last executing test programs: 50.290800175s ago: executing program 3 (id=602): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xff, 0xfffff034}, {0xb1, 0x80, 0x0, 0x80000000}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 50.222778937s ago: executing program 3 (id=604): r0 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r0, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1, r3}}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 50.144335368s ago: executing program 3 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) pread64(r0, &(0x7f0000000040)=""/46, 0x2e, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) 49.859500614s ago: executing program 3 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 49.832271034s ago: executing program 3 (id=613): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/127, 0x7f}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2) 49.50856427s ago: executing program 3 (id=620): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 49.50833228s ago: executing program 32 (id=620): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 34.55877178s ago: executing program 2 (id=1145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a29b582bd47179", 0x9}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 34.499847001s ago: executing program 2 (id=1154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x60700, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xca) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 34.426620503s ago: executing program 2 (id=1158): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x40000001, {0x0, 0xf0, 0x1}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x402, {0x0, 0xf0}, 0xfe}, 0x18) 34.393883973s ago: executing program 2 (id=1161): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 34.02792554s ago: executing program 2 (id=1170): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00020000000c00160004009095"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 33.54700812s ago: executing program 2 (id=1188): setuid(0xee01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x59}], 0x1}, 0x200048c1) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="ed2e1e", 0x3}], 0x1}, 0x14000005) 33.50851721s ago: executing program 33 (id=1188): setuid(0xee01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x59}], 0x1}, 0x200048c1) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="ed2e1e", 0x3}], 0x1}, 0x14000005) 27.722099072s ago: executing program 4 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) timer_delete(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000002000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) 27.682589393s ago: executing program 4 (id=1414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x2, 0x9, 0x0, 0x6}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001380)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x101, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='r', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x300, 0x2, 0x1, 0x6, 0x6, 0xb72f}, 0x20) 26.8013977s ago: executing program 4 (id=1441): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getown(0xffffffffffffffff, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000002c0)='dirsync\x00', 0x0, 0x0) 26.743096691s ago: executing program 4 (id=1444): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 26.486950807s ago: executing program 4 (id=1458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") open(&(0x7f0000000580)='./file1\x00', 0x2c0181, 0x28) 26.087625994s ago: executing program 4 (id=1471): r0 = inotify_init() syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0)={[{@usrquota}, {@acl}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 26.061777075s ago: executing program 34 (id=1471): r0 = inotify_init() syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0)={[{@usrquota}, {@acl}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 7.589889663s ago: executing program 0 (id=1972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r2, 0x401) 7.535949894s ago: executing program 0 (id=1977): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={0x0}) 7.456928655s ago: executing program 0 (id=1980): r0 = io_uring_setup(0x2553, &(0x7f0000000280)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) r2 = epoll_create1(0x0) dup3(r2, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xa}, {0xf, 0xc}, {0xe, 0xd}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x5d2cef9e5d8c731f}, 0x4000c00) 7.353185677s ago: executing program 0 (id=1984): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 7.319735398s ago: executing program 0 (id=1998): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7.20606705s ago: executing program 0 (id=1993): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 7.1895058s ago: executing program 35 (id=1993): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 2.418452773s ago: executing program 6 (id=2137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 2.380434754s ago: executing program 6 (id=2139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) close(0x3) 2.281216796s ago: executing program 6 (id=2143): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.183888747s ago: executing program 6 (id=2152): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {&(0x7f0000000440)=""/14, 0xe}], 0x2}}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000001c00001e"}, 0x10}, 0x1, 0x0, 0x0, 0x4045}, 0x0) 2.094176529s ago: executing program 1 (id=2160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) 2.07611358s ago: executing program 1 (id=2161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 2.0594802s ago: executing program 1 (id=2162): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x4, 0x7, 0x9, 0x6, 0x6, "7e0d1a6f17c22437b157692cedf80935e3a3e1", 0x1, 0x5}) 1.689003147s ago: executing program 8 (id=2167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) acct(0x0) 1.640497148s ago: executing program 8 (id=2168): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 1.607371609s ago: executing program 8 (id=2169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000002000000, 0x2) 1.601385999s ago: executing program 8 (id=2170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x7fffffff, 0x3, 0x0, 0xfff, 0xffffffff}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) 1.363669363s ago: executing program 8 (id=2173): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.305291544s ago: executing program 6 (id=2176): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1.211866636s ago: executing program 1 (id=2181): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1.055535159s ago: executing program 1 (id=2187): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 1.042615959s ago: executing program 1 (id=2188): syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) 585.525279ms ago: executing program 6 (id=2191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x1, 0x2002, 0x6, 0x0, 0x1, 0xcaff}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 406.697972ms ago: executing program 7 (id=2196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 304.363814ms ago: executing program 8 (id=2198): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 303.386514ms ago: executing program 7 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 248.126825ms ago: executing program 5 (id=2201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, r2, 0x1) 224.359136ms ago: executing program 7 (id=2202): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff36, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x44) syz_emit_ethernet(0x22, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x64, 0x0, 0x2, 0xff, 0x0, @broadcast, @multicast2}}}}}, 0x0) 180.374216ms ago: executing program 5 (id=2203): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 158.204567ms ago: executing program 5 (id=2204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB='\b\x00'], 0x408002) 141.790077ms ago: executing program 7 (id=2205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 122.031927ms ago: executing program 5 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 92.492578ms ago: executing program 7 (id=2207): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000cc0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) 57.809099ms ago: executing program 7 (id=2208): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f000000a000)=[{{&(0x7f00000000c0)={0xa, 0x22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000280)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 49.185629ms ago: executing program 5 (id=2209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 0s ago: executing program 5 (id=2210): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=""/10, 0xa}, 0x10}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): up [ 54.275778][ T5237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.275861][ T29] audit: type=1400 audit(1757054300.926:929): avc: denied { setattr } for pid=5227 comm="syz.2.746" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.312575][ T5229] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.746: corrupted inode contents [ 54.324480][ T5211] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.736: Failed to acquire dquot type 1 [ 54.337570][ T5211] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.736: Invalid block bitmap block 0 in block_group 0 [ 54.351722][ T5229] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.746: mark_inode_dirty error [ 54.365764][ T5229] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.746: corrupted inode contents [ 54.370249][ T5211] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.736: Invalid block bitmap block 0 in block_group 0 [ 54.403579][ T5211] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.736: Invalid block bitmap block 0 in block_group 0 [ 54.421075][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.422771][ T5211] Quota error (device loop4): write_blk: dquota write failed [ 54.437657][ T5211] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 54.447545][ T5211] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.736: Failed to acquire dquot type 1 [ 54.460611][ T5211] Quota error (device loop4): write_blk: dquota write failed [ 54.468063][ T5211] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 54.478122][ T5211] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.736: Failed to acquire dquot type 1 [ 54.494795][ T5211] EXT4-fs (loop4): 1 orphan inode deleted [ 54.501826][ T5211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.537746][ T5246] loop2: detected capacity change from 0 to 512 [ 54.550017][ T5246] EXT4-fs (loop2): too many log groups per flexible block group [ 54.557803][ T5246] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 54.566399][ T5246] EXT4-fs (loop2): mount failed [ 54.609570][ T5211] syz.4.736 (5211) used greatest stack depth: 9344 bytes left [ 54.617571][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.640601][ T5252] loop5: detected capacity change from 0 to 2048 [ 54.660335][ T5252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.672939][ T5252] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.704284][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.750488][ T5268] loop5: detected capacity change from 0 to 1024 [ 54.781645][ T5268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.906166][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.927544][ T5282] loop4: detected capacity change from 0 to 512 [ 54.934873][ T5282] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.952139][ T5282] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.766: Failed to acquire dquot type 1 [ 54.987897][ T5282] EXT4-fs (loop4): 1 truncate cleaned up [ 54.999389][ T5282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.066304][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.090947][ T5291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.092703][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.147515][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.774'. [ 55.214375][ T5312] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.226485][ T5310] loop1: detected capacity change from 0 to 8192 [ 55.234616][ T5312] FAT-fs (loop9): unable to read boot sector [ 55.334711][ T5330] capability: warning: `syz.2.787' uses deprecated v2 capabilities in a way that may be insecure [ 55.390071][ T5343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.793'. [ 55.401413][ T5343] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 55.447571][ T5350] pim6reg1: entered promiscuous mode [ 55.453028][ T5350] pim6reg1: entered allmulticast mode [ 55.476236][ T5355] loop5: detected capacity change from 0 to 512 [ 55.494410][ T5355] EXT4-fs: Ignoring removed bh option [ 55.500001][ T5355] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.508632][ T5355] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 55.521212][ T5355] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 55.533376][ T5355] EXT4-fs (loop5): orphan cleanup on readonly fs [ 55.545151][ T5355] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.797: Failed to acquire dquot type 1 [ 55.557964][ T5355] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.797: Invalid block bitmap block 0 in block_group 0 [ 55.573544][ T5355] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.797: Invalid block bitmap block 0 in block_group 0 [ 55.606508][ T5355] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.797: Invalid block bitmap block 0 in block_group 0 [ 55.623424][ T5355] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.797: Failed to acquire