.658632][T15958] loop4: detected capacity change from 0 to 2048 [ 315.660211][T15957] EXT4-fs: Ignoring removed bh option [ 315.674128][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4183'. [ 315.674734][T15957] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 315.702248][T15957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.809280][T15966] veth4: entered promiscuous mode [ 315.809439][T15966] veth5: entered promiscuous mode [ 315.866286][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.026058][T15981] loop2: detected capacity change from 0 to 512 [ 316.042479][T15981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.042584][T15981] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.068522][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 316.069062][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4191'. [ 316.075251][T15970] loop3: detected capacity change from 0 to 1024 [ 316.098475][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.100168][T15970] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 316.148710][T15970] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 316.151022][T15970] EXT4-fs (loop3): orphan cleanup on readonly fs [ 316.158219][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4194'. [ 316.183618][T15970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4187: bg 0: block 10: padding at end of block bitmap is not set [ 316.264296][T15970] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4187: Failed to acquire dquot type 0 [ 316.283768][T15970] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4187: Failed to acquire dquot type 0 [ 316.285990][T15970] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4187: Freeing blocks not in datazone - block = 0, count = 4096 [ 316.297948][T15996] loop2: detected capacity change from 0 to 512 [ 316.321742][T15970] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4187: Failed to acquire dquot type 0 [ 316.325433][T15970] EXT4-fs (loop3): 1 orphan inode deleted [ 316.346477][T15996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.365093][T15996] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.378366][T16000] netlink: 'syz.5.4196': attribute type 4 has an invalid length. [ 316.383188][T15970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.422072][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.438124][T16000] Cannot find del_set index 4 as target [ 316.444455][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4195'. [ 316.455520][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'. [ 316.478457][T16004] netlink: 'syz.5.4199': attribute type 4 has an invalid length. [ 316.489500][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.502368][T16004] Cannot find del_set index 4 as target [ 316.541270][T16009] lo speed is unknown, defaulting to 1000 [ 317.086394][T16011] loop3: detected capacity change from 0 to 256 [ 317.093178][T16011] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.107365][T16024] 9pnet_fd: Insufficient options for proto=fd [ 317.115221][T16024] loop2: detected capacity change from 0 to 256 [ 317.121945][T16024] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.135209][T16011] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.151981][T16024] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.260642][T16022] lo speed is unknown, defaulting to 1000 [ 317.578160][T16040] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 317.623639][T16043] loop3: detected capacity change from 0 to 1024 [ 317.632715][T16038] lo speed is unknown, defaulting to 1000 [ 317.646431][T16043] EXT4-fs: Ignoring removed nobh option [ 317.652926][T16046] loop4: detected capacity change from 0 to 2048 [ 317.656565][T16043] EXT4-fs: Ignoring removed bh option [ 317.666053][T16050] loop5: detected capacity change from 0 to 512 [ 317.674297][T16043] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 317.689212][T16050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.702165][T16050] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.720679][T16043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.806614][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.821427][T16060] lo speed is unknown, defaulting to 1000 [ 317.920173][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.951627][T16064] netlink: 'syz.5.4215': attribute type 1 has an invalid length. [ 317.959602][T16064] __nla_validate_parse: 3 callbacks suppressed [ 317.959630][T16064] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4215'. [ 318.055600][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4219'. [ 318.141834][T16089] loop2: detected capacity change from 0 to 512 [ 318.159373][T16089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.161057][ T3387] hid-generic 0003:0004:0000.0054: unknown main item tag 0x0 [ 318.173665][T16089] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.179482][ T3387] hid-generic 0003:0004:0000.0054: unknown main item tag 0x0 [ 318.197384][ T3387] hid-generic 0003:0004:0000.0054: unknown main item tag 0x0 [ 318.199785][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4225'. [ 318.205978][ T3387] hid-generic 0003:0004:0000.0054: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 318.217075][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4225'. [ 318.246239][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.326331][T16101] loop2: detected capacity change from 0 to 1024 [ 318.338844][T16101] EXT4-fs: Ignoring removed nobh option [ 318.344637][T16101] EXT4-fs: Ignoring removed bh option [ 318.361321][T16101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.534190][T16116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4233'. [ 318.608019][ T3419] hid-generic 0003:0004:0000.0055: unknown main item tag 0x0 [ 318.615597][ T3419] hid-generic 0003:0004:0000.0055: unknown main item tag 0x0 [ 318.623075][ T3419] hid-generic 0003:0004:0000.0055: unknown main item tag 0x0 [ 318.657557][ T3419] hid-generic 0003:0004:0000.0055: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 318.742755][T16127] loop3: detected capacity change from 0 to 1024 [ 318.774080][T16127] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.794140][T16127] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 318.809605][T16127] EXT4-fs (loop3): orphan cleanup on readonly fs [ 318.839105][T16127] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4238: bg 0: block 10: padding at end of block bitmap is not set [ 318.856450][T16127] __quota_error: 534 callbacks suppressed [ 318.856492][T16127] Quota error (device loop3): write_blk: dquota write failed [ 318.873219][T16127] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 318.884583][T16127] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 318.896605][T16127] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4238: Failed to acquire dquot type 0 [ 318.914251][T16127] Quota error (device loop3): write_blk: dquota write failed [ 318.922684][T16127] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 318.933732][T16127] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 318.934946][T16099] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.4229: Allocating blocks 497-513 which overlap fs metadata [ 318.944402][T16127] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4238: Failed to acquire dquot type 0 [ 318.975046][ T29] audit: type=1326 audit(1751859928.307:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 319.000480][T16127] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4238: Freeing blocks not in datazone - block = 0, count = 4096 [ 319.024585][T16127] Quota error (device loop3): write_blk: dquota write failed [ 319.040374][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4248'. [ 319.057945][T16127] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 319.070851][T16127] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 319.096082][T16127] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4238: Failed to acquire dquot type 0 [ 319.115403][T16127] EXT4-fs (loop3): 1 orphan inode deleted [ 319.164343][T16099] EXT4-fs (loop2): pa ffff888100490f50: logic 432, phys. 177, len 21 [ 319.170630][T16152] loop5: detected capacity change from 0 to 1024 [ 319.173123][T16099] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 319.185558][T16127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.234880][T16152] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.255854][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.284365][T16152] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 319.299582][ T3419] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 319.304934][T16152] EXT4-fs (loop5): orphan cleanup on readonly fs [ 319.307186][ T3419] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 319.307214][ T3419] hid-generic 0003:0004:0000.0056: unknown main item tag 0x0 [ 319.318220][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.342695][T16152] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4247: bg 0: block 10: padding at end of block bitmap is not set [ 319.364543][T16152] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4247: Failed to acquire dquot type 0 [ 319.384803][T16152] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4247: Failed to acquire dquot type 0 [ 319.400677][T16152] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4247: Freeing blocks not in datazone - block = 0, count = 4096 [ 319.426168][T16152] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4247: Failed to acquire dquot type 0 [ 319.428795][ T3419] hid-generic 0003:0004:0000.0056: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 319.454046][T16152] EXT4-fs (loop5): 1 orphan inode deleted [ 319.469953][T16167] netlink: 'syz.3.4254': attribute type 1 has an invalid length. [ 319.477856][T16167] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4254'. [ 319.498604][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4255'. [ 319.501615][T16152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.567427][T16174] 9pnet_fd: Insufficient options for proto=fd [ 319.666539][T16178] loop4: detected capacity change from 0 to 1024 [ 319.675474][T16178] EXT4-fs: Ignoring removed nobh option [ 319.681156][T16178] EXT4-fs: Ignoring removed bh option [ 319.805108][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.901085][T16178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.959234][T16188] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4257'. [ 319.967314][T16191] loop2: detected capacity change from 0 to 512 [ 319.979378][T16191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.992146][T16191] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.006598][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4260'. [ 320.025057][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.065688][T16199] random: crng reseeded on system resumption [ 320.135750][ T3387] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 320.143300][ T3387] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 320.150745][ T3387] hid-generic 0003:0004:0000.0057: unknown main item tag 0x0 [ 320.209192][ T3387] hid-generic 0003:0004:0000.0057: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 