last executing test programs: 3.626668639s ago: executing program 2 (id=2830): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsn(&(0x7f00000000c0), 0xc2, 0x400000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.39615661s ago: executing program 2 (id=2831): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2) 2.588263885s ago: executing program 2 (id=2840): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)=r1}, 0x20) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 2.569176895s ago: executing program 2 (id=2841): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0xfb4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00!\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2000000) 2.356778316s ago: executing program 0 (id=2845): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.68219954s ago: executing program 4 (id=2853): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:', r0}) 1.64884954s ago: executing program 4 (id=2854): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsn(&(0x7f00000000c0), 0xc2, 0x400000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.393442442s ago: executing program 3 (id=2858): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0xfb4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00!\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2000000) 1.379528732s ago: executing program 4 (id=2859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 1.224639843s ago: executing program 4 (id=2861): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) sendfile(r0, r0, 0x0, 0x100000000) 962.569414ms ago: executing program 4 (id=2863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) r3 = dup(r2) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 912.714354ms ago: executing program 4 (id=2865): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0xfb4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00!\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2000000) 626.827396ms ago: executing program 1 (id=2870): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000300012800b00010008000000000000001f00028008000500", @ANYRES32=0x0, @ANYBLOB="04001400"], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x2}, &(0x7f0000000580)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 609.731807ms ago: executing program 1 (id=2871): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3db", 0x4f) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x1000d041) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000140)=[{&(0x7f0000000680)="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", 0x15f}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x1, 0xb, 0x9, 0x2, 0x4, "3bc9a3558fc50251a1a8a1000000ddff00", 0x3, 0xcb}) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x6) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000a3472d"]) 589.846267ms ago: executing program 1 (id=2872): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:', r0}) 574.355256ms ago: executing program 1 (id=2873): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 559.659907ms ago: executing program 3 (id=2874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=@v1={0x2, "815d9acb78721bf3"}, 0x9, 0x1) sysinfo(&(0x7f0000000240)=""/25) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x7, 0x2, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x7800, 0xa212, 0x5}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) read(r4, &(0x7f00000012c0)=""/109, 0x6d) r5 = socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 552.773436ms ago: executing program 1 (id=2875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000108500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) r3 = dup(r2) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 468.586227ms ago: executing program 1 (id=2876): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsn(&(0x7f00000000c0), 0xc2, 0x400000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 385.761017ms ago: executing program 3 (id=2877): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) socket(0x40000000015, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 240.468029ms ago: executing program 3 (id=2878): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000300012800b00010008000000000000001f00028008000500", @ANYRES32=0x0, @ANYBLOB="04001400"], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x2}, &(0x7f0000000580)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 139.701299ms ago: executing program 0 (id=2879): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000700)='rpc_xdr_alignment\x00', r0, 0x0, 0x14}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x0, 0xcdc2, 0x1}, &(0x7f00000003c0)) 123.803279ms ago: executing program 2 (id=2880): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x10000}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 118.123109ms ago: executing program 3 (id=2881): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa7e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x80, 0x2}, 0x50) fsetxattr$security_evm(r2, &(0x7f0000000080), &(0x7f0000000200)=@v1={0x2, "815d9acb78721bf3"}, 0x9, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) sysinfo(&(0x7f0000000240)=""/25) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x7, 0x2, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x7800, 0xa212, 0x5}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 72.778499ms ago: executing program 0 (id=2882): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 72.37829ms ago: executing program 0 (id=2883): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3db", 0x4f) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x1000d041) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x18) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000140)=[{&(0x7f0000000680)="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", 0x15f}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x1, 0xb, 0x9, 0x2, 0x4, "3bc9a3558fc50251a1a8a1000000ddff00", 0x3, 0xcb}) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x6) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000a3472d"]) 45.968159ms ago: executing program 0 (id=2884): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:', r0}) 17.993219ms ago: executing program 0 (id=2885): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0xfb4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00!