dquot type 1 [ 55.679924][ T5365] syzkaller1: entered promiscuous mode [ 55.685462][ T5365] syzkaller1: entered allmulticast mode [ 55.690756][ T5355] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.797: Failed to acquire dquot type 1 [ 55.711117][ T5355] EXT4-fs (loop5): 1 orphan inode deleted [ 55.726225][ T5355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.768638][ T5355] syz.5.797 (5355) used greatest stack depth: 9072 bytes left [ 55.777463][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.957312][ T5389] loop9: detected capacity change from 0 to 7 [ 55.970340][ T5389] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.991016][ T5386] loop5: detected capacity change from 0 to 8192 [ 55.991604][ T5389] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.997883][ T5386] msdos: Unknown parameter 'A' [ 56.005771][ T5389] loop9: unable to read partition table [ 56.018585][ T5389] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 56.018585][ T5389] ) failed (rc=-5) [ 56.086971][ T5392] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 56.095921][ T5392] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 56.096037][ T5383] loop2: detected capacity change from 0 to 32768 [ 56.522207][ T5433] loop1: detected capacity change from 0 to 2048 [ 56.539434][ T5443] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 56.570834][ T5433] Alternate GPT is invalid, using primary GPT. [ 56.577224][ T5433] loop1: p2 p3 p7 [ 56.591738][ T5448] loop4: detected capacity change from 0 to 128 [ 56.620227][ T5448] syz.4.840: attempt to access beyond end of device [ 56.620227][ T5448] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 56.653099][ T5448] syz.4.840: attempt to access beyond end of device [ 56.653099][ T5448] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 56.667524][ T5448] syz.4.840: attempt to access beyond end of device [ 56.667524][ T5448] loop4: rw=2049, sector=177, nr_sectors = 40 limit=128 [ 56.682952][ T5452] tipc: Started in network mode [ 56.687880][ T5452] tipc: Node identity fffeffff, cluster identity 4711 [ 56.694758][ T5452] tipc: Node number set to 4294901759 [ 56.700570][ T5448] syz.4.840: attempt to access beyond end of device [ 56.700570][ T5448] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 56.714376][ T5448] syz.4.840: attempt to access beyond end of device [ 56.714376][ T5448] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 56.747667][ T5448] syz.4.840: attempt to access beyond end of device [ 56.747667][ T5448] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 56.761648][ T5448] syz.4.840: attempt to access beyond end of device [ 56.761648][ T5448] loop4: rw=2049, sector=273, nr_sectors = 9 limit=128 [ 56.906707][ T5457] loop5: detected capacity change from 0 to 8192 [ 56.915318][ T5457] syz.5.844: attempt to access beyond end of device [ 56.915318][ T5457] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 56.960710][ T5475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.853'. [ 56.970026][ T5471] loop2: detected capacity change from 0 to 8192 [ 56.978955][ T5457] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 56.986824][ T5457] FAT-fs (loop5): Filesystem has been set read-only [ 56.993941][ T5475] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 57.015335][ T5457] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 57.025679][ T5457] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 57.260527][ T5502] loop4: detected capacity change from 0 to 164 [ 57.275463][ T5502] rock: directory entry would overflow storage [ 57.281753][ T5502] rock: sig=0x66, size=4, remaining=3 [ 57.321906][ T5511] loop5: detected capacity change from 0 to 128 [ 57.352574][ T5511] syz.5.865: attempt to access beyond end of device [ 57.352574][ T5511] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 57.375181][ T5511] syz.5.865: attempt to access beyond end of device [ 57.375181][ T5511] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 57.426475][ T5521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.870'. [ 57.448103][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 57.477579][ T5523] hsr_slave_0: left promiscuous mode [ 57.487066][ T5523] hsr_slave_1: left promiscuous mode [ 57.569950][ T5531] loop2: detected capacity change from 0 to 8192 [ 57.703846][ T5542] loop4: detected capacity change from 0 to 8192 [ 57.716703][ T5542] msdos: Unknown parameter 'A' [ 57.726758][ T5552] loop5: detected capacity change from 0 to 1024 [ 57.759243][ T5552] EXT4-fs: Ignoring removed nobh option [ 57.764863][ T5552] EXT4-fs: Ignoring removed bh option [ 57.866089][ T5559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.889'. [ 57.970105][ T5566] loop0: detected capacity change from 0 to 512 [ 58.034230][ T5566] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 58.051212][ T5573] loop1: detected capacity change from 0 to 512 [ 58.058925][ T5552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.072848][ T5566] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.081618][ T5566] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.892: corrupted inode contents [ 58.111489][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.141134][ T5573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.154125][ T5566] EXT4-fs (loop0): Remounting filesystem read-only [ 58.174295][ T5566] EXT4-fs (loop0): 1 truncate cleaned up [ 58.228879][ T5573] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.256528][ T5573] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.895: corrupted inode contents [ 58.285680][ T5573] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.895: mark_inode_dirty error [ 58.298421][ T5027] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.309164][ T5027] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.329014][ T5573] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.895: corrupted inode contents [ 58.350834][ T5027] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.367168][ T5566] tipc: Started in network mode [ 58.372108][ T5566] tipc: Node identity ac14140f, cluster identity 4711 [ 58.387712][ T5566] tipc: New replicast peer: 255.255.255.83 [ 58.393696][ T5566] tipc: Enabled bearer , priority 10 [ 58.447614][ T5592] loop5: detected capacity change from 0 to 512 [ 58.460310][ T5592] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.467566][ T5592] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.534309][ T5592] EXT4-fs (loop5): 1 truncate cleaned up [ 58.625980][ T5611] loop0: detected capacity change from 0 to 512 [ 58.646709][ T5611] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.678828][ T5619] netlink: 'syz.1.912': attribute type 3 has an invalid length. [ 58.736735][ T5622] loop4: detected capacity change from 0 to 2048 [ 58.816453][ T5622] Alternate GPT is invalid, using primary GPT. [ 58.823059][ T5622] loop4: p2 p3 p7 [ 58.826711][ T5635] loop0: detected capacity change from 0 to 164 [ 58.854167][ T5635] rock: directory entry would overflow storage [ 58.860500][ T5635] rock: sig=0x66, size=4, remaining=3 [ 58.890365][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 58.890380][ T29] audit: type=1326 audit(1757054305.546:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 58.966458][ T29] audit: type=1326 audit(1757054305.576:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 58.990096][ T29] audit: type=1326 audit(1757054305.576:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.013503][ T29] audit: type=1326 audit(1757054305.576:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.037563][ T29] audit: type=1326 audit(1757054305.596:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.060907][ T29] audit: type=1326 audit(1757054305.596:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.084467][ T29] audit: type=1326 audit(1757054305.596:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.107959][ T29] audit: type=1326 audit(1757054305.596:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.131526][ T29] audit: type=1326 audit(1757054305.596:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.155071][ T29] audit: type=1326 audit(1757054305.596:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5639 comm="syz.4.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000ba0ebe9 code=0x7ffc0000 [ 59.398811][ T3361] tipc: Node number set to 2886997007 [ 59.415283][ T5669] loop5: detected capacity change from 0 to 2048 [ 59.463019][ T5669] Alternate GPT is invalid, using primary GPT. [ 59.469513][ T5669] loop5: p2 p3 p7 [ 59.581901][ T5684] loop4: detected capacity change from 0 to 512 [ 59.588877][ T5684] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.595808][ T5684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.607142][ T5684] EXT4-fs (loop4): 1 truncate cleaned up [ 59.711542][ T5691] SELinux: failed to load policy [ 59.817585][ T5695] macvtap0: refused to change device tx_queue_len [ 60.174111][ T5716] netlink: 256 bytes leftover after parsing attributes in process `syz.1.955'. [ 60.311690][ T5731] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 60.324016][ T5729] bridge0: entered promiscuous mode [ 60.329551][ T5729] macsec1: entered promiscuous mode [ 60.346810][ T5729] bridge0: port 3(macsec1) entered blocking state [ 60.353466][ T5729] bridge0: port 3(macsec1) entered disabled state [ 60.364623][ T5733] openvswitch: netlink: Message has 6 unknown bytes. [ 60.372174][ T5729] macsec1: entered allmulticast mode [ 60.377547][ T5729] bridge0: entered allmulticast mode [ 60.409995][ T5729] macsec1: left allmulticast mode [ 60.415082][ T5729] bridge0: left allmulticast mode [ 60.421750][ T5729] bridge0: left promiscuous mode [ 60.491055][ T5741] loop2: detected capacity change from 0 to 512 [ 60.513013][ T5741] EXT4-fs (loop2): 1 orphan inode deleted [ 60.531150][ T5741] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.547952][ T1795] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 1 [ 60.568187][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 60.583689][ T5753] program syz.5.971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.654787][ T5766] loop2: detected capacity change from 0 to 512 [ 60.668980][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.676793][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.684390][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.693830][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.701437][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.708905][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.716601][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.724183][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.731739][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.739340][ T3361] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.745438][ T5766] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.749366][ T3361] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 60.755636][ T5766] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.773179][ T5766] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.977: corrupted inode contents [ 60.785884][ T5766] EXT4-fs (loop2): Remounting filesystem read-only [ 60.792899][ T5766] EXT4-fs (loop2): 1 truncate cleaned up [ 60.798813][ T3425] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.809532][ T3425] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.809748][ T3425] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.820933][ T5766] tipc: Started in network mode [ 60.835890][ T5766] tipc: Node identity ac14140f, cluster identity 4711 [ 60.836114][ T5766] tipc: New replicast peer: 255.255.255.83 [ 60.848711][ T5766] tipc: Enabled bearer , priority 10 [ 60.923083][ T5785] netlink: 'syz.5.985': attribute type 21 has an invalid length. [ 60.931006][ T5785] netlink: 156 bytes leftover after parsing attributes in process `syz.5.985'. [ 60.967547][ T5791] 9pnet_fd: Insufficient options for proto=fd [ 61.073545][ T5800] hub 2-0:1.0: USB hub found [ 61.078333][ T5800] hub 2-0:1.0: 8 ports detected [ 61.264242][ T5820] program syz.5.