320.298281][T16212] lo speed is unknown, defaulting to 1000 [ 320.326001][T16213] lo speed is unknown, defaulting to 1000 [ 320.359002][T16210] loop5: detected capacity change from 0 to 1024 [ 320.421808][T16210] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 320.487760][T16210] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 320.509021][T16210] EXT4-fs (loop5): orphan cleanup on readonly fs [ 320.570933][T16215] loop3: detected capacity change from 0 to 1024 [ 320.605249][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.638243][T16215] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 320.666555][T16210] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4267: bg 0: block 10: padding at end of block bitmap is not set [ 320.695618][T16221] lo speed is unknown, defaulting to 1000 [ 320.725905][T16215] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 320.745611][T16210] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4267: Failed to acquire dquot type 0 [ 320.771525][T16210] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4267: Failed to acquire dquot type 0 [ 320.790722][T16210] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4267: Freeing blocks not in datazone - block = 0, count = 4096 [ 320.815838][T16210] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4267: Failed to acquire dquot type 0 [ 320.865714][T16215] EXT4-fs (loop3): orphan cleanup on readonly fs [ 320.869688][T16210] EXT4-fs (loop5): 1 orphan inode deleted [ 320.891069][T16230] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 320.941941][T16215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4269: bg 0: block 10: padding at end of block bitmap is not set [ 320.957799][T16210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.000229][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.013440][T16215] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4269: Failed to acquire dquot type 0 [ 321.053980][T16215] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4269: Failed to acquire dquot type 0 [ 321.139427][T16215] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4269: Freeing blocks not in datazone - block = 0, count = 4096 [ 321.202250][T16215] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4269: Failed to acquire dquot type 0 [ 321.264329][T16215] EXT4-fs (loop3): 1 orphan inode deleted [ 321.277303][T16246] 9pnet_fd: Insufficient options for proto=fd [ 321.287703][T16246] loop4: detected capacity change from 0 to 256 [ 321.294875][T16246] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.359005][T16246] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.482759][T16250] lo speed is unknown, defaulting to 1000 [ 321.653996][T16215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 321.712935][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.765209][T16262] loop5: detected capacity change from 0 to 1024 [ 321.784225][T16262] EXT4-fs: Ignoring removed nobh option [ 321.789979][T16262] EXT4-fs: Ignoring removed bh option [ 321.846953][T16266] lo speed is unknown, defaulting to 1000 [ 321.945481][T16262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.144667][T16277] lo speed is unknown, defaulting to 1000 [ 322.180731][T16283] loop2: detected capacity change from 0 to 1024 [ 322.225763][T16283] EXT4-fs: Ignoring removed nobh option [ 322.235514][T16287] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 322.264325][T16283] EXT4-fs: Ignoring removed bh option [ 322.293611][T16283] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 322.358757][T16283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.406120][T16289] loop4: detected capacity change from 0 to 2048 [ 322.509268][T16301] netlink: 'syz.3.4295': attribute type 1 has an invalid length. [ 322.597740][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.619870][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.675475][ T3419] hid-generic 0003:0004:0000.0058: unknown main item tag 0x0 [ 322.682974][ T3419] hid-generic 0003:0004:0000.0058: unknown main item tag 0x0 [ 322.690406][ T3419] hid-generic 0003:0004:0000.0058: unknown main item tag 0x0 [ 322.707294][T16315] FAULT_INJECTION: forcing a failure. [ 322.707294][T16315] name failslab, interval 1, probability 0, space 0, times 0 [ 322.720035][T16315] CPU: 0 UID: 0 PID: 16315 Comm: syz.5.4299 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 322.720064][T16315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.720075][T16315] Call Trace: [ 322.720081][T16315] [ 322.720147][T16315] __dump_stack+0x1d/0x30 [ 322.720168][T16315] dump_stack_lvl+0xe8/0x140 [ 322.720186][T16315] dump_stack+0x15/0x1b [ 322.720201][T16315] should_fail_ex+0x265/0x280 [ 322.720283][T16315] ? alloc_netdev_mqs+0x829/0xab0 [ 322.720310][T16315] should_failslab+0x8c/0xb0 [ 322.720352][T16315] __kmalloc_cache_noprof+0x4c/0x320 [ 322.720377][T16315] alloc_netdev_mqs+0x829/0xab0 [ 322.720405][T16315] rtnl_create_link+0x239/0x710 [ 322.720455][T16315] rtnl_newlink_create+0x14c/0x620 [ 322.720476][T16315] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 322.720535][T16315] rtnl_newlink+0xf29/0x12d0 [ 322.720559][T16315] ? xas_load+0x413/0x430 [ 322.720584][T16315] ? __rcu_read_unlock+0x4f/0x70 [ 322.720604][T16315] ? xa_load+0xb1/0xe0 [ 322.720647][T16315] ? __rcu_read_unlock+0x4f/0x70 [ 322.720666][T16315] ? avc_has_perm_noaudit+0x1b1/0x200 [ 322.720691][T16315] ? selinux_capable+0x1f9/0x270 [ 322.720793][T16315] ? security_capable+0x83/0x90 [ 322.720815][T16315] ? ns_capable+0x7d/0xb0 [ 322.720832][T16315] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.720850][T16315] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 322.720869][T16315] ? avc_has_perm_noaudit+0x1b1/0x200 [ 322.720936][T16315] netlink_rcv_skb+0x123/0x220 [ 322.720963][T16315] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.720986][T16315] rtnetlink_rcv+0x1c/0x30 [ 322.721002][T16315] netlink_unicast+0x5a1/0x670 [ 322.721053][T16315] netlink_sendmsg+0x58b/0x6b0 [ 322.721086][T16315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.721192][T16315] __sock_sendmsg+0x145/0x180 [ 322.721217][T16315] ____sys_sendmsg+0x31e/0x4e0 [ 322.721247][T16315] ___sys_sendmsg+0x17b/0x1d0 [ 322.721284][T16315] __x64_sys_sendmsg+0xd4/0x160 [ 322.721350][T16315] x64_sys_call+0x2999/0x2fb0 [ 322.721369][T16315] do_syscall_64+0xd2/0x200 [ 322.721395][T16315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.721498][T16315] ? clear_bhb_loop+0x40/0x90 [ 322.721517][T16315] ? clear_bhb_loop+0x40/0x90 [ 322.721536][T16315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.721555][T16315] RIP: 0033:0x7f9484e9e929 [ 322.721676][T16315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.721692][T16315] RSP: 002b:00007f9483507038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.721711][T16315] RAX: ffffffffffffffda RBX: 00007f94850c5fa0 RCX: 00007f9484e9e929 [ 322.721722][T16315] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 322.721734][T16315] RBP: 00007f9483507090 R08: 0000000000000000 R09: 0000000000000000 [ 322.721744][T16315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.721755][T16315] R13: 0000000000000000 R14: 00007f94850c5fa0 R15: 00007ffd22c300e8 [ 322.721772][T16315] [ 322.721957][ T3419] hid-generic 0003:0004:0000.0058: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 323.116041][T16337] __nla_validate_parse: 4 callbacks suppressed [ 323.116061][T16337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4308'. [ 323.182528][T16338] lo speed is unknown, defaulting to 1000 [ 323.304989][T16354] Cannot find del_set index 4 as target [ 323.331591][T16347] loop4: detected capacity change from 0 to 256 [ 323.338724][T16347] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.353749][T16347] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.394242][ T3387] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 323.401847][ T3387] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 323.409385][ T3387] hid-generic 0003:0004:0000.0059: unknown main item tag 0x0 [ 323.419627][T16360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4315'. [ 323.440488][ T3387] hid-generic 0003:0004:0000.0059: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 323.506876][T16369] loop5: detected capacity change from 0 to 512 [ 323.518478][T16371] netlink: 'syz.2.4320': attribute type 1 has an invalid length. [ 323.526392][T16371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4320'. [ 323.538477][T16369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.559329][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4321'. [ 323.568761][T16369] EXT4-fs (loop5): orphan cleanup on readonly fs [ 323.579848][T16369] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4319: Failed to acquire dquot type 1 [ 323.591799][T16369] EXT4-fs (loop5): 1 truncate cleaned up [ 323.598031][T16380] loop3: detected capacity change from 0 to 1024 [ 323.604955][T16369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.618408][T16380] EXT4-fs: Ignoring removed nobh option [ 323.624011][T16380] EXT4-fs: Ignoring removed bh option [ 323.634434][T16380] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 323.652720][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.675013][T16380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.700763][T16388] loop5: detected capacity change from 0 to 1024 [ 323.709390][T16388] EXT4-fs: Ignoring removed nobh option [ 323.715375][T16388] EXT4-fs: Ignoring removed bh option [ 323.722201][T16388] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 323.738981][T16388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.855529][T16388] veth22: entered promiscuous mode [ 323.860810][T16388] veth23: entered promiscuous mode [ 323.866026][T16388] veth24: entered promiscuous mode [ 323.871318][T16388] veth25: entered promiscuous mode [ 323.908882][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.919902][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.961722][T16403] loop3: detected capacity change from 0 to 1024 [ 323.987979][T16403] EXT4-fs: Ignoring removed nobh option [ 323.995198][T16403] EXT4-fs: Ignoring removed bh option [ 324.005528][T16403] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 324.016015][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 324.016031][ T29] audit: type=1400 audit(1751859933.347:10754): avc: denied { unmount } for pid=11645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 324.092270][ T29] audit: type=1326 audit(1751859933.417:10755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 324.116073][ T29] audit: type=1326 audit(1751859933.417:10756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 324.140031][ T29] audit: type=1326 audit(1751859933.417:10757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 324.163788][ T29] audit: type=1326 audit(1751859933.417:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 324.187632][ T29] audit: type=1326 audit(1751859933.417:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.4332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 324.239812][T16403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.246347][T16414] lo speed is unknown, defaulting to 1000 [ 324.343011][T16429] loop4: detected capacity change from 0 to 1024 [ 324.351085][T16429] EXT4-fs: Ignoring removed nobh option [ 324.357030][T16429] EXT4-fs: Ignoring removed bh option [ 324.362822][ T29] audit: type=1326 audit(1751859933.697:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.1.