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.311378][ T5825] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1003'. [ 61.320419][ T5825] netem: unknown loss type 0 [ 61.325300][ T5825] netem: change failed [ 61.439572][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 61.448748][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1013'. [ 61.498154][ T5854] loop5: detected capacity change from 0 to 1024 [ 61.507539][ T5854] EXT4-fs: Ignoring removed nobh option [ 61.512411][ T5857] sg_write: data in/out 63012/14 bytes for SCSI command 0x0-- guessing data in; [ 61.512411][ T5857] program +}[@ not setting count and/or reply_len properly [ 61.515216][ T5854] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.545146][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 61.563184][ T5854] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.1017: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 61.589485][ T5854] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1017: couldn't read orphan inode 11 (err -117) [ 61.627448][ T5865] sch_fq: defrate 4294967295 ignored. [ 61.643651][ T5869] netlink: 'syz.1.1024': attribute type 4 has an invalid length. [ 61.710801][ T5879] 9pnet_fd: Insufficient options for proto=fd [ 61.735313][ T5881] netlink: 'syz.1.1031': attribute type 13 has an invalid length. [ 61.822347][ T5881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.854692][ T5892] loop0: detected capacity change from 0 to 1024 [ 61.863274][ T5892] EXT4-fs: Ignoring removed orlov option [ 61.869098][ T3411] tipc: Node number set to 2886997007 [ 61.900033][ T5899] loop1: detected capacity change from 0 to 512 [ 61.931921][ T5899] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 61.938723][ T5906] pim6reg1: entered promiscuous mode [ 61.945317][ T5906] pim6reg1: entered allmulticast mode [ 62.018861][ T5899] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.040544][ T5899] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1037: corrupted inode contents [ 62.121006][ T5899] EXT4-fs (loop1): Remounting filesystem read-only [ 62.128038][ T5899] EXT4-fs (loop1): 1 truncate cleaned up [ 62.134075][ T5027] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.144842][ T5027] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 62.158124][ T5027] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 62.181180][ T5899] tipc: New replicast peer: 255.255.255.83 [ 62.187091][ T5899] tipc: Enabled bearer , priority 10 [ 62.213730][ T5915] loop2: detected capacity change from 0 to 1024 [ 62.229303][ T5915] EXT4-fs: Ignoring removed nobh option [ 62.245099][ T5915] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.269772][ T5915] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.1043: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 62.290255][ T5915] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1043: couldn't read orphan inode 11 (err -117) [ 62.400552][ T5930] loop1: detected capacity change from 0 to 1024 [ 62.450955][ T5940] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.685390][ T5963] bridge0: entered promiscuous mode [ 62.732150][ T5963] macsec1: entered promiscuous mode [ 62.739268][ T5963] bridge0: port 3(macsec1) entered blocking state [ 62.745784][ T5963] bridge0: port 3(macsec1) entered disabled state [ 62.754862][ T5963] macsec1: entered allmulticast mode [ 62.760232][ T5963] bridge0: entered allmulticast mode [ 62.766628][ T5963] macsec1: left allmulticast mode [ 62.771739][ T5963] bridge0: left allmulticast mode [ 62.781305][ T5963] bridge0: left promiscuous mode [ 62.819379][ T5972] __nla_validate_parse: 4 callbacks suppressed [ 62.819397][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 62.838491][ T5975] loop1: detected capacity change from 0 to 512 [ 62.848069][ T5975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.889897][ T5975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 62.898017][ T5975] System zones: 0-2, 18-18, 34-34 [ 62.904559][ T5975] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.997171][ T5992] loop1: detected capacity change from 0 to 128 [ 63.039528][ T5992] vfat: Bad value for 'gid' [ 63.044110][ T5992] vfat: Bad value for 'gid' [ 63.057141][ T5997] netlink: 'syz.0.1078': attribute type 3 has an invalid length. [ 63.084604][ T5995] loop4: detected capacity change from 0 to 1024 [ 63.103031][ T5999] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1079'. [ 63.136130][ T6003] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1080'. [ 63.166426][ T5995] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.1077: path /208/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 63.234133][ T6005] loop1: detected capacity change from 0 to 8192 [ 63.606288][ T6035] loop1: detected capacity change from 0 to 1024 [ 63.644812][ T6035] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1093: Allocating blocks 449-513 which overlap fs metadata [ 63.683307][ T6034] EXT4-fs (loop1): pa ffff8881072334d0: logic 48, phys. 177, len 21 [ 63.691482][ T6034] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 63.830694][ T6041] sctp: [Deprecated]: syz.5.1095 (pid 6041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.830694][ T6041] Use struct sctp_sack_info instead [ 63.856267][ T6043] program syz.1.1096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.865803][ T6043] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 64.067137][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 64.067156][ T29] audit: type=1400 audit(1757054310.716:1243): avc: denied { relabelfrom } for pid=6056 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.093991][ T29] audit: type=1400 audit(1757054310.716:1244): avc: denied { relabelto } for pid=6056 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.166808][ T29] audit: type=1326 audit(1757054310.816:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfbfeebe9 code=0x7ffc0000 [ 64.190675][ T29] audit: type=1326 audit(1757054310.816:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfbfeebe9 code=0x7ffc0000 [ 64.214524][ T29] audit: type=1326 audit(1757054310.816:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fcbfbfeebe9 code=0x7ffc0000 [ 64.238265][ T29] audit: type=1326 audit(1757054310.816:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfbfeebe9 code=0x7ffc0000 [ 64.262302][ T29] audit: type=1326 audit(1757054310.846:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfbfeebe9 code=0x7ffc0000 [ 64.324237][ T6064] SELinux: failed to load policy [ 64.344355][ T29] audit: type=1326 audit(1757054310.996:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614976ebe9 code=0x7ffc0000 [ 64.345788][ T6072] loop0: detected capacity change from 0 to 164 [ 64.368247][ T29] audit: type=1326 audit(1757054310.996:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614976ebe9 code=0x7ffc0000 [ 64.397953][ T29] audit: type=1326 audit(1757054310.996:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f614976ebe9 code=0x7ffc0000 [ 64.433210][ T6072] ISOFS: unable to read i-node block [ 64.438700][ T6072] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 64.558189][ T6087] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1117'. [ 64.657779][ T6109] bridge0: entered promiscuous mode [ 64.667589][ T6109] macvtap1: entered allmulticast mode [ 64.673075][ T6109] bridge0: entered allmulticast mode [ 64.684023][ T6109] bridge0: port 3(macvtap1) entered blocking state [ 64.690676][ T6109] bridge0: port 3(macvtap1) entered disabled state [ 64.699874][ T6109] bridge0: left allmulticast mode [ 64.704980][ T6109] bridge0: left promiscuous mode [ 64.851502][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 64.857365][ T6140] dvmrp0: entered allmulticast mode [ 64.976137][ T6159] loop4: detected capacity change from 0 to 512 [ 64.993744][ T6159] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 65.032599][ T6169] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 65.095125][ T6179] loop2: detected capacity change from 0 to 512 [ 65.131433][ T6179] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 65.170285][ T6179] EXT4-fs (loop2): invalid journal inode [ 65.186983][ T6179] EXT4-fs (loop2): can't get journal size [ 65.200378][ T6179] EXT4-fs (loop2): 1 truncate cleaned up [ 65.223230][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1167'. [ 65.268658][ T6179] loop2: detected capacity change from 512 to 0 [ 65.276908][ C1] I/O error, dev loop2, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 65.286488][ T6179] EXT4-fs error (device loop2): __ext4_find_entry:1615: inode #2: comm syz.2.1161: reading directory lblock 0 [ 65.319742][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 65.329301][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 65.338793][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 65.347219][ T6179] EXT4-fs (loop2): I/O error while writing superblock [ 65.395815][ C1] I/O error, dev loop2, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 65.408513][ T3306] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 65.445378][ C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 65.455057][ C1] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 65.464656][ T3306] EXT4-fs error (device loop2): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 65.498615][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 65.508136][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 65.517728][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 65.538241][ T3306] EXT4-fs (loop2): I/O error while writing superblock [ 65.545124][ T3306] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: IO failure [ 65.561336][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 65.570898][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 65.580390][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 65.588780][ T3306] EXT4-fs (loop2): I/O error while writing superblock [ 65.596117][ T3306] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 65.609443][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 65.618428][ T3306] EXT4-fs (loop2): I/O error while writing superblock [ 65.665500][ T56] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 65.684587][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 65.694342][ T56] EXT4-fs (loop2): I/O error while writing superblock [ 65.702364][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 65.702396][ T4389] EXT4-fs (loop2): I/O error while writing superblock [ 65.763396][ T6214] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 65.769980][ T6214] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.777743][ T6214] vhci_hcd vhci_hcd.0: Device attached [ 65.787604][ T6218] vhci_hcd: connection closed [ 65.787784][ T56] vhci_hcd: stop threads [ 65.796887][ T56] vhci_hcd: release socket [ 65.801349][ T56] vhci_hcd: disconnect device [ 65.928096][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.002438][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.022803][ T6252] netlink: zone id is out of range [ 66.068032][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.092873][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1198'. [ 66.101914][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'. [ 66.110921][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1198'. [ 66.122435][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'. [ 66.131509][ T6262] netlink: 'syz.1.1198': attribute type 6 has an invalid length. [ 66.161624][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.227954][ T6278] loop0: detected capacity change from 0 to 128 [ 66.264720][ T6282] netlink: 'syz.4.1205': attribute type 2 has an invalid length. [ 66.272673][ T6282] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 66.292752][ T56] bridge_slave_1: left allmulticast mode [ 66.298513][ T56] bridge_slave_1: left promiscuous mode [ 66.304256][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.344998][ T56] bridge_slave_0: left allmulticast mode [ 66.350956][ T56] bridge_slave_0: left promiscuous mode [ 66.356696][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.394245][ T6299] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 66.396735][ T6301] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 66.410432][ T6301] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.418231][ T6301] vhci_hcd vhci_hcd.0: Device attached [ 66.463521][ T6301] loop5: detected capacity change from 0 to 512 [ 66.489985][ T6301] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.585325][ T6301] EXT4-fs (loop5): mount failed [ 66.593254][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.600705][ T6314] SELinux: failed to load policy [ 66.601719][ T37] vhci_hcd: vhci_device speed not set [ 66.612578][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.628129][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.647895][ T6302] vhci_hcd: connection closed [ 66.652467][ T3425] vhci_hcd: stop threads [ 66.661533][ T3425] vhci_hcd: release socket [ 66.665985][ T3425] vhci_hcd: disconnect device [ 66.672994][ T37] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 66.673969][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.681076][ T37] usb 11-1: enqueue for inactive port 0 [ 66.701066][ T56] bond0 (unregistering): Released all slaves [ 66.708526][ T37] usb 11-1: enqueue for inactive port 0 [ 66.714202][ T37] usb 11-1: enqueue for inactive port 0 [ 66.752256][ T56] tipc: Disabling bearer [ 66.757270][ T56] tipc: Left network mode [ 66.791970][ T56] hsr_slave_0: left promiscuous mode [ 66.794347][ T37] vhci_hcd: vhci_device speed not set [ 66.807403][ T56] hsr_slave_1: left promiscuous mode [ 66.820554][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.828416][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.849622][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.857463][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.883426][ T56] veth1_macvtap: left promiscuous mode [ 66.892041][ T56] veth0_macvtap: left promiscuous mode [ 66.898286][ T56] veth1_vlan: left promiscuous mode [ 66.904292][ T56] veth0_vlan: left promiscuous mode [ 67.031905][ T56] team0 (unregistering): Port device team_slave_1 removed [ 67.043827][ T56] team0 (unregistering): Port device team_slave_0 removed [ 67.101961][ T6253] chnl_net:caif_netlink_parms(): no params data found [ 67.226682][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.233976][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.244607][ T6344] netlink: 'syz.0.1227': attribute type 4 has an invalid length. [ 67.276762][ T6253] bridge_slave_0: entered allmulticast mode [ 67.295507][ T6346] loop1: detected capacity change from 0 to 512 [ 67.304931][ T6253] bridge_slave_0: entered promiscuous mode [ 67.322935][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.330235][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.346957][ T6346] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.353849][ T6253] bridge_slave_1: entered allmulticast mode [ 67.360918][ T6253] bridge_slave_1: entered promiscuous mode [ 67.383969][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.395843][ T6346] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.429949][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.479748][ T6346] EXT4-fs (loop1): 1 truncate cleaned up [ 67.520156][ T6253] team0: Port device team_slave_0 added [ 67.526907][ T6253] team0: Port device team_slave_1 added [ 67.546672][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.553766][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.561457][ T6296] syz.4.1211 (6296) used greatest stack depth: 7528 bytes left [ 67.579821][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.584541][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.605483][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.631597][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.742549][ T6253] hsr_slave_0: entered promiscuous mode [ 67.773893][ T6253] hsr_slave_1: entered promiscuous mode [ 67.791018][ T6253] debugfs: 'hsr0' already exists in 'hsr' [ 67.796792][ T6253] Cannot create hsr debugfs directory [ 67.877774][ T6434] loop4: detected capacity change from 0 to 2048 [ 67.914540][ T6434] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.014216][ T6253] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.024512][ T6253] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.033667][ T6253] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.051357][ T6253] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 68.121974][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.129198][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.136570][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.143867][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.200828][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.213980][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.277454][ T6461] netlink: 'syz.4.1248': attribute type 3 has an invalid length. [ 68.305971][ T6253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.326391][ T6253] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.340170][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.347303][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.437455][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.444732][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.463325][ T6471] loop1: detected capacity change from 0 to 164 [ 68.478308][ T6471] iso9660: Bad value for 'sbsector' [ 68.554650][ T6482] loop1: detected capacity change from 0 to 1024 [ 68.578951][ T6482] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.590102][ T6482] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.612397][ T6482] JBD2: no valid journal superblock found [ 68.618359][ T6482] EXT4-fs (loop1): Could not load journal inode [ 68.633683][ T6253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.672701][ T6482] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 68.770293][ T6503] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 68.798827][ T6503] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.859951][ T6253] veth0_vlan: entered promiscuous mode [ 68.884679][ T6253] veth1_vlan: entered promiscuous mode [ 68.904831][ T6253] veth0_macvtap: entered promiscuous mode [ 68.912571][ T6253] veth1_macvtap: entered promiscuous mode [ 68.921011][ T6519] loop4: detected capacity change from 0 to 512 [ 68.924229][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.928649][ T6519] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 68.945445][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.960100][ T6519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 68.972814][ T6393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.982671][ T6519] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1268: corrupted in-inode xattr: e_value size too large [ 68.997735][ T6393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.009399][ T6519] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1268: couldn't read orphan inode 15 (err -117) [ 69.022855][ T6393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.033131][ T6519] EXT4-fs mount: 35 callbacks suppressed [ 69.033152][ T6519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.056205][ T6393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.081519][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 69.081538][ T29] audit: type=1400 audit(1757054315.736:1439): avc: denied { add_name } for pid=6518 comm="syz.4.1268" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.109254][ T29] audit: type=1400 audit(1757054315.736:1440): avc: denied { create } for pid=6518 comm="syz.4.1268" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.131468][ T29] audit: type=1400 audit(1757054315.766:1441): avc: denied { append open } for pid=6518 comm="syz.4.1268" path="/257/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.177615][ T29] audit: type=1400 audit(1757054315.766:1442): avc: denied { create } for pid=6518 comm="syz.4.1268" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.198193][ T29] audit: type=1400 audit(1757054315.786:1443): avc: denied { add_name } for pid=6253 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 69.223207][ T29] audit: type=1400 audit(1757054315.786:1444): avc: denied { associate } for pid=6253 comm="syz-executor" name="syz6" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.247914][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.248532][ T29] audit: type=1400 audit(1757054315.906:1445): avc: denied { write } for pid=6531 comm="syz.1.1273" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.288900][ T29] audit: type=1400 audit(1757054315.936:1446): avc: denied { create } for pid=6533 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.316651][ T6534] __nla_validate_parse: 2 callbacks suppressed [ 69.316672][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1190'. [ 69.333017][ T6532] vhci_hcd: invalid port number 96 [ 69.338180][ T6532] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 69.352012][ T29] audit: type=1400 audit(1757054315.946:1447): avc: denied { map } for pid=6531 comm="syz.1.1273" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.376224][ T29] audit: type=1400 audit(1757054315.966:1448): avc: denied { write } for pid=6533 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.464012][ T6551] loop0: detected capacity change from 0 to 1024 [ 69.478894][ T6551] EXT4-fs: Ignoring removed nobh option [ 69.513060][ T6560] loop5: detected capacity change from 0 to 128 [ 69.519320][ T6551] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.535406][ T6545] loop4: detected capacity change from 0 to 8192 [ 69.546133][ T6551] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.1280: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 69.574810][ T6551] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1280: couldn't read orphan inode 11 (err -117) [ 69.590484][ T6551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.786356][ T6586] bridge0: entered promiscuous mode [ 69.791918][ T6586] macsec1: entered promiscuous mode [ 69.809443][ T6586] bridge0: port 3(macsec1) entered blocking state [ 69.815929][ T6586] bridge0: port 3(macsec1) entered disabled state [ 69.830645][ T6586] macsec1: entered allmulticast mode [ 69.836162][ T6586] bridge0: entered allmulticast mode [ 69.862023][ T6586] macsec1: left allmulticast mode [ 69.867320][ T6586] bridge0: left allmulticast mode [ 69.931918][ T6586] bridge0: left promiscuous mode [ 69.942128][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.143390][ T6619] loop5: detected capacity change from 0 to 128 [ 70.248907][ T6618] Falling back ldisc for ttyS3. [ 70.553964][ T6660] netlink: 'syz.5.1330': attribute type 21 has an invalid length. [ 70.572249][ T6660] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1330'. [ 70.582972][ T6665] random: crng reseeded on system resumption [ 70.791551][ T6704] blk_print_req_error: 8 callbacks suppressed [ 70.791576][ T6704] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.823725][ T6704] isofs_fill_super: bread failed, dev=loop6, iso_blknum=16, block=32 [ 70.851913][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 70.923985][ T6730] loop6: detected capacity change from 0 to 512 [ 70.943405][ T6730] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.984394][ T6730] EXT4-fs (loop6): 1 truncate cleaned up [ 71.004385][ T6730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.028402][ T6746] netlink: 32 bytes leftover after parsing attributes in process `GPL'. [ 71.067815][ T6253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.094018][ T6752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6752 comm=syz.0.1374 [ 71.237332][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1386'. [ 71.246529][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1386'. [ 71.275399][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1386'. [ 71.284563][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1386'. [ 71.305623][ T6786] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1390'. [ 71.315307][ T6778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1386'. [ 71.495553][ T6823] loop0: detected capacity change from 0 to 256 [ 71.504028][ T6823] msdos: Bad value for 'fmask' [ 71.509007][ T6824] sctp: [Deprecated]: syz.1.1411 (pid 6824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.509007][ T6824] Use struct sctp_sack_info instead [ 71.556461][ T6828] netlink: 'syz.0.1405': attribute type 21 has an invalid length. [ 71.599398][ T6828] netlink: 'syz.0.1405': attribute type 21 has an invalid length. [ 71.599764][ T6393] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.663387][ T6393] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.687266][ T6393] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.722514][ T6393] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.750238][ T6841] program syz.0.1412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.789882][ T6841] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 71.852424][ T6854] loop0: detected capacity change from 0 to 128 [ 72.399897][ T6888] 9pnet_fd: p9_fd_create_tcp (6888): problem connecting socket to 127.0.0.1 [ 72.540644][ T6899] loop5: detected capacity change from 0 to 256 [ 72.555372][ T6899] msdos: Bad value for 'fmask' [ 72.737494][ T6917] loop4: detected capacity change from 0 to 512 [ 72.750666][ T6917] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 72.761090][ T6917] EXT4-fs (loop4): invalid journal inode [ 72.767501][ T6917] EXT4-fs (loop4): can't get journal size [ 72.797398][ T6917] EXT4-fs (loop4): 1 truncate cleaned up [ 72.810269][ T6917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.878579][ T6917] loop4: detected capacity change from 512 to 0 [ 72.885895][ C1] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 72.897154][ T6917] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.1444: reading directory lblock 0 [ 72.912449][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 72.922098][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 72.931597][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 72.939974][ T6917] EXT4-fs (loop4): I/O error while writing superblock [ 72.960512][ C0] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 72.970983][ T3312] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 72.989804][ C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 72.999461][ C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 73.009105][ T3312] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 73.024171][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 73.033709][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 73.043383][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 73.052255][ T3312] EXT4-fs (loop4): I/O error while writing superblock [ 73.059105][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure [ 73.070251][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 73.079967][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 73.088549][ T3312] EXT4-fs (loop4): I/O error while writing superblock [ 73.095377][ T3312] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 73.109465][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 73.117860][ T3312] EXT4-fs (loop4): I/O error while writing superblock [ 73.136024][ T1436] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 73.154098][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 73.162675][ T1436] EXT4-fs (loop4): I/O error while writing superblock [ 73.171811][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.195399][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 73.203833][ T3312] EXT4-fs (loop4): I/O error while writing superblock [ 73.225263][ T6960] SELinux: Context attr/f is not valid (left unmapped). [ 73.363007][ T6973] netlink: 'syz.0.1470': attribute type 6 has an invalid length. [ 73.399988][ T6391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.410468][ T6391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.489496][ T6391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.499833][ T6391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.601967][ T6391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.612466][ T6391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.706848][ T6391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.717493][ T6391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.922288][ T7004] random: crng reseeded on system resumption [ 73.928916][ T6391] bridge_slave_1: left allmulticast mode [ 73.934700][ T6391] bridge_slave_1: left promiscuous mode [ 73.940641][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.963137][ T6391] bridge_slave_0: left allmulticast mode [ 73.968950][ T6391] bridge_slave_0: left promiscuous mode [ 73.974609][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.117083][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 74.117119][ T29] audit: type=1326 audit(1757054320.766:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 74.155674][ T29] audit: type=1326 audit(1757054320.806:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfbfeebe9 code=0x7ffc0000 [ 74.179360][ T29] audit: type=1326 audit(1757054320.806:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfbfeebe9 code=0x7ffc0000 [ 74.202951][ T29] audit: type=1326 audit(1757054320.806:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 74.228406][ T29] audit: type=1326 audit(1757054320.886:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 74.252772][ T29] audit: type=1326 audit(1757054320.886:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 74.276441][ T29] audit: type=1326 audit(1757054320.886:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 74.299882][ T29] audit: type=1400 audit(1757054320.886:1863): avc: denied { ioctl } for pid=7024 comm="syz.6.1495" path="socket:[16769]" dev="sockfs" ino=16769 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.325516][ T29] audit: type=1400 audit(1757054320.886:1864): avc: denied { bind } for pid=7024 comm="syz.6.