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04878e929 code=0x7ffc0000 [ 324.363120][T16432] veth6: entered promiscuous mode [ 324.386609][ T29] audit: type=1326 audit(1751859933.697:10761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.1.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04878e929 code=0x7ffc0000 [ 324.391761][T16432] veth7: entered promiscuous mode [ 324.421678][T16429] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 324.455313][ T29] audit: type=1326 audit(1751859933.787:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.1.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd04878e929 code=0x7ffc0000 [ 324.479056][ T29] audit: type=1326 audit(1751859933.787:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.1.4338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04878e929 code=0x7ffc0000 [ 324.565903][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.608863][T16429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.788559][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.802391][T16441] loop5: detected capacity change from 0 to 8192 [ 324.809511][T16441] vfat: Unknown parameter '00000000000000000000007˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 324.996249][T16457] lo speed is unknown, defaulting to 1000 [ 325.576487][T16468] loop3: detected capacity change from 0 to 256 [ 325.583540][T16468] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 325.604616][T16468] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.632201][T16466] loop2: detected capacity change from 0 to 256 [ 325.639349][T16466] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 325.653231][T16466] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.915570][T16472] lo speed is unknown, defaulting to 1000 [ 325.959889][T16478] netlink: 'syz.2.4355': attribute type 1 has an invalid length. [ 325.967800][T16478] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4355'. [ 326.031714][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4356'. [ 326.033443][T16485] lo speed is unknown, defaulting to 1000 [ 326.053169][T16487] loop3: detected capacity change from 0 to 1024 [ 326.062073][T16487] EXT4-fs: Ignoring removed nobh option [ 326.071894][T16487] EXT4-fs: Ignoring removed bh option [ 326.072686][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4356'. [ 326.097702][T16487] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 326.163779][T16487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.193016][T16501] lo speed is unknown, defaulting to 1000 [ 326.446592][T16514] loop4: detected capacity change from 0 to 1024 [ 326.455987][T16514] EXT4-fs: Ignoring removed nobh option [ 326.461656][T16514] EXT4-fs: Ignoring removed bh option [ 326.494057][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.505983][T16514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.531002][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4364'. [ 327.039018][T16513] 9pnet_fd: Insufficient options for proto=fd [ 327.046871][T16513] loop5: detected capacity change from 0 to 256 [ 327.054279][T16513] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.076170][T16513] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.439628][T16534] lo speed is unknown, defaulting to 1000 [ 327.446143][T16531] lo speed is unknown, defaulting to 1000 [ 327.567770][T16546] loop5: detected capacity change from 0 to 1024 [ 327.577529][T16546] EXT4-fs: Ignoring removed nobh option [ 327.583171][T16546] EXT4-fs: Ignoring removed bh option [ 327.596474][T16548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4375'. [ 327.612688][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 327.631287][T16546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.805111][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.040629][T16576] 9pnet_fd: Insufficient options for proto=fd [ 328.449248][T16583] loop3: detected capacity change from 0 to 256 [ 328.456772][T16583] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.470451][T16583] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.817355][T16591] Cannot find del_set index 4 as target [ 328.823704][T16592] lo speed is unknown, defaulting to 1000 [ 328.897884][T16600] lo speed is unknown, defaulting to 1000 [ 328.918600][T16602] __nla_validate_parse: 4 callbacks suppressed [ 328.918615][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4392'. [ 328.941480][T16596] loop4: detected capacity change from 0 to 1024 [ 328.961888][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4392'. [ 328.973917][T16596] EXT4-fs: Ignoring removed nobh option [ 328.986640][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.989441][T16596] EXT4-fs: Ignoring removed bh option [ 329.014901][T16596] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 329.092931][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 329.092955][ T29] audit: type=1326 audit(1751859938.397:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.123295][ T29] audit: type=1326 audit(1751859938.397:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.147908][ T29] audit: type=1326 audit(1751859938.397:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.171899][ T29] audit: type=1326 audit(1751859938.397:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.195671][ T29] audit: type=1326 audit(1751859938.397:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.219525][ T29] audit: type=1326 audit(1751859938.397:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.243596][ T29] audit: type=1326 audit(1751859938.397:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.267320][ T29] audit: type=1326 audit(1751859938.397:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.291334][ T29] audit: type=1326 audit(1751859938.397:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.315066][ T29] audit: type=1326 audit(1751859938.397:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16609 comm="syz.3.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 329.387054][T16596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.434424][T16614] loop2: detected capacity change from 0 to 256 [ 329.441626][T16614] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.454273][T16614] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.499850][T16621] veth2: entered promiscuous mode [ 329.505505][T16621] veth3: entered promiscuous mode [ 329.563302][T16624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4398'. [ 329.574951][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.759044][T16639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4402'. [ 329.957141][T16655] Cannot find del_set index 4 as target [ 329.958807][T16654] lo speed is unknown, defaulting to 1000 [ 329.997661][T16658] loop5: detected capacity change from 0 to 1024 [ 329.998522][T16659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4411'. [ 330.004710][T16658] EXT4-fs: Ignoring removed nobh option [ 330.018888][T16658] EXT4-fs: Ignoring removed bh option [ 330.045169][T16662] loop2: detected capacity change from 0 to 1024 [ 330.072639][T16662] EXT4-fs: Ignoring removed nobh option [ 330.078322][T16662] EXT4-fs: Ignoring removed bh option [ 330.355896][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4416'. [ 330.740021][T16695] loop3: detected capacity change from 0 to 256 [ 330.747384][T16695] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.778071][T16695] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.468730][T16706] Cannot find del_set index 4 as target [ 331.575197][T16710] loop5: detected capacity change from 0 to 1024 [ 331.594386][T16710] EXT4-fs: Ignoring removed nobh option [ 331.600163][T16710] EXT4-fs: Ignoring removed bh option [ 331.629163][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4426'. [ 331.757783][T16728] loop4: detected capacity change from 0 to 256 [ 331.764838][T16728] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.847359][T16728] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.018393][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4428'. [ 332.062399][T16730] loop2: detected capacity change from 0 to 1024 [ 332.069229][T16730] EXT4-fs: Ignoring removed orlov option [ 332.101294][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4428'. [ 332.371435][ T3419] hid-generic 0003:0004:0000.005A: unknown main item tag 0x0 [ 332.379120][ T3419] hid-generic 0003:0004:0000.005A: unknown main item tag 0x0 [ 332.386643][ T3419] hid-generic 0003:0004:0000.005A: unknown main item tag 0x0 [ 332.403233][ T3419] hid-generic 0003:0004:0000.005A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 332.448357][T16750] Cannot find del_set index 4 as target [ 332.529648][T16760] lo speed is unknown, defaulting to 1000 [ 332.690852][T16774] loop4: detected capacity change from 0 to 1024 [ 332.705552][T16774] EXT4-fs: Ignoring removed nobh option [ 332.711310][T16774] EXT4-fs: Ignoring removed bh option [ 332.752489][T16770] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.4441: Allocating blocks 497-513 which overlap fs metadata [ 332.754757][T16762] loop2: detected capacity change from 0 to 1024 [ 332.788771][T16762] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.850668][T16762] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 332.882886][T16762] EXT4-fs (loop2): orphan cleanup on readonly fs [ 332.944096][T16762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4439: bg 0: block 10: padding at end of block bitmap is not set [ 332.980142][T16762] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4439: Failed to acquire dquot type 0 [ 332.995114][T16769] EXT4-fs (loop4): pa ffff888100490ee0: logic 0, phys. 113, len 25 [ 333.003256][T16769] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 23, pa_free 24 [ 333.017329][T16786] loop5: detected capacity change from 0 to 1024 [ 333.024432][T16786] EXT4-fs: Ignoring removed nobh option [ 333.025226][T16762] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4439: Failed to acquire dquot type 0 [ 333.030226][T16786] EXT4-fs: Ignoring removed bh option [ 333.080151][T16762] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.4439: Freeing blocks not in datazone - block = 0, count = 4096 [ 333.124883][T16762] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4439: Failed to acquire dquot type 0 [ 333.158667][T16762] EXT4-fs (loop2): 1 orphan inode deleted [ 333.263109][T16796] loop4: detected capacity change from 0 to 1024 [ 333.317682][T16796] EXT4-fs: Ignoring removed nobh option [ 333.324895][T16796] EXT4-fs: Ignoring removed bh option [ 333.340785][T16796] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 333.362252][T16801] lo speed is unknown, defaulting to 1000 [ 333.640771][T16813] 9pnet_fd: Insufficient options for proto=fd [ 334.126579][T16785] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.4445: Allocating blocks 497-513 which overlap fs metadata [ 334.155712][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 334.155729][ T29] audit: type=1326 audit(1751859943.487:11473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16784 comm="syz.5.