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.345357][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.356258][ T29] audit: type=1400 audit(1757054321.006:1865): avc: denied { write } for pid=7024 comm="syz.6.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.378341][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.391356][ T6391] bond0 (unregistering): Released all slaves [ 74.470195][ T6391] hsr_slave_0: left promiscuous mode [ 74.476816][ T6391] hsr_slave_1: left promiscuous mode [ 74.483308][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.490820][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.509005][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.516488][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.524366][ T7040] loop5: detected capacity change from 0 to 2048 [ 74.531837][ T6391] veth1_macvtap: left promiscuous mode [ 74.537510][ T6391] veth0_macvtap: left promiscuous mode [ 74.543106][ T6391] veth1_vlan: left promiscuous mode [ 74.548547][ T6391] veth0_vlan: left promiscuous mode [ 74.569724][ T7040] loop5: p1 < > p4 [ 74.574935][ T7040] loop5: p4 size 8388608 extends beyond EOD, truncated [ 74.643233][ T6391] team0 (unregistering): Port device team_slave_1 removed [ 74.661819][ T6391] team0 (unregistering): Port device team_slave_0 removed [ 74.712880][ T3411] infiniband syz1: ib_query_port failed (-19) [ 74.717380][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 74.759948][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.767314][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.774717][ T6981] bridge_slave_0: entered allmulticast mode [ 74.781446][ T6981] bridge_slave_0: entered promiscuous mode [ 74.788630][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.795745][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.803072][ T6981] bridge_slave_1: entered allmulticast mode [ 74.809889][ T6981] bridge_slave_1: entered promiscuous mode [ 74.843512][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.854533][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.885774][ T6981] team0: Port device team_slave_0 added [ 74.893175][ T6981] team0: Port device team_slave_1 added [ 74.900986][ T7069] loop5: detected capacity change from 0 to 2048 [ 74.913810][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.920857][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.931621][ T7069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.947219][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.948132][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.962097][ T7069] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.969825][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.013270][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.050064][ T7074] __nla_validate_parse: 9 callbacks suppressed [ 75.050129][ T7074] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1511'. [ 75.059502][ T6981] hsr_slave_0: entered promiscuous mode [ 75.071771][ T6981] hsr_slave_1: entered promiscuous mode [ 75.077836][ T6981] debugfs: 'hsr0' already exists in 'hsr' [ 75.083661][ T6981] Cannot create hsr debugfs directory [ 75.236464][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.252312][ T6981] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.264803][ T6981] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.278699][ T6981] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.304686][ T6981] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.381965][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.416967][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.427633][ T9] hid_parser_main: 19 callbacks suppressed [ 75.427663][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.441254][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.448848][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.461152][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.463740][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.468758][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.475773][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.490479][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.497925][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.505424][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.512887][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.520419][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.538599][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.545708][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.554522][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz1 [ 75.578378][ T6981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.588993][ T6981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.687215][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.809263][ T7148] netlink: 340 bytes leftover after parsing attributes in process `syz.5.1535'. [ 75.891597][ T6981] veth0_vlan: entered promiscuous mode [ 75.907756][ T6981] veth1_vlan: entered promiscuous mode [ 75.915635][ T7161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 75.922207][ T7161] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.927631][ T6981] veth0_macvtap: entered promiscuous mode [ 75.929743][ T7161] vhci_hcd vhci_hcd.0: Device attached [ 75.940605][ T6981] veth1_macvtap: entered promiscuous mode [ 75.942306][ T7163] loop5: detected capacity change from 0 to 1024 [ 75.958045][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.970149][ T7163] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 75.981235][ T7163] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 75.996227][ T7165] vhci_hcd: connection closed [ 76.000055][ T1436] vhci_hcd: stop threads [ 76.009111][ T1436] vhci_hcd: release socket [ 76.013571][ T1436] vhci_hcd: disconnect device [ 76.022506][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.032220][ T7163] JBD2: no valid journal superblock found [ 76.038040][ T7163] EXT4-fs (loop5): Could not load journal inode [ 76.050373][ T6363] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.069518][ T6363] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.081588][ T7163] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 76.100122][ T6363] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.109855][ T6363] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.154555][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 76.208038][ T7180] sctp: [Deprecated]: syz.7.1546 (pid 7180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.208038][ T7180] Use struct sctp_sack_info instead [ 76.271456][ T7182] vhci_hcd: invalid port number 96 [ 76.276723][ T7182] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 76.288008][ T7194] loop7: detected capacity change from 0 to 256 [ 76.302310][ T7194] msdos: Bad value for 'fmask' [ 76.341533][ T7200] netlink: 'syz.5.1554': attribute type 10 has an invalid length. [ 76.349470][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1554'. [ 76.353694][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 76.367608][ T7202] loop7: detected capacity change from 0 to 512 [ 76.374348][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 76.377377][ T7200] dummy0: entered promiscuous mode [ 76.389662][ T7200] bridge0: port 3(dummy0) entered blocking state [ 76.396187][ T7200] bridge0: port 3(dummy0) entered disabled state [ 76.417935][ T7200] dummy0: entered allmulticast mode [ 76.420922][ T7202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.437178][ T7202] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.458502][ T7200] bridge0: port 3(dummy0) entered blocking state [ 76.464947][ T7200] bridge0: port 3(dummy0) entered forwarding state [ 76.483501][ T6981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.503473][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1564'. [ 76.515162][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz1 [ 76.537386][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1564'. [ 76.694457][ T7239] loop5: detected capacity change from 0 to 512 [ 76.703349][ T7239] EXT4-fs (loop5): orphan cleanup on readonly fs [ 76.710739][ T7239] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1571: bad orphan inode 13 [ 76.723253][ T7239] ext4_test_bit(bit=12, block=18) = 1 [ 76.728760][ T7239] is_bad_inode(inode)=0 [ 76.733007][ T7239] NEXT_ORPHAN(inode)=2130706432 [ 76.737914][ T7239] max_ino=32 [ 76.741439][ T7239] i_nlink=1 [ 76.745300][ T7239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.816089][ T7237] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1572'. [ 76.848953][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.908226][ T7252] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 76.914919][ T7252] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.922695][ T7252] vhci_hcd vhci_hcd.0: Device attached [ 76.929670][ T7253] vhci_hcd: connection closed [ 76.930080][ T6363] vhci_hcd: stop threads [ 76.939421][ T6363] vhci_hcd: release socket [ 76.943843][ T6363] vhci_hcd: disconnect device [ 77.039901][ T7260] bridge_slave_0: left allmulticast mode [ 77.045639][ T7260] bridge_slave_0: left promiscuous mode [ 77.051434][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.127942][ T7268] loop5: detected capacity change from 0 to 1024 [ 77.134954][ T7268] EXT4-fs: Ignoring removed oldalloc option [ 77.141039][ T7268] EXT4-fs: Ignoring removed bh option [ 77.148205][ T7260] bridge_slave_1: left allmulticast mode [ 77.154068][ T7260] bridge_slave_1: left promiscuous mode [ 77.159955][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.172249][ T7260] bond0: (slave bond_slave_0): Releasing backup interface [ 77.175161][ T7271] sd 0:0:1:0: device reset [ 77.184864][ T7260] bond_slave_0: left promiscuous mode [ 77.185776][ T7268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.206785][ T7260] bond0: (slave bond_slave_1): Releasing backup interface [ 77.216894][ T7260] bond_slave_1: left promiscuous mode [ 77.226975][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.227913][ T7260] team0: Port device team_slave_0 removed [ 77.244967][ T7260] team0: Port device team_slave_1 removed [ 77.251700][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.259146][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.267729][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.275153][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.364332][ T7276] loop0: detected capacity change from 0 to 256 [ 77.376193][ T7276] msdos: Bad value for 'fmask' [ 77.401786][ T7283] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 77.408371][ T7283] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.416031][ T7283] vhci_hcd vhci_hcd.0: Device attached [ 77.427748][ T7283] loop7: detected capacity change from 0 to 512 [ 77.452128][ T7283] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.459541][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 77.475054][ T7283] EXT4-fs (loop7): mount failed [ 77.491555][ T7284] vhci_hcd: connection closed [ 77.491878][ T6424] vhci_hcd: stop threads [ 77.500947][ T6424] vhci_hcd: release socket [ 77.505561][ T6424] vhci_hcd: disconnect device [ 77.513983][ T7295] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.785726][ T7316] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 77.792285][ T7316] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.799856][ T7316] vhci_hcd vhci_hcd.0: Device attached [ 77.808066][ T7318] vhci_hcd: connection closed [ 77.808384][ T6363] vhci_hcd: stop threads [ 77.817545][ T6363] vhci_hcd: release socket [ 77.822030][ T6363] vhci_hcd: disconnect device [ 78.071836][ T7331] siw: device registration error -23 [ 78.591433][ T7370] loop1: detected capacity change from 0 to 128 [ 78.603644][ T7370] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.611823][ T7370] FAT-fs (loop1): Filesystem has been set read-only [ 78.620038][ T7370] bio_check_eod: 5 callbacks suppressed [ 78.620056][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.620056][ T7370] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 78.641457][ T7370] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.649448][ T7370] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 78.658402][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.658402][ T7370] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.672634][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.672634][ T7370] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.686664][ T7371] syz.1.1629: attempt to access beyond end of device [ 78.686664][ T7371] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.735507][ T7371] syz.1.1629: attempt to access beyond end of device [ 78.735507][ T7371] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.778961][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.778961][ T7370] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.809664][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.809664][ T7370] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.817957][ T7377] loop0: detected capacity change from 0 to 512 [ 78.826646][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.826646][ T7370] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.848652][ T7377] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.852185][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.852185][ T7370] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.889908][ T7377] EXT4-fs (loop0): 1 truncate cleaned up [ 78.900226][ T7377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.918514][ T7370] syz.1.1629: attempt to access beyond end of device [ 78.918514][ T7370] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 78.973232][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.058304][ T7385] loop0: detected capacity change from 0 to 1024 [ 79.082794][ T7385] EXT4-fs: Ignoring removed oldalloc option [ 79.088958][ T7385] EXT4-fs: Ignoring removed bh option [ 79.125999][ T7385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.184390][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.323410][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 79.323426][ T29] audit: type=1326 audit(1757054325.976:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.7.