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 334.215535][ T29] audit: type=1400 audit(1751859943.547:11474): avc: denied { create } for pid=16819 comm="syz.4.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.235306][ T29] audit: type=1400 audit(1751859943.547:11475): avc: denied { setopt } for pid=16819 comm="syz.4.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.281386][ T29] audit: type=1400 audit(1751859943.547:11476): avc: denied { create } for pid=16819 comm="syz.4.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 334.301298][ T29] audit: type=1400 audit(1751859943.597:11477): avc: denied { write } for pid=16819 comm="syz.4.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.321114][ T29] audit: type=1326 audit(1751859943.617:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16818 comm="syz.3.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 334.344933][ T29] audit: type=1326 audit(1751859943.617:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16818 comm="syz.3.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 334.368869][ T29] audit: type=1326 audit(1751859943.617:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16818 comm="syz.3.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 334.392976][ T29] audit: type=1326 audit(1751859943.617:11481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16818 comm="syz.3.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 334.416652][ T29] audit: type=1326 audit(1751859943.617:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16818 comm="syz.3.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 334.493169][T16824] Cannot find del_set index 4 as target [ 334.524122][T16785] EXT4-fs (loop5): pa ffff888100490ee0: logic 640, phys. 465, len 3 [ 334.532326][T16785] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 334.551178][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4462'. [ 334.588299][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4462'. [ 334.614494][T16832] lo speed is unknown, defaulting to 1000 [ 334.860989][T16858] loop3: detected capacity change from 0 to 256 [ 334.868351][T16858] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 334.881596][T16858] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.231719][T16869] lo speed is unknown, defaulting to 1000 [ 335.283429][T16871] loop5: detected capacity change from 0 to 1024 [ 335.306173][T16871] EXT4-fs: Ignoring removed nobh option [ 335.311857][T16871] EXT4-fs: Ignoring removed bh option [ 335.540447][T16866] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.4472: Allocating blocks 497-513 which overlap fs metadata [ 335.555856][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4476'. [ 335.632247][T16894] loop2: detected capacity change from 0 to 512 [ 335.681150][T16894] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.709601][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4480'. [ 335.735966][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4480'. [ 335.740954][T16866] EXT4-fs (loop5): pa ffff88810766de00: logic 0, phys. 113, len 25 [ 335.753442][T16866] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 22, pa_free 23 [ 335.767405][ T3448] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 336.109191][T16907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4482'. [ 336.352810][T16912] loop5: detected capacity change from 0 to 256 [ 336.360220][T16912] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.373581][T16912] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.664667][T16920] loop3: detected capacity change from 0 to 1024 [ 336.709003][T16920] EXT4-fs: Ignoring removed nobh option [ 336.737562][T16920] EXT4-fs: Ignoring removed bh option [ 336.757274][T16920] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 336.827564][T16915] loop4: detected capacity change from 0 to 1024 [ 336.924301][T16915] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 336.946231][T16928] lo speed is unknown, defaulting to 1000 [ 336.960604][T16915] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 336.982270][T16915] EXT4-fs (loop4): orphan cleanup on readonly fs [ 337.381810][T16920] veth8: entered promiscuous mode [ 337.387131][T16920] veth9: entered promiscuous mode [ 337.392440][T16920] veth10: entered promiscuous mode [ 337.397678][T16920] veth11: entered promiscuous mode [ 337.487420][T16915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4483: bg 0: block 10: padding at end of block bitmap is not set [ 337.528831][T16915] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4483: Failed to acquire dquot type 0 [ 337.549964][T16915] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4483: Failed to acquire dquot type 0 [ 337.589171][T16915] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4483: Freeing blocks not in datazone - block = 0, count = 4096 [ 337.710541][T16915] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4483: Failed to acquire dquot type 0 [ 337.730334][T16953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4497'. [ 337.752536][T16915] EXT4-fs (loop4): 1 orphan inode deleted [ 337.962100][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'. [ 337.971730][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4503'. [ 338.230873][T16975] 9pnet_fd: Insufficient options for proto=fd [ 338.244442][T16975] loop5: detected capacity change from 0 to 256 [ 338.252093][T16975] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.497021][T16977] loop3: detected capacity change from 0 to 256 [ 338.503984][T16977] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.538208][T16974] veth6: entered promiscuous mode [ 338.543342][T16974] veth7: entered promiscuous mode [ 338.548502][T16974] veth8: entered promiscuous mode [ 338.553579][T16974] veth9: entered promiscuous mode [ 338.628089][T16975] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.830330][T16977] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.108410][T16995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4511'. [ 339.202530][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 339.202547][ T29] audit: type=1326 audit(1751859948.537:11681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.237915][ T29] audit: type=1326 audit(1751859948.567:11682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.262453][ T29] audit: type=1326 audit(1751859948.567:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.286220][ T29] audit: type=1326 audit(1751859948.567:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.309982][ T29] audit: type=1326 audit(1751859948.567:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.333684][ T29] audit: type=1326 audit(1751859948.567:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.357500][ T29] audit: type=1326 audit(1751859948.567:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.381332][ T29] audit: type=1326 audit(1751859948.567:11688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.405215][ T29] audit: type=1326 audit(1751859948.567:11689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 339.428845][ T29] audit: type=1326 audit(1751859948.567:11690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.3.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8201b6e929 code=0x7ffc0000 [ 340.053699][T17043] loop2: detected capacity change from 0 to 256 [ 340.060631][T17043] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 340.073453][T17043] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.143029][T17036] loop3: detected capacity change from 0 to 8192 [ 340.263666][T17045] lo speed is unknown, defaulting to 1000 [ 340.435481][T17047] __nla_validate_parse: 2 callbacks suppressed [ 340.435500][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4530'. [ 340.467612][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4530'. [ 340.630784][T17068] loop2: detected capacity change from 0 to 1024 [ 340.650850][T17068] EXT4-fs: Ignoring removed nobh option [ 340.656560][T17068] EXT4-fs: Ignoring removed bh option [ 340.694815][T17068] EXT4-fs mount: 24 callbacks suppressed [ 340.694836][T17068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.049189][T17091] lo speed is unknown, defaulting to 1000 [ 341.114787][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4545'. [ 341.131598][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4545'. [ 341.214294][T17061] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.4536: Allocating blocks 497-513 which overlap fs metadata [ 341.267826][T17101] lo speed is unknown, defaulting to 1000 [ 341.291424][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4551'. [ 341.342170][T17109] loop5: detected capacity change from 0 to 1024 [ 341.352805][T17109] EXT4-fs: Ignoring removed nobh option [ 341.359745][T17109] EXT4-fs: Ignoring removed bh option [ 341.366023][T17109] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 341.390494][T17115] siw: device registration error -23 [ 341.419449][T17109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.438549][T17118] loop4: detected capacity change from 0 to 8192 [ 341.523923][T17127] veth26: entered promiscuous mode [ 341.529270][T17127] veth27: entered promiscuous mode [ 341.589493][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.611037][T17068] EXT4-fs (loop2): pa ffff88810766dd20: logic 576, phys. 433, len 5 [ 341.619168][T17068] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 341.658924][T17132] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 341.707432][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.733704][T17134] loop4: detected capacity change from 0 to 8192 [ 341.764209][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4560'. [ 341.774826][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4560'. [ 341.821794][T17138] loop5: detected capacity change from 0 to 2048 [ 341.862676][T17151] lo speed is unknown, defaulting to 1000 [ 341.894570][T17150] siw: device registration error -23 [ 341.932985][T17158] loop4: detected capacity change from 0 to 512 [ 341.950916][T17158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.964052][T17158] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.106273][T17164] netlink: 'syz.4.4567': attribute type 13 has an invalid length. [ 342.424082][T17179] loop2: detected capacity change from 0 to 8192 [ 342.431051][T17179] vfat: Unknown parameter '00000000000000000000007˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 342.698161][T17181] loop3: detected capacity change from 0 to 8192 [ 342.810546][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.843391][T17193] netlink: 'syz.4.4579': attribute type 1 has an invalid length. [ 342.851274][T17193] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4579'. [ 343.216829][T17213] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 343.405406][T17218] loop5: detected capacity change from 0 to 1024 [ 343.456036][T17218] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 343.534259][T17218] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 343.547817][T17218] EXT4-fs (loop5): orphan