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 79.368853][ T7405] sg_write: data in/out 197376/1 bytes for SCSI command 0x26-- guessing data in; [ 79.368853][ T7405] program syz.5.1644 not setting count and/or reply_len properly [ 79.383619][ T29] audit: type=1326 audit(1757054326.006:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.7.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 79.409421][ T29] audit: type=1326 audit(1757054326.006:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.7.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 79.433016][ T29] audit: type=1326 audit(1757054326.006:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.7.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 79.658497][ T29] audit: type=1400 audit(1757054326.306:2124): avc: denied { create } for pid=7409 comm="syz.7.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.695613][ T29] audit: type=1400 audit(1757054326.316:2125): avc: denied { bind } for pid=7409 comm="syz.7.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.755934][ T7424] loop5: detected capacity change from 0 to 2048 [ 79.787773][ T7431] siw: device registration error -23 [ 79.820624][ T7424] loop5: p2 p3 p7 [ 79.854111][ T29] audit: type=1400 audit(1757054326.506:2126): avc: denied { create } for pid=7436 comm="syz.6.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.881306][ T7440] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 79.900019][ T7438] IPVS: stopping master sync thread 7440 ... [ 79.930204][ T29] audit: type=1400 audit(1757054326.506:2127): avc: denied { setopt } for pid=7436 comm="syz.6.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.167659][ T29] audit: type=1326 audit(1757054326.816:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.5.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614976ebe9 code=0x7ffc0000 [ 80.191298][ T29] audit: type=1326 audit(1757054326.816:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.5.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f614976ebe9 code=0x7ffc0000 [ 80.248701][ T7468] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 80.255286][ T7468] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.263065][ T7468] vhci_hcd vhci_hcd.0: Device attached [ 80.267567][ T7473] dummy0: left allmulticast mode [ 80.277487][ T7473] bridge0: port 3(dummy0) entered disabled state [ 80.293871][ T7473] bridge_slave_0: left allmulticast mode [ 80.299748][ T7473] bridge_slave_0: left promiscuous mode [ 80.305458][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.316812][ T7468] loop6: detected capacity change from 0 to 512 [ 80.327460][ T7473] bridge_slave_1: left allmulticast mode [ 80.333390][ T7473] bridge_slave_1: left promiscuous mode [ 80.339253][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.351611][ T7473] bond0: (slave bond_slave_0): Releasing backup interface [ 80.362709][ T7473] bond0: (slave bond_slave_1): Releasing backup interface [ 80.374673][ T7468] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.390414][ T7468] EXT4-fs (loop6): mount failed [ 80.394524][ T7473] team0: Port device team_slave_0 removed [ 80.405036][ T7473] team0: Port device team_slave_1 removed [ 80.412355][ T7469] vhci_hcd: connection closed [ 80.412557][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.424936][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.429182][ T1436] vhci_hcd: stop threads [ 80.436527][ T1436] vhci_hcd: release socket [ 80.441175][ T1436] vhci_hcd: disconnect device [ 80.449527][ T37] vhci_hcd: vhci_device speed not set [ 80.449966][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.462407][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.506056][ T7474] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 80.684831][ T7484] loop0: detected capacity change from 0 to 512 [ 80.714336][ T7484] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.739906][ T7484] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1678: invalid indirect mapped block 4294967295 (level 0) [ 80.758242][ T7484] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1678: invalid indirect mapped block 4294967295 (level 1) [ 80.775712][ T7484] EXT4-fs (loop0): 1 orphan inode deleted [ 80.781512][ T7484] EXT4-fs (loop0): 1 truncate cleaned up [ 80.787797][ T7484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.829093][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.846912][ T7496] serio: Serial port ptm0 [ 80.856116][ T7498] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.888175][ T7439] syz.1.1659 (7439) used greatest stack depth: 6376 bytes left [ 80.954143][ T7513] loop1: detected capacity change from 0 to 1024 [ 80.973781][ T7513] EXT4-fs: inline encryption not supported [ 80.986448][ T7513] EXT4-fs: Ignoring removed bh option [ 81.017907][ T7513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.068815][ T7517] Falling back ldisc for ttyS3. [ 81.123558][ T7526] loop0: detected capacity change from 0 to 128 [ 81.184240][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.277550][ T7537] blk_print_req_error: 9 callbacks suppressed [ 81.277578][ T7537] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.319982][ T7537] FAT-fs (loop15): unable to read boot sector [ 81.386649][ T7539] loop7: detected capacity change from 0 to 512 [ 81.404790][ T7539] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.419606][ T7539] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 81.429643][ T7541] netlink: '+}[@': attribute type 3 has an invalid length. [ 81.463957][ T7539] EXT4-fs (loop7): 1 truncate cleaned up [ 81.488043][ T7539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.967278][ T7564] netlink: 'syz.6.1710': attribute type 10 has an invalid length. [ 82.020199][ T7564] team0: Port device dummy0 added [ 82.026995][ T7565] netlink: 'syz.6.1710': attribute type 10 has an invalid length. [ 82.044546][ T7565] team0: Port device dummy0 removed [ 82.070899][ T7565] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.167557][ T7571] openvswitch: netlink: Message has 6 unknown bytes. [ 82.441949][ T6981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.453860][ T7593] loop1: detected capacity change from 0 to 2048 [ 82.474835][ T7593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.517489][ T7593] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.537392][ T3376] hid_parser_main: 46 callbacks suppressed [ 82.537414][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.550768][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.558187][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.621163][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.628907][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.636340][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.643802][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.651378][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.658977][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.666544][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 82.678794][ T3376] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 82.707878][ T7623] serio: Serial port ptm0 [ 82.750182][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.825698][ T7638] loop7: detected capacity change from 0 to 2048 [ 82.856847][ T7646] loop0: detected capacity change from 0 to 2048 [ 82.880824][ T7638] loop7: p2 p3 p7 [ 82.886623][ T7646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.921971][ T7646] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.958103][ T7655] SELinux: failed to load policy [ 82.984652][ T7659] 9pnet: p9_errstr2errno: server reported unknown error [ 83.065861][ T7669] __nla_validate_parse: 11 callbacks suppressed [ 83.065881][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 83.093731][ T7672] tipc: Started in network mode [ 83.098718][ T7672] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 83.110047][ T7672] tipc: Enabled bearer , priority 10 [ 83.131001][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.140691][ T7669] ip6gre1: entered allmulticast mode [ 83.186295][ T7677] SELinux: security policydb version 17 (MLS) not backwards compatible [ 83.202851][ T7677] SELinux: failed to load policy [ 83.213270][ T7679] netlink: 'syz.6.1765': attribute type 10 has an invalid length. [ 83.221687][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1765'. [ 83.459501][ T37] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 83.895075][ T7720] loop5: detected capacity change from 0 to 512 [ 83.902098][ T7720] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.909019][ T7720] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.920380][ T7723] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 83.921020][ T7720] EXT4-fs (loop5): 1 truncate cleaned up [ 83.926987][ T7723] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 83.933608][ T7720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.940418][ T7723] vhci_hcd vhci_hcd.0: Device attached [ 83.981481][ T7723] loop1: detected capacity change from 0 to 512 [ 84.000466][ T7723] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.038900][ T7723] EXT4-fs (loop1): mount failed [ 84.052894][ T7735] netlink: 'syz.7.1788': attribute type 10 has an invalid length. [ 84.060809][ T7735] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1788'. [ 84.076353][ T7735] team0: Port device geneve1 added [ 84.080629][ T7724] vhci_hcd: connection closed [ 84.081859][ T5027] vhci_hcd: stop threads [ 84.090891][ T5027] vhci_hcd: release socket [ 84.095364][ T5027] vhci_hcd: disconnect device [ 84.138516][ T3376] vhci_hcd: vhci_device speed not set [ 84.228507][ T37] tipc: Node number set to 4269801488 [ 84.342967][ T1436] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 84.477265][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 84.477284][ T29] audit: type=1400 audit(1757054331.126:2268): avc: denied { name_bind } for pid=7761 comm="syz.0.1799" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 84.725885][ T7774] program syz.0.1805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.902153][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.920839][ T7785] netlink: 'syz.0.1808': attribute type 10 has an invalid length. [ 84.928906][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1808'. [ 84.962845][ T7787] SELinux: failed to load policy [ 85.056281][ T29] audit: type=1326 audit(1757054331.706:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.080373][ T29] audit: type=1326 audit(1757054331.706:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.119703][ T29] audit: type=1326 audit(1757054331.736:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.143537][ T29] audit: type=1326 audit(1757054331.736:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.167274][ T29] audit: type=1326 audit(1757054331.736:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.190939][ T29] audit: type=1326 audit(1757054331.736:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38c515d550 code=0x7ffc0000 [ 85.214458][ T29] audit: type=1326 audit(1757054331.746:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.236887][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1827'. [ 85.237955][ T29] audit: type=1326 audit(1757054331.746:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.270229][ T29] audit: type=1326 audit(1757054331.746:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7798 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c515ebe9 code=0x7ffc0000 [ 85.856013][ T7812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 85.862601][ T7812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.870316][ T7812] vhci_hcd vhci_hcd.0: Device attached [ 85.888744][ T7808] loop1: detected capacity change from 0 to 2048 [ 85.907539][ T7812] loop0: detected capacity change from 0 to 512 [ 85.931409][ T7821] loop5: detected capacity change from 0 to 512 [ 85.938124][ T7821] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.946794][ T7821] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.953008][ T7812] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.973409][ T7812] EXT4-fs (loop0): mount failed [ 85.974444][ T7808] Alternate