cleanup on readonly fs [ 343.576296][T17218] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4587: bg 0: block 10: padding at end of block bitmap is not set [ 343.597155][T17218] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4587: Failed to acquire dquot type 0 [ 343.615416][T17218] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4587: Failed to acquire dquot type 0 [ 343.631243][T17218] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4587: Freeing blocks not in datazone - block = 0, count = 4096 [ 343.651247][T17218] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4587: Failed to acquire dquot type 0 [ 343.667721][T17218] EXT4-fs (loop5): 1 orphan inode deleted [ 343.700090][T17218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.775540][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.805555][T17228] loop5: detected capacity change from 0 to 512 [ 343.862328][T17228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.875450][T17228] ext4 filesystem being mounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.000875][T17228] netlink: 'syz.5.4590': attribute type 13 has an invalid length. [ 344.067328][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'. [ 344.112764][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4597'. [ 344.207190][T17256] lo speed is unknown, defaulting to 1000 [ 344.368664][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 344.368687][ T29] audit: type=1326 audit(1751859953.707:11791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.399030][ T29] audit: type=1326 audit(1751859953.707:11792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.422746][ T29] audit: type=1326 audit(1751859953.707:11793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.427792][T17268] loop2: detected capacity change from 0 to 1024 [ 344.446375][ T29] audit: type=1326 audit(1751859953.707:11794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.476426][ T29] audit: type=1326 audit(1751859953.707:11795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.500265][ T29] audit: type=1326 audit(1751859953.707:11796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.523943][ T29] audit: type=1326 audit(1751859953.707:11797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.531016][T17268] EXT4-fs: Ignoring removed nobh option [ 344.547584][ T29] audit: type=1326 audit(1751859953.707:11798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.553183][T17268] EXT4-fs: Ignoring removed bh option [ 344.576777][ T29] audit: type=1326 audit(1751859953.707:11799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.605775][ T29] audit: type=1326 audit(1751859953.707:11800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.2.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 344.657390][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.678389][T17268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.738931][T17274] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 344.779250][T17272] lo speed is unknown, defaulting to 1000 [ 344.864300][T17279] loop3: detected capacity change from 0 to 2048 [ 345.129897][T17266] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.4605: Allocating blocks 497-513 which overlap fs metadata [ 345.196271][T17299] netlink: 'syz.4.4615': attribute type 1 has an invalid length. [ 345.262021][T17300] loop5: detected capacity change from 0 to 256 [ 345.269450][T17300] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.288743][T17300] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.394707][T17268] EXT4-fs (loop2): pa ffff888100490cb0: logic 496, phys. 241, len 17 [ 345.402891][T17268] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 345.505518][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.783574][T17316] __nla_validate_parse: 9 callbacks suppressed [ 345.783590][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'. [ 345.971295][T17325] siw: device registration error -23 [ 346.083408][T17338] loop2: detected capacity change from 0 to 1024 [ 346.093046][T17338] EXT4-fs: Ignoring removed nobh option [ 346.100219][T17338] EXT4-fs: Ignoring removed bh option [ 346.106432][T17338] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 346.130968][T17338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.240476][T17345] veth2: entered promiscuous mode [ 346.245807][T17345] veth3: entered promiscuous mode [ 346.251037][T17345] veth4: entered promiscuous mode [ 346.256192][T17345] veth5: entered promiscuous mode [ 346.261342][T17345] veth6: entered promiscuous mode [ 346.266487][T17345] veth7: entered promiscuous mode [ 346.271614][T17345] veth8: entered promiscuous mode [ 346.276775][T17345] veth9: entered promiscuous mode [ 346.282010][T17345] veth10: entered promiscuous mode [ 346.287411][T17345] veth11: entered promiscuous mode [ 346.315117][T17343] loop4: detected capacity change from 0 to 1024 [ 346.343965][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.353987][T17343] EXT4-fs: Ignoring removed nobh option [ 346.359699][T17343] EXT4-fs: Ignoring removed bh option [ 346.375255][T17348] lo speed is unknown, defaulting to 1000 [ 346.386585][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4631'. [ 346.390995][T17343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.413282][T17350] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 346.421177][T17350] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4631'. [ 346.760960][T17361] lo speed is unknown, defaulting to 1000 [ 347.111770][T17366] loop5: detected capacity change from 0 to 256 [ 347.118760][T17366] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.207864][T17366] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 347.500433][T17372] siw: device registration error -23 [ 347.577386][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.723092][T17394] siw: device registration error -23 [ 347.730364][T17400] netlink: 'syz.5.4647': attribute type 1 has an invalid length. [ 347.738303][T17400] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4647'. [ 347.804507][T17408] lo speed is unknown, defaulting to 1000 [ 347.870537][T17407] lo speed is unknown, defaulting to 1000 [ 347.929139][T17419] siw: device registration error -23 [ 347.951201][T17420] loop2: detected capacity change from 0 to 256 [ 347.958504][T17420] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.988783][T17420] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 348.436810][T17425] loop3: detected capacity change from 0 to 1024 [ 348.438530][T17431] lo speed is unknown, defaulting to 1000 [ 348.457878][T17425] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 348.468997][T17429] loop4: detected capacity change from 0 to 8192 [ 348.505331][T17425] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 348.513522][T17435] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 348.516953][T17425] EXT4-fs (loop3): orphan cleanup on readonly fs [ 348.553935][T17425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4654: bg 0: block 10: padding at end of block bitmap is not set [ 348.585728][T17425] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4654: Failed to acquire dquot type 0 [ 348.605549][T17425] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4654: Failed to acquire dquot type 0 [ 348.638492][T17425] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4654: Freeing blocks not in datazone - block = 0, count = 4096 [ 348.673686][T17438] loop4: detected capacity change from 0 to 2048 [ 348.702523][T17442] siw: device registration error -23 [ 348.714289][T17425] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4654: Failed to acquire dquot type 0 [ 348.736162][T17425] EXT4-fs (loop3): 1 orphan inode deleted [ 348.775096][T17425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.841906][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.909233][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'. [ 348.930758][T17459] lo speed is unknown, defaulting to 1000 [ 349.508368][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 349.508388][ T29] audit: type=1326 audit(1751859958.837:11980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.5.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 349.539117][ T29] audit: type=1326 audit(1751859958.837:11981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.5.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 349.565640][ T29] audit: type=1326 audit(1751859958.837:11982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.5.4671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9484e9e929 code=0x7ffc0000 [ 349.631917][T17475] loop4: detected capacity change from 0 to 1024 [ 349.670206][T17478] loop5: detected capacity change from 0 to 1024 [ 349.670925][T17475] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.677340][T17478] EXT4-fs: Ignoring removed nobh option [ 349.693711][T17478] EXT4-fs: Ignoring removed bh option [ 349.700182][T17478] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 349.715245][T17475] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 349.750574][T17486] siw: device registration error -23 [ 349.757624][T17478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.776027][T17475] EXT4-fs (loop4): orphan cleanup on readonly fs [ 349.918741][T17475] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4673: bg 0: block 10: padding at end of block bitmap is not set [ 349.958063][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4677'. [ 349.967377][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4677'. [ 349.993628][ T29] audit: type=1326 audit(1751859959.327:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.2.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 349.997371][T17475] Quota error (device loop4): write_blk: dquota write failed [ 350.017335][ T29] audit: type=1326 audit(1751859959.327:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.2.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 350.017378][ T29] audit: type=1326 audit(1751859959.327:11985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.2.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 350.017488][ T29] audit: type=1326 audit(1751859959.327:11986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.2.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 350.017531][ T29] audit: type=1326 audit(1751859959.327:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.2.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 350.017586][ T29] audit: type=1326 audit(1751859959.327:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.2.