GPT is invalid, using primary GPT. [ 85.984786][ T7808] loop1: p1 p2 p3 [ 85.998572][ T7821] EXT4-fs (loop5): 1 truncate cleaned up [ 86.018413][ T7821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.030974][ T7814] vhci_hcd: connection closed [ 86.031184][ T6363] vhci_hcd: stop threads [ 86.040318][ T6363] vhci_hcd: release socket [ 86.044423][ T7833] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1830'. [ 86.044757][ T6363] vhci_hcd: disconnect device [ 86.058687][ T10] vhci_hcd: vhci_device speed not set [ 86.334357][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.342061][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.387419][ T7863] loop7: detected capacity change from 0 to 164 [ 86.408142][ T7863] bio_check_eod: 7100 callbacks suppressed [ 86.408157][ T7863] syz.7.1842: attempt to access beyond end of device [ 86.408157][ T7863] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.420406][ T7856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.436378][ T7863] syz.7.1842: attempt to access beyond end of device [ 86.436378][ T7863] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.442979][ T7856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.509561][ T6354] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.519001][ T1436] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.587556][ T6354] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.630495][ T6354] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.756605][ T7878] loop0: detected capacity change from 0 to 512 [ 86.819406][ T7878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.832513][ T7882] SELinux: policydb version 0 does not match my version range 15-35 [ 86.839522][ T7878] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.858539][ T7882] SELinux: failed to load policy [ 86.907772][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.935582][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.965242][ T3376] Process accounting resumed [ 87.023415][ T7892] hub 8-0:1.0: USB hub found [ 87.028193][ T7892] hub 8-0:1.0: 8 ports detected [ 87.056604][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1858'. [ 87.213064][ T7917] loop6: detected capacity change from 0 to 128 [ 87.226970][ T7913] hub 2-0:1.0: USB hub found [ 87.244179][ T7913] hub 2-0:1.0: 8 ports detected [ 87.254597][ T7919] sd 0:0:1:0: device reset [ 87.319253][ T7923] loop5: detected capacity change from 0 to 256 [ 87.387708][ T7927] ipvlan2: entered promiscuous mode [ 87.414324][ T7927] bridge0: port 1(ipvlan2) entered blocking state [ 87.421053][ T7927] bridge0: port 1(ipvlan2) entered disabled state [ 87.427773][ T7927] ipvlan2: entered allmulticast mode [ 87.433269][ T7927] bridge0: entered allmulticast mode [ 87.442163][ T7927] ipvlan2: left allmulticast mode [ 87.447256][ T7927] bridge0: left allmulticast mode [ 87.489107][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.507166][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.616610][ T5027] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.626063][ T5027] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.667718][ T5027] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.676797][ T5027] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.691125][ T7942] loop5: detected capacity change from 0 to 128 [ 87.711488][ T5027] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.720826][ T5027] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.736037][ T5027] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.745104][ T5027] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.860379][ T3409] IPVS: starting estimator thread 0... [ 87.990088][ T1436] IPVS: stop unused estimator thread 0... [ 88.161866][ T7971] loop5: detected capacity change from 0 to 512 [ 88.173821][ T7971] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.187734][ T7972] loop7: detected capacity change from 0 to 256 [ 88.214853][ T7971] EXT4-fs (loop5): 1 truncate cleaned up [ 88.226426][ T7978] netlink: 51563 bytes leftover after parsing attributes in process `syz.6.1892'. [ 88.238553][ T7971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.305790][ T7986] pim6reg: entered allmulticast mode [ 88.334176][ T7986] pim6reg: left allmulticast mode [ 88.360189][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.381098][ T7990] loop7: detected capacity change from 0 to 512 [ 88.391031][ T7990] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.407864][ T7990] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 88.422170][ T7990] EXT4-fs (loop7): 1 truncate cleaned up [ 88.428919][ T7990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.619643][ T8010] netlink: 'syz.5.1905': attribute type 3 has an invalid length. [ 88.730127][ T8018] netlink: 51563 bytes leftover after parsing attributes in process `syz.5.1908'. [ 88.873116][ T8023] loop5: detected capacity change from 0 to 1024 [ 88.884287][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.884825][ T8023] EXT4-fs: Ignoring removed bh option [ 88.891784][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.917599][ T8023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.957703][ T4913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.966270][ T8032] loop6: detected capacity change from 0 to 512 [ 88.974230][ T8032] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.993008][ T8032] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 89.003211][ T8032] FAT-fs (loop6): Filesystem has been set read-only [ 89.077309][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.101053][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.173818][ T6354] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.204144][ T8035] loop0: detected capacity change from 0 to 8192 [ 89.218620][ T6354] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.237789][ T6354] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.268531][ T6354] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.410866][ T6981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.022994][ T8067] loop6: detected capacity change from 0 to 512 [ 90.031409][ T8067] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.032096][ T8063] bridge_slave_0: left allmulticast mode [ 90.038171][ T8067] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.043790][ T8063] bridge_slave_0: left promiscuous mode [ 90.056846][ T8067] EXT4-fs (loop6): 1 truncate cleaned up [ 90.059383][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.065588][ T8067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.086787][ T8063] bridge_slave_1: left allmulticast mode [ 90.092601][ T8063] bridge_slave_1: left promiscuous mode [ 90.099034][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.109172][ T8063] bond0: (slave bond_slave_0): Releasing backup interface [ 90.120144][ T8063] bond0: (slave bond_slave_1): Releasing backup interface [ 90.134475][ T8063] team0: Port device team_slave_0 removed [ 90.145254][ T8063] team0: Port device team_slave_1 removed [ 90.152889][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.160608][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.170219][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.177653][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.207766][ T8063] team0: Port device geneve1 removed [ 90.216094][ T8065] veth0_to_bridge: entered promiscuous mode [ 90.263925][ T8078] loop0: detected capacity change from 0 to 512 [ 90.272559][ T8078] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.305157][ T8078] EXT4-fs (loop0): 1 truncate cleaned up [ 90.332921][ T8078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.365270][ T8060] veth0_to_bridge: left promiscuous mode [ 90.378508][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 90.378527][ T29] audit: type=1400 audit(1757054337.026:2394): avc: denied { map } for pid=8077 comm="syz.0.1931" path="/379/file1/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.426856][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.497306][ T8092] loop5: detected capacity change from 0 to 512 [ 90.506256][ T8095] ALSA: seq fatal error: cannot create timer (-22) [ 90.516601][ T8092] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.1938: error while reading EA inode 32 err=-116 [ 90.538482][ T8092] EXT4-fs (loop5): Remounting filesystem read-only [ 90.545112][ T8092] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.556085][ T8092] EXT4-fs (loop5): 1 orphan inode deleted [ 90.562512][ T8092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.587340][ T8092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.733214][ T8113] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 90.753151][ T8113] SELinux: failed to load policy [ 90.759060][ T8114] SELinux: failed to load policy [ 90.792135][ T8118] netlink: 'syz.7.1951': attribute type 1 has an invalid length. [ 90.836588][ T29] audit: type=1400 audit(1757054337.486:2395): avc: denied { connect } for pid=8123 comm="syz.0.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.881873][ T8126] loop7: detected capacity change from 0 to 1024 [ 90.893823][ T8126] EXT4-fs: Ignoring removed bh option [ 90.902377][ T8126] EXT4-fs: inline encryption not supported [ 90.911861][ T8126] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.958753][ T8126] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.989299][ T8126] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1955: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.014244][ T8126] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 91.056440][ T8126] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1955: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.097844][ T8126] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 91.106814][ T8126] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.1955: Failed to acquire dquot type 0 [ 91.122571][ T8126] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 91.142220][ T8126] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1955: mark_inode_dirty error [ 91.142954][ T6253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.162822][ T8126] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 91.176667][ T8126] EXT4-fs (loop7): 1 orphan inode deleted [ 91.187745][ T8126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.202464][ T6393] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.221234][ T29] audit: type=1400 audit(1757054337.866:2396): avc: denied { relabelto } for pid=8141 comm="syz.5.1963" name="file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 91.234165][ T6393] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 91.248109][ T29] audit: type=1400 audit(1757054337.866:2397): avc: denied { associate } for pid=8141 comm="syz.5.1963" name="file0" dev="tmpfs" ino=1441 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 91.256574][ T6393] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:46: Failed to release dquot type 0 [ 91.310158][ T8126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.344002][ T8126] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz.7.1955: Invalid inode table block 1 in block_group 0 [ 91.381887][ T8126] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 91.401649][ T8126] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz.7.1955: mark_inode_dirty error [ 91.593570][ T29] audit: type=1326 audit(1757054338.246:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 91.617569][ T29] audit: type=1326 audit(1757054338.246:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 91.730361][ T29] audit: type=1326 audit(1757054338.296:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40c95aebe9 code=0x7ffc0000 [ 91.987236][ T8174] smc: net device bond0 applied user defined pnetid SYZ0 [ 91.998091][ T8174] smc: net device bond0 erased user defined pnetid SYZ0 [ 92.054104][ T8184] netlink: 'syz.5.1981': attribute type 3 has an invalid length. [ 92.210221][ T8199] loop6: detected capacity change from 0 to 8192 [ 92.367421][ T8218] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1999'. [ 92.610129][ T6393] bond0 (unregistering): Released all slaves [ 92.682049][ T6393] tipc: Disabling bearer [ 92.687204][ T6393] tipc: Left network mode [ 92.864105][ T8266] loop6: detected capacity change from 0 to 1024 [ 92.871658][ T8266] EXT4-fs: Ignoring removed bh option [ 92.877279][ T8266] EXT4-fs: inline encryption not supported [ 92.885314][ T8266] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.920224][ T8266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 92.937328][ T8266] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2016: lblock 2 mapped to illegal pblock 2 (length 1) [ 92.977388][ T8266] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2016: lblock 0 mapped to illegal pblock 48 (length 1) [ 92.997664][ T8266] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2016: Failed to acquire dquot type 0 [ 93.012902][ T8266] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 93.022181][ T8221] chnl_net:caif_netlink_parms(): no params data found [ 93.032226][ T8266] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2016: mark_inode_dirty error [ 93.044698][ T8266] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 93.057684][ T8266] EXT4-fs (loop6): 1 orphan inode deleted [ 93.070242][ T6363] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.096496][ T8266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.123648][ T6363] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:19: Failed to release dquot type 0 [ 93.147577][ T8266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.158415][ T8266] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.2016: Invalid inode table block 1 in block_group 0 [ 93.179461][ T3583] IPVS: starting estimator thread 0... [ 93.185176][ T8266] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 93.196436][ T8266] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz.6.2016: mark_inode_dirty error [ 93.208340][ T8276] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 93.215970][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.223409][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.240765][ T8221] bridge_slave_0: entered allmulticast mode [ 93.255102][ T8221] bridge_slave_0: entered promiscuous mode [ 93.312060][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.318644][ T8279] IPVS: using max 2064 ests per chain, 103200 per kthread [ 93.319258][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.364978][ T8221] bridge_slave_1: entered allmulticast mode [ 93.381591][ T8285] loop6: detected capacity change from 0 to 512 [ 93.393648][ T8221] bridge_slave_1: entered promiscuous mode [ 93.405046][ T8285] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.422496][ T8285] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 93.456271][ T8285] EXT4-fs (loop6): 1 truncate cleaned up [ 93.462481][ T8285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.502156][ T8221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.514995][ T8221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.569603][ T8221] team0: Port device team_slave_0 added [ 93.579974][ T8221] team0: Port device team_slave_1 added [ 93.639489][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.646559][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.673196][ T8221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.727954][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.735044][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.762159][ T8221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.937121][ T8221] hsr_slave_0: entered promiscuous mode [ 93.963299][ T8221] hsr_slave_1: entered promiscuous mode [ 93.989979][ T8221] debugfs: 'hsr0' already exists in 'hsr' [ 93.995779][ T8221] Cannot create hsr debugfs directory [ 94.163861][ T8324] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2039'. [ 94.175511][ T8324] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 94.189864][ T8324] 0ªî{X¹¦: entered allmulticast mode [ 94.204953][ T8324] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 94.274448][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 94.295679][ T8221] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 94.323877][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 94.333186][ T8221] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 94.353802][ T8221] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 94.378430][ T8221] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 94.472823][ T8353] loop1: detected capacity change from 0 to 512 [ 94.482814][ T6253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.486398][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.507834][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.517528][ T8353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.539364][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.546622][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.555153][ T8353] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.556769][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.573194][ T1436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.592028][ T8360] SELinux: failed to load policy [ 94.597486][ T8353] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2050: corrupted inode contents [ 94.615833][ T8221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.626460][ T8353] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2050: mark_inode_dirty error [ 94.638335][ T8353] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2050: corrupted inode contents [ 94.654727][ T8353] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2050: mark_inode_dirty error [ 94.725344][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.784120][ T8386] SELinux: failed to load policy [ 94.805366][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.806712][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.824509][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.909673][ T8403] loop1: detected capacity change from 0 to 128 [ 94.912727][ T8221] veth0_vlan: entered promiscuous mode [ 94.933149][ T8221] veth1_vlan: entered promiscuous mode [ 94.963974][ T8221] veth0_macvtap: entered promiscuous mode [ 94.980603][ T8221] veth1_macvtap: entered promiscuous mode [ 94.996941][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.009733][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.023073][ T6354] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.033436][ T6354] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.042496][ T6354] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.063627][ T6354] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.150858][ T8423] loop7: detected capacity change from 0 to 512 [ 95.171723][ T8423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.194254][ T8423] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.218542][ T8423] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2072: corrupted inode contents [ 95.222201][ T8436] loop8: detected capacity change from 0 to 128 [ 95.231183][ T8434] loop1: detected capacity change from 0 to 512 [ 95.244579][ T8423] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2072: mark_inode_dirty error [ 95.257527][ T8423] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2072: corrupted inode contents [ 95.279792][ T8434] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.283825][ T8423] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2072: mark_inode_dirty error [ 95.289001][ T8434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 95.320255][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2076: corrupted inode contents [ 95.354890][ T8434] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2076: mark_inode_dirty error [ 95.380992][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2076: corrupted inode contents [ 95.398501][ T8434] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2076: mark_inode_dirty error [ 95.412859][ T6981] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.416517][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2076: corrupted inode contents [ 95.434338][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 95.434355][ T29] audit: type=1400 audit(1757054342.066:2544): avc: denied { validate_trans } for pid=8445 comm="syz.8.2081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.472990][ T8434] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 95.501129][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2076: corrupted inode contents [ 95.523063][ T8434] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2076: mark_inode_dirty error [ 95.525069][ T29] audit: type=1400 audit(1757054342.176:2545): avc: denied { read } for pid=8458 comm="syz.6.2087" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.558658][ T29] audit: type=1400 audit(1757054342.176:2546): avc: denied { open } for pid=8458 comm="syz.6.2087" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 95.588616][ T29] audit: type=1326 audit(1757054342.226:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 95.588776][ T8434] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 95.612247][ T29] audit: type=1326 audit(1757054342.226:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 95.612293][ T29] audit: type=1326 audit(1757054342.236:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 95.670438][ T29] audit: type=1326 audit(1757054342.236:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 95.695034][ T29] audit: type=1326 audit(1757054342.336:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 95.720467][ T29] audit: type=1326 audit(1757054342.336:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 95.744024][ T29] audit: type=1326 audit(1757054342.336:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8462 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658013ebe9 code=0x7ffc0000 [ 95.751699][ T8434] EXT4-fs (loop1): 1 truncate cleaned up [ 95.777717][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2090'. [ 95.787734][ T6393] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:46: Failed to release dquot type 1 [ 95.824709][ T8434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.841067][ T8471] loop7: detected capacity change from 0 to 128 [ 95.968625][ T8487] netlink: 'syz.7.2100': attribute type 1 has an invalid length. [ 96.051954][ T3583] IPVS: starting estimator thread 0... [ 96.139680][ T8500] IPVS: using max 2448 ests per chain, 122400 per kthread [ 96.158025][ T8502] infiniband syz!: set active [ 96.162875][ T8502] infiniband syz!: added team_slave_0 [ 96.192119][ T8502] RDS/IB: syz!: added [ 96.192612][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.196311][ T8502] smc: adding ib device syz! with port count 1 [ 96.212080][ T8502] smc: ib device syz! port 1 has pnetid [ 96.458990][ T8526] loop6: detected capacity change from 0 to 2048 [ 96.511397][ T8526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.588032][ T8532] loop1: detected capacity change from 0 to 128 [ 96.601507][ T8532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 96.632814][ T8532] System zones: 1-3, 19-19, 35-36 [ 96.662210][ T8532] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 96.678540][ T8532] ext4 filesystem being mounted at /410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.789964][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.837817][ T8550] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2126'. [ 96.890395][ T8556] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2128'. [ 96.893702][ T8557] loop1: detected capacity change from 0 to 512 [ 96.908348][ T6253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.928501][ T8557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.967374][ T8557] EXT4-fs (loop1): 1 truncate cleaned up [ 97.149304][ T8593] SELinux: security policydb version 17 (MLS) not backwards compatible [ 97.157877][ T8593] SELinux: failed to load policy [ 97.456690][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2159'. [ 97.744255][ T8642] IPv6: Can't replace route, no match found [ 98.079572][ T8661] loop8: detected capacity change from 0 to 512 [ 98.086458][ T8661] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.093547][ T8661] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 98.105240][ T8661] EXT4-fs (loop8): 1 truncate cleaned up [ 98.154681][ T8671] IPv6: Can't replace route, no match found [ 98.263040][ T8680] loop1: detected capacity change from 0 to 512 [ 98.284099][ T8680] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.300677][ T8680] EXT4-fs (loop1): mount failed [ 98.377070][ T8692] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.387947][ T8692] FAT-fs (loop3): unable to read boot sector [ 98.931537][ T8745] hub 9-0:1.0: USB hub found [ 98.941555][ T8745] hub 9-0:1.0: 8 ports detected [ 99.154709][ T8221] EXT4-fs unmount: 3 callbacks suppressed [ 99.154785][ T8221] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.185979][ T8770] sd 0:0:1:0: device reset [ 99.191742][ T8775] loop8: detected capacity change from 0 to 512 [ 99.207207][ T8775] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.217813][ T8775] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 99.234859][ T8775] EXT4-fs (loop8): 1 truncate cleaned up [ 99.241423][ T8775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.261839][ T8783] batadv_slave_0: entered promiscuous mode [ 99.272502][ T8783] syz_tun: entered promiscuous mode [ 99.425736][ T8807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8807 comm=syz.7.2208 [ 100.015427][ T8775] ================================================================== [ 100.023554][ T8775] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 100.031663][ T8775] [ 100.034000][ T8775] write to 0xffff88811824fbe8 of 8 bytes by task 8795 on cpu 1: [ 100.041696][ T8775] filemap_splice_read+0x4f4/0x740 [ 100.046858][ T8775] ext4_file_splice_read+0x8f/0xb0 [ 100.052050][ T8775] splice_direct_to_actor+0x26f/0x680 [ 100.057468][ T8775] do_splice_direct+0xda/0x150 [ 100.062272][ T8775] do_sendfile+0x380/0x650 [ 100.066748][ T8775] __x64_sys_sendfile64+0x105/0x150 [ 100.072027][ T8775] x64_sys_call+0x2bb0/0x2ff0 [ 100.076734][ T8775] do_syscall_64+0xd2/0x200 [ 100.081278][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.087231][ T8775] [ 100.089618][ T8775] write to 0xffff88811824fbe8 of 8 bytes by task 8775 on cpu 0: [ 100.097461][ T8775] filemap_splice_read+0x4f4/0x740 [ 100.102598][ T8775] ext4_file_splice_read+0x8f/0xb0 [ 100.107772][ T8775] splice_direct_to_actor+0x26f/0x680 [ 100.113350][ T8775] do_splice_direct+0xda/0x150 [ 100.118148][ T8775] do_sendfile+0x380/0x650 [ 100.122605][ T8775] __x64_sys_sendfile64+0x105/0x150 [ 100.127838][ T8775] x64_sys_call+0x2bb0/0x2ff0 [ 100.132549][ T8775] do_syscall_64+0xd2/0x200 [ 100.137135][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.143701][ T8775] [ 100.146091][ T8775] value changed: 0x00000000000038fc -> 0x000000000000390a [ 100.153511][ T8775] [ 100.155869][ T8775] Reported by Kernel Concurrency Sanitizer on: [ 100.162139][ T8775] CPU: 0 UID: 0 PID: 8775 Comm: syz.8.2198 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.171985][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.182419][ T8775] ================================================================== [ 100.228240][ T8221] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.