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9833d0e929 code=0x7ffc0000 [ 350.029359][ T8196] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.078925][T17495] loop2: detected capacity change from 0 to 1024 [ 350.112111][T17475] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4673: Failed to acquire dquot type 0 [ 350.130213][T17495] EXT4-fs: Ignoring removed nobh option [ 350.179155][T17495] EXT4-fs: Ignoring removed bh option [ 350.200369][T17475] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4673: Failed to acquire dquot type 0 [ 350.221692][T17475] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.4673: Freeing blocks not in datazone - block = 0, count = 4096 [ 350.249785][T17475] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4673: Failed to acquire dquot type 0 [ 350.266759][T17475] EXT4-fs (loop4): 1 orphan inode deleted [ 350.293920][T17495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.386819][T17475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.533853][T17508] lo speed is unknown, defaulting to 1000 [ 350.552887][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.654480][T17521] loop4: detected capacity change from 0 to 1024 [ 350.669776][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4689'. [ 350.688618][T17521] EXT4-fs: Ignoring removed nobh option [ 350.694368][T17521] EXT4-fs: Ignoring removed bh option [ 350.714424][T17521] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 350.763163][T17521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.949927][T17539] veth4: entered promiscuous mode [ 350.955123][T17539] veth5: entered promiscuous mode [ 350.960328][T17539] veth6: entered promiscuous mode [ 350.965418][T17539] veth7: entered promiscuous mode [ 351.044620][T17542] Cannot find del_set index 4 as target [ 351.075682][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.114638][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 351.144848][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.149333][T17524] lo speed is unknown, defaulting to 1000 [ 351.288857][T17554] lo speed is unknown, defaulting to 1000 [ 351.372131][T17524] chnl_net:caif_netlink_parms(): no params data found [ 351.426492][T17565] loop2: detected capacity change from 0 to 256 [ 351.433616][T17565] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.448122][T17565] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.735089][T17524] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.742303][T17524] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.767216][T17564] loop4: detected capacity change from 0 to 8192 [ 351.773226][T17524] bridge_slave_0: entered allmulticast mode [ 351.819501][T17524] bridge_slave_0: entered promiscuous mode [ 351.829874][T17524] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.836992][T17524] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.844577][T17524] bridge_slave_1: entered allmulticast mode [ 351.851387][T17524] bridge_slave_1: entered promiscuous mode [ 351.872401][ T386] bridge_slave_1: left allmulticast mode [ 351.878359][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.893896][ T386] bridge_slave_0: left allmulticast mode [ 351.899786][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.915814][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4704'. [ 351.925317][T17573] loop4: detected capacity change from 0 to 8192 [ 351.970848][T17524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.983475][T17524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.092008][ T386] tipc: Left network mode [ 352.098483][T17524] team0: Port device team_slave_0 added [ 352.106298][T17524] team0: Port device team_slave_1 added [ 352.122321][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'. [ 352.141327][T17581] lo speed is unknown, defaulting to 1000 [ 352.157629][T17524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.165170][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.191242][T17524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.213253][ T386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.220987][ T386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.276380][T17587] loop2: detected capacity change from 0 to 8192 [ 352.283659][T17587] vfat: Unknown parameter '00000000000000000000007˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 352.316305][ T386] team0 (unregistering): Port device team_slave_1 removed [ 352.332139][ T386] team0 (unregistering): Port device team_slave_0 removed [ 352.343991][T17595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4713'. [ 352.362395][ T386] team0 (unregistering): Port device dummy0 removed [ 352.379037][T17598] siw: device registration error -23 [ 352.385224][T17524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.392234][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.418226][T17524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.465909][T17524] hsr_slave_0: entered promiscuous mode [ 352.472220][T17524] hsr_slave_1: entered promiscuous mode [ 352.503483][T17603] loop4: detected capacity change from 0 to 1024 [ 352.511987][T17603] EXT4-fs: Ignoring removed nobh option [ 352.523980][T17603] EXT4-fs: Ignoring removed bh option [ 352.534343][T17603] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 352.581553][T17603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.826067][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.826772][T17617] loop3: detected capacity change from 0 to 1024 [ 352.864811][T17624] loop2: detected capacity change from 0 to 512 [ 352.874603][T17617] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.906685][T17624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.929249][T17626] lo speed is unknown, defaulting to 1000 [ 352.935116][T17626] lo speed is unknown, defaulting to 1000 [ 352.944040][T17617] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 352.952294][T17624] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.963159][T17626] lo speed is unknown, defaulting to 1000 [ 352.965190][T17617] EXT4-fs (loop3): orphan cleanup on readonly fs [ 352.972234][T17626] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 352.992183][T17626] lo speed is unknown, defaulting to 1000 [ 353.007778][T17626] lo speed is unknown, defaulting to 1000 [ 353.014224][T17626] lo speed is unknown, defaulting to 1000 [ 353.022898][T17626] lo speed is unknown, defaulting to 1000 [ 353.032107][T17626] lo speed is unknown, defaulting to 1000 [ 353.041845][T17626] lo speed is unknown, defaulting to 1000 [ 353.054469][T17617] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4718: bg 0: block 10: padding at end of block bitmap is not set [ 353.078980][T17524] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.089637][T17617] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4718: Failed to acquire dquot type 0 [ 353.102454][T17636] netlink: 'syz.2.4721': attribute type 13 has an invalid length. [ 353.125940][T17626] lo speed is unknown, defaulting to 1000 [ 353.132362][T17524] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.146511][T17617] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4718: Failed to acquire dquot type 0 [ 353.161810][T17626] lo speed is unknown, defaulting to 1000 [ 353.168044][T17524] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.174971][T17617] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.4718: Freeing blocks not in datazone - block = 0, count = 4096 [ 353.192673][T17524] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.201089][T17617] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4718: Failed to acquire dquot type 0 [ 353.204438][T17626] lo speed is unknown, defaulting to 1000 [ 353.216985][T17617] EXT4-fs (loop3): 1 orphan inode deleted [ 353.221394][T17626] lo speed is unknown, defaulting to 1000 [ 353.233447][T17640] lo speed is unknown, defaulting to 1000 [ 353.295434][T17617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.303580][T17524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.323130][T17648] lo speed is unknown, defaulting to 1000 [ 353.351757][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.352532][T17524] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.376339][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.383531][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.403864][T17655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4728'. [ 353.425767][T12377] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.432906][T12377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.520266][T17524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.624375][T17678] Cannot find del_set index 4 as target [ 353.673104][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.688432][T17683] loop3: detected capacity change from 0 to 512 [ 353.709044][T17683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.722098][T17683] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.729838][T17524] veth0_vlan: entered promiscuous mode [ 353.743359][T17524] veth1_vlan: entered promiscuous mode [ 353.760865][T17524] veth0_macvtap: entered promiscuous mode [ 353.769339][T17524] veth1_macvtap: entered promiscuous mode [ 353.781429][T17524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.790964][T17524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.800267][T17524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.809590][T17524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.818685][T17524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.827712][T17524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.892893][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4735'. [ 353.952088][T17702] loop2: detected capacity change from 0 to 256 [ 353.959239][T17702] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.984409][T17702] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.036497][T17704] netlink: 'syz.3.4742': attribute type 13 has an invalid length. [ 354.266645][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4738'. [ 354.291548][T17709] lo speed is unknown, defaulting to 1000 [ 354.322129][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4738'. [ 354.395531][T17714] lo speed is unknown, defaulting to 1000 [ 354.405424][T17717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4739'. [ 354.472787][T17721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4740'. [ 354.482586][T17725] Cannot find del_set index 4 as target [ 354.486087][T17723] lo speed is unknown, defaulting to 1000 [ 354.511257][T11971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.674357][T17744] loop5: detected capacity change from 0 to 1024 [ 354.681323][T17744] EXT4-fs: Ignoring removed nobh option [ 354.687122][T17744] EXT4-fs: Ignoring removed bh option [ 354.693860][T17744] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 354.705685][T17746] lo speed is unknown, defaulting to 1000 [ 354.729597][T17744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.963168][T17758] loop4: detected capacity change from 0 to 256 [ 354.970167][T17758] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.117408][T17744] lo: entered promiscuous mode [ 355.123756][T17744] tunl0: entered promiscuous mode [ 355.130043][T17744] gre0: entered promiscuous mode [ 355.150234][T17758] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.167808][T17744] gretap0: entered promiscuous mode [ 355.174930][T17744] erspan0: entered promiscuous mode [ 355.181685][T17744] ip_vti0: entered promiscuous mode [ 355.188248][T17744] ip6_vti0: entered promiscuous mode [ 355.194708][T17744] sit0: entered promiscuous mode [ 355.201736][T17744] ip6tnl0: entered promiscuous mode [ 355.208491][T17744] ip6gre0: entered promiscuous mode [ 355.216690][T17744] syz_tun: entered promiscuous mode [ 355.223799][T17744] ip6gretap0: entered promiscuous mode [ 355.230590][T17744] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.237801][T17744] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.245084][T17744] bridge0: entered promiscuous mode [ 355.251783][T17744] vcan0: entered promiscuous mode [ 355.257556][T17744] bond0: entered promiscuous mode [ 355.262639][T17744] bond_slave_0: entered promiscuous mode [ 355.268610][T17744] bond_slave_1: entered promiscuous mode [ 355.275691][T17744] team0: entered promiscuous mode [ 355.280831][T17744] team_slave_0: entered promiscuous mode [ 355.286561][T17744] team_slave_1: entered promiscuous mode [ 355.293491][T17744] dummy0: entered promiscuous mode [ 355.299823][T17744] nlmon0: entered promiscuous mode [ 355.305993][T17744] caif0: entered promiscuous mode [ 355.311777][T17744] batadv0: entered promiscuous mode [ 355.318166][T17744] vxcan0: entered promiscuous mode [ 355.324073][T17744] vxcan1: entered promiscuous mode [ 355.329843][T17744] veth0: entered promiscuous mode [ 355.335824][T17744] veth1: entered promiscuous mode [ 355.342341][T17744] wg0: entered promiscuous mode [ 355.348601][T17744] wg1: entered promiscuous mode [ 355.350477][T17761] Cannot find del_set index 4 as target [ 355.361575][T17744] wg2: entered promiscuous mode [ 355.367636][T17744] veth0_to_bridge: entered promiscuous mode [ 355.375898][T17744] veth1_to_bridge: entered promiscuous mode [ 355.384030][T17744] veth0_to_bond: entered promiscuous mode [ 355.391743][T17744] veth1_to_bond: entered promiscuous mode [ 355.398972][T17744] veth0_to_team: entered promiscuous mode [ 355.406933][T17744] veth1_to_team: entered promiscuous mode [ 355.414547][T17744] veth0_to_batadv: entered promiscuous mode [ 355.421428][T17744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.428964][T17744] batadv_slave_0: entered promiscuous mode [ 355.435770][T17744] veth1_to_batadv: entered promiscuous mode [ 355.442967][T17744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.450582][T17744] batadv_slave_1: entered promiscuous mode [ 355.457528][T17744] xfrm0: entered promiscuous mode [ 355.463567][T17744] veth0_to_hsr: entered promiscuous mode [ 355.471396][T17744] veth1_to_hsr: entered promiscuous mode [ 355.478537][T17744] hsr0: entered promiscuous mode [ 355.484360][T17744] veth1_virt_wifi: entered promiscuous mode [ 355.492567][T17744] veth0_virt_wifi: entered promiscuous mode [ 355.503160][T17744] vlan0: entered promiscuous mode [ 355.508470][T17744] vlan1: entered promiscuous mode [ 355.514518][T17744] macvlan0: entered promiscuous mode [ 355.523408][T17744] macvlan1: entered promiscuous mode [ 355.529934][T17744] ipvlan0: entered promiscuous mode [ 355.535379][T17744] ipvlan1: entered promiscuous mode [ 355.542519][T17771] siw: device registration error -23 [ 355.548041][T17744] macvtap0: entered promiscuous mode [ 355.554287][T17744] macsec0: entered promiscuous mode [ 355.561036][T17772] loop2: detected capacity change from 0 to 1024 [ 355.567880][T17744] geneve0: entered promiscuous mode [ 355.568030][T17772] EXT4-fs: Ignoring removed nobh option [ 355.580783][T17772] EXT4-fs: Ignoring removed bh option [ 355.586541][T17744] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.595573][T17744] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.604571][T17744] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.613541][T17744] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.623377][T17772] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 355.634044][T17744] geneve1: entered promiscuous mode [ 355.638882][T17772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.653096][T17744] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 355.661594][T17744] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 355.669887][T17744] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 355.677985][T17744] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 355.752003][T17524] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.761934][T17775] veth12: entered promiscuous mode [ 355.767254][T17775] veth13: entered promiscuous mode [ 355.821912][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 355.821929][ T29] audit: type=1326 audit(1751859965.137:12115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 355.852138][ T29] audit: type=1326 audit(1751859965.137:12116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 355.852381][T17779] netlink: 'syz.3.4762': attribute type 1 has an invalid length. [ 355.875788][ T29] audit: type=1326 audit(1751859965.157:12117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 355.907296][ T29] audit: type=1326 audit(1751859965.157:12118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 355.930980][ T29] audit: type=1326 audit(1751859965.157:12119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 355.954903][ T29] audit: type=1326 audit(1751859965.157:12120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 355.978616][ T29] audit: type=1326 audit(1751859965.157:12121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 356.002267][ T29] audit: type=1326 audit(1751859965.157:12122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 356.026110][ T29] audit: type=1326 audit(1751859965.157:12123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 356.053222][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.098390][ T29] audit: type=1326 audit(1751859965.157:12124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.4.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f88116ee929 code=0x7ffc0000 [ 356.182014][T17794] __nla_validate_parse: 4 callbacks suppressed [ 356.182031][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4766'. [ 356.211384][T17799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4763'. [ 356.223828][T17797] lo speed is unknown, defaulting to 1000 [ 356.297818][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4768'. [ 356.398292][T17817] loop4: detected capacity change from 0 to 512 [ 356.482004][T17817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.496214][T17817] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.585493][T17829] loop2: detected capacity change from 0 to 256 [ 356.592859][T17829] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.605686][T17829] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.710454][T17831] netlink: 'syz.4.4772': attribute type 13 has an invalid length. [ 357.234080][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.450002][T17859] loop2: detected capacity change from 0 to 512 [ 357.493881][T17859] EXT4-fs (loop2): filesystem is read-only [ 357.599399][T17859] EXT4-fs (loop2): filesystem is read-only [ 357.605351][T17859] EXT4-fs (loop2): orphan cleanup on readonly fs [ 357.686034][T17859] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.4787: bad orphan inode 16 [ 357.781277][T17859] ext4_test_bit(bit=15, block=3) = 0 [ 357.790309][T17859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 357.822745][T12264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.188187][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4807'. [ 359.573969][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4814'. [ 360.183956][T17954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.201261][T17954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.218261][T17957] netlink: 'syz.4.4824': attribute type 1 has an invalid length. [ 360.226135][T17957] netlink: 'syz.4.4824': attribute type 2 has an invalid length. [ 360.294915][T17965] loop2: detected capacity change from 0 to 1764 [ 360.617144][T17973] lo speed is unknown, defaulting to 1000 [ 360.671072][ T38] team0: left allmulticast mode [ 360.683419][ T38] team_slave_0: left allmulticast mode [ 360.688983][ T38] team_slave_1: left allmulticast mode [ 360.694713][ T38] bridge0: port 3(team0) entered disabled state [ 360.726929][ T38] bridge_slave_1: left allmulticast mode [ 360.732898][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.756597][T17986] loop3: detected capacity change from 0 to 8192 [ 360.765722][ T38] bridge_slave_0: left allmulticast mode [ 360.771787][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.875476][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 360.875497][ T29] audit: type=1400 audit(1751859970.207:12163): avc: denied { name_connect } for pid=17984 comm="syz.3.4835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 360.929274][ T29] audit: type=1400 audit(1751859970.257:12164): avc: denied { ioctl } for pid=17990 comm="syz.4.4837" path="socket:[56546]" dev="sockfs" ino=56546 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 361.205603][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.215203][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.224522][ T38] bond0 (unregistering): Released all slaves [ 361.234632][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4839'. [ 361.243784][T17996] tipc: Started in network mode [ 361.248767][T17996] tipc: Node identity 00000000000000000000000000004001, cluster identity 4711 [ 361.257678][T17996] tipc: Enabling of bearer rejected, failed to enable media [ 361.266068][T17998] netlink: 'syz.4.4837': attribute type 1 has an invalid length. [ 361.273881][T17998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4837'. [ 361.285647][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4841'. [ 361.309062][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.317323][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.375497][ T38] team0 (unregistering): Port device team_slave_1 removed [ 361.386197][ T38] team0 (unregistering): Port device team_slave_0 removed [ 361.426471][T17973] chnl_net:caif_netlink_parms(): no params data found [ 361.466941][T18021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.475750][T18021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.488901][T17973] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.496041][T17973] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.505372][T17973] bridge_slave_0: entered allmulticast mode [ 361.513081][T17973] bridge_slave_0: entered promiscuous mode [ 361.522052][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.529202][T17973] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.536534][T17973] bridge_slave_1: entered allmulticast mode [ 361.544746][T17973] bridge_slave_1: entered promiscuous mode [ 361.563037][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.573596][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.597547][T17973] team0: Port device team_slave_0 added [ 361.600167][ T29] audit: type=1400 audit(1751859970.937:12165): avc: denied { read } for pid=18024 comm="syz.5.4850" path="socket:[56572]" dev="sockfs" ino=56572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 361.604335][T17973] team0: Port device team_slave_1 added [ 361.645651][T17973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.650913][T18026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.652694][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.687020][T17973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.687067][T18026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.698287][T17973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.712355][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.738369][T17973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.767996][T17973] hsr_slave_0: entered promiscuous mode [ 361.774326][T17973] hsr_slave_1: entered promiscuous mode [ 361.780468][T17973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.788104][T17973] Cannot create hsr debugfs directory [ 361.849409][T17973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.858525][T17973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.867319][T17973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 361.875942][T17973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.890813][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.898022][T17973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.905369][T17973] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.912466][T17973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.936343][T17973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.948026][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.955761][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.967838][T17973] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.977872][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.984979][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.995783][T12377] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.002904][T12377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.115610][T17973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.262952][T17973] veth0_vlan: entered promiscuous mode [ 362.271293][T17973] veth1_vlan: entered promiscuous mode [ 362.289919][T17973] veth0_macvtap: entered promiscuous mode [ 362.299908][T17973] veth1_macvtap: entered promiscuous mode [ 362.300233][ T29] audit: type=1400 audit(1751859971.637:12166): avc: denied { create } for pid=18072 comm="syz.5.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.312184][T17973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.351798][ T29] audit: type=1400 audit(1751859971.667:12167): avc: denied { bind } for pid=18072 comm="syz.5.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.371460][ T29] audit: type=1400 audit(1751859971.667:12168): avc: denied { connect } for pid=18072 comm="syz.5.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 362.706351][T18080] loop4: detected capacity change from 0 to 256 [ 362.733935][T17973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.745155][T17973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.754072][T17973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.762849][T17973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.771739][T17973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.772148][T18080] FAT-fs (loop4): IO charset macroman not found [ 362.820776][ T29] audit: type=1400 audit(1751859972.157:12169): avc: denied { ioctl } for pid=18077 comm="syz.5.4864" path="socket:[56179]" dev="sockfs" ino=56179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.949621][T18088] xt_hashlimit: size too large, truncated to 1048576 [ 363.220261][T18092] –: renamed from vxcan1 [ 363.241162][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.251352][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.263670][T18095] netlink: 'syz.1.4868': attribute type 10 has an invalid length. [ 363.271751][T18095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4868'. [ 363.282347][T18095] bridge0: port 3(dummy0) entered blocking state [ 363.288794][T18095] bridge0: port 3(dummy0) entered disabled state [ 363.295759][T18095] dummy0: entered allmulticast mode [ 363.463161][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.493552][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.763772][T18120] loop5: detected capacity change from 0 to 128 [ 363.919071][T18124] loop5: detected capacity change from 0 to 256 [ 363.935733][T18124] FAT-fs (loop5): codepage cp863 not found [ 365.414826][ T29] audit: type=1400 audit(1751859974.667:12170): avc: denied { bind } for pid=18152 comm="syz.5.4888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.435428][ T29] audit: type=1400 audit(1751859974.667:12171): avc: denied { connect } for pid=18152 comm="syz.5.4888" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.456257][ T29] audit: type=1400 audit(1751859974.667:12172): avc: denied { write } for pid=18152 comm="syz.5.4888" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.468916][ T29] audit: type=1400 audit(1751859975.807:12173): avc: denied { shutdown } for pid=18156 comm="syz.5.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 366.534642][ T29] audit: type=1400 audit(1751859975.867:12174): avc: denied { write } for pid=18147 comm="syz.4.4887" name="seq" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 366.569087][ T29] audit: type=1400 audit(1751859975.867:12175): avc: denied { open } for pid=18147 comm="syz.4.4887" path="/dev/snd/seq" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 366.597820][ T29] audit: type=1400 audit(1751859975.867:12176): avc: denied { ioctl } for pid=18147 comm="syz.4.4887" path="/dev/snd/seq" dev="devtmpfs" ino=255 ioctlcmd=0x5332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 366.627680][ T29] audit: type=1400 audit(1751859975.867:12177): avc: denied { bind } for pid=18171 comm="syz.3.4892" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.648245][ T29] audit: type=1400 audit(1751859975.867:12178): avc: denied { node_bind } for pid=18171 comm="syz.3.4892" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 366.966253][T18182] loop5: detected capacity change from 0 to 1764 [ 366.972980][T18182] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 367.047858][ T29] audit: type=1400 audit(1751859976.287:12179): avc: denied { execute_no_trans } for pid=18175 comm="syz.5.4893" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 367.251551][T18192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4899'. [ 367.272524][ T29] audit: type=1400 audit(1751859976.607:12180): avc: denied { write } for pid=18194 comm="syz.6.4900" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.384228][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4901'. [ 367.635558][T18206] netlink: 'syz.5.4905': attribute type 2 has an invalid length. [ 367.643578][T18206] netlink: 'syz.5.4905': attribute type 1 has an invalid length. [ 367.651438][T18206] netlink: 'syz.5.4905': attribute type 2 has an invalid length. [ 367.704082][ T29] audit: type=1400 audit(1751859977.037:12181): avc: denied { read } for pid=18208 comm="syz.4.4906" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 367.728624][ T29] audit: type=1400 audit(1751859977.037:12182): avc: denied { open } for pid=18208 comm="syz.4.4906" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 368.869560][T18226] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4911'. [ 368.905819][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4914'. [ 368.969886][T18244] netlink: 'syz.1.4919': attribute type 39 has an invalid length. [ 369.200158][T18255] netlink: 'syz.3.4923': attribute type 1 has an invalid length. [ 369.286339][T18257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.296247][T18257] bond1: (slave bond2): making interface the new active one [ 369.304421][T18257] bond1: (slave bond2): Enslaving as an active interface with an up link [ 370.185726][T18269] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4927'. [ 370.374268][T18279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4930'. [ 370.425027][T18287] loop4: detected capacity change from 0 to 1024 [ 370.432301][T18287] EXT4-fs: Ignoring removed orlov option [ 370.440432][T18287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.633216][T18300] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4937'. [ 370.642665][T18300] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4937'. [ 371.046471][T18287] ================================================================== [ 371.054642][T18287] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 371.061817][T18287] [ 371.064164][T18287] write to 0xffff88810774edfc of 4 bytes by task 18290 on cpu 0: [ 371.071905][T18287] xas_set_mark+0x12b/0x140 [ 371.076442][T18287] __folio_start_writeback+0x1dd/0x440 [ 371.081938][T18287] ext4_bio_write_folio+0x5ad/0x9f0 [ 371.087184][T18287] mpage_submit_folio+0xe4/0x170 [ 371.092143][T18287] mpage_process_page_bufs+0x39b/0x4a0 [ 371.097634][T18287] mpage_prepare_extent_to_map+0x741/0xaa0 [ 371.103469][T18287] ext4_do_writepages+0x6ea/0x21c0 [ 371.108609][T18287] ext4_writepages+0x176/0x300 [ 371.113405][T18287] do_writepages+0x1c6/0x310 [ 371.118037][T18287] file_write_and_wait_range+0x156/0x2c0 [ 371.123801][T18287] generic_buffers_fsync_noflush+0x45/0x120 [ 371.129738][T18287] ext4_sync_file+0x1ab/0x690 [ 371.134455][T18287] vfs_fsync_range+0x10d/0x130 [ 371.139263][T18287] ext4_buffered_write_iter+0x34f/0x3c0 [ 371.144843][T18287] ext4_file_write_iter+0x383/0xf00 [ 371.150170][T18287] iter_file_splice_write+0x5f2/0x970 [ 371.155586][T18287] direct_splice_actor+0x156/0x2a0 [ 371.160735][T18287] splice_direct_to_actor+0x312/0x680 [ 371.166140][T18287] do_splice_direct+0xda/0x150 [ 371.170941][T18287] do_sendfile+0x380/0x650 [ 371.175380][T18287] __x64_sys_sendfile64+0x105/0x150 [ 371.180610][T18287] x64_sys_call+0xb39/0x2fb0 [ 371.185223][T18287] do_syscall_64+0xd2/0x200 [ 371.189772][T18287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.195690][T18287] [ 371.198034][T18287] read to 0xffff88810774edfc of 4 bytes by task 18287 on cpu 1: [ 371.205697][T18287] xas_find_marked+0x5dc/0x620 [ 371.210512][T18287] find_get_entry+0x5d/0x380 [ 371.215146][T18287] filemap_get_folios_tag+0x92/0x210 [ 371.220497][T18287] mpage_prepare_extent_to_map+0x320/0xaa0 [ 371.226344][T18287] ext4_do_writepages+0x6ea/0x21c0 [ 371.231488][T18287] ext4_writepages+0x176/0x300 [ 371.236290][T18287] do_writepages+0x1c6/0x310 [ 371.240911][T18287] file_write_and_wait_range+0x156/0x2c0 [ 371.246596][T18287] generic_buffers_fsync_noflush+0x45/0x120 [ 371.252543][T18287] ext4_sync_file+0x1ab/0x690 [ 371.257266][T18287] vfs_fsync_range+0x10d/0x130 [ 371.262075][T18287] ext4_buffered_write_iter+0x34f/0x3c0 [ 371.267664][T18287] ext4_file_write_iter+0x383/0xf00 [ 371.272905][T18287] iter_file_splice_write+0x5f2/0x970 [ 371.278329][T18287] direct_splice_actor+0x156/0x2a0 [ 371.283495][T18287] splice_direct_to_actor+0x312/0x680 [ 371.288914][T18287] do_splice_direct+0xda/0x150 [ 371.293714][T18287] do_sendfile+0x380/0x650 [ 371.298154][T18287] __x64_sys_sendfile64+0x105/0x150 [ 371.303382][T18287] x64_sys_call+0xb39/0x2fb0 [ 371.308003][T18287] do_syscall_64+0xd2/0x200 [ 371.312527][T18287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.318431][T18287] [ 371.320758][T18287] value changed: 0x0a000021 -> 0x04000021 [ 371.326477][T18287] [ 371.328820][T18287] Reported by Kernel Concurrency Sanitizer on: [ 371.334974][T18287] CPU: 1 UID: 0 PID: 18287 Comm: syz.4.4934 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 371.345747][T18287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.355811][T18287] ================================================================== [ 371.459712][T11645] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.