\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2000000) 5.64093ms ago: executing program 2 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000000200)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1, 0x9, 0x2, 0x0, 0x1, 0x1}, 0x50) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x211, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) close(r2) 0s ago: executing program 3 (id=2887): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="000000000000000004ff7b2234b115a7bd08cafe13f81343d3fe5efb", 0x1c}, {0x0}], 0x2, 0x4, 0xff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000"], 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair(0x28, 0x5, 0x28, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="070000000800000000000000d9000000000000005e0e9d5211c00e2c947a3f9b", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r4, @ANYRESDEC=r0], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="000000010000000000000048f2877e0000b337c8c6dae899f27530f3637d550970a5124f2e143fc733c9664bee212a34752c165f85666826987dc080597ce21d3b351ced37ca084483af7fc3d12200496520e5204f10e8fde1f5140afd3dc5801bab4ba1c0e8603fb1b2bebaa15cd69cfabcab3848e4cf2db935f8050f67398c8f9e5cc144506b06afe944a7152169acccb6", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000002000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r8, r9}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='xprtrdma_frwr_dereg\x00', r7}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000013c0)=@newtaction={0x88c, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x400001, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x0, 0xda1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x800, 0x10, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x7fffffff, 0x0, 0x100000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x11f, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x497, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x2e, 0x5, 0xfffffff5, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x1000025, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x9, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x7ff, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0xd930, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x1, 0xb848, 0x6, 0x7, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0x8, 0x80000005, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0x7, 0x4, 0xf4, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00') ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000240)={r4, r7}) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r11, 0x0, 0x4}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98000282901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) kernel console output (not intermixed with test programs): iled: -110 [ 255.450584][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 255.501703][ T9677] loop1: detected capacity change from 0 to 512 [ 255.663641][ T9677] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.339974][ T9676] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 256.419905][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 256.522793][ T9695] loop1: detected capacity change from 0 to 1024 [ 256.557767][ T9695] EXT4-fs: Ignoring removed orlov option [ 256.566043][ T9697] loop0: detected capacity change from 0 to 512 [ 256.586529][ T9697] __quota_error: 231 callbacks suppressed [ 256.586595][ T9695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.586610][ T9697] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 256.592353][ T9697] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.748048][ T9697] EXT4-fs (loop0): mount failed [ 256.927368][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.061023][ T9716] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 257.139700][ T29] audit: type=1326 audit(1761747314.870:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.211662][ T9718] tipc: Started in network mode [ 257.211694][ T9718] tipc: Node identity 061fe3981d2d, cluster identity 4711 [ 257.211753][ T9718] tipc: Enabled bearer , priority 0 [ 257.221113][ T9718] tipc: Disabling bearer [ 257.237519][ T29] audit: type=1326 audit(1761747314.891:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.237553][ T29] audit: type=1326 audit(1761747314.891:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.237632][ T29] audit: type=1326 audit(1761747314.891:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.237724][ T29] audit: type=1326 audit(1761747314.891:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.237748][ T29] audit: type=1326 audit(1761747314.891:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.237787][ T29] audit: type=1326 audit(1761747314.891:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.237805][ T29] audit: type=1326 audit(1761747314.891:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9717 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 257.237829][ T29] audit: type=1400 audit(1761747314.901:4699): avc: denied { execute } for pid=9717 comm="syz.1.2036" name="cgroup" dev="tmpfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 258.143675][ T9725] loop2: detected capacity change from 0 to 128 [ 258.216760][ T9728] bio_check_eod: 125063 callbacks suppressed [ 258.216775][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.216775][ T9728] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 258.216819][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.216819][ T9728] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 258.216848][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.216848][ T9728] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 258.216934][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.216934][ T9728] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 258.216976][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.216976][ T9728] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 258.217009][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.217009][ T9728] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 258.217066][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.217066][ T9728] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 258.217099][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.217099][ T9728] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 258.217135][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.217135][ T9728] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 258.217185][ T9728] syz.2.2038: attempt to access beyond end of device [ 258.217185][ T9728] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 259.227895][ T9742] loop2: detected capacity change from 0 to 512 [ 259.334682][ T9742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.336329][ T9742] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.2043: No space for directory leaf checksum. Please run e2fsck -D. [ 259.336422][ T9742] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2043: checksumming directory block 0 [ 259.715473][ T9749] atomic_op ffff888120371d28 conn xmit_atomic 0000000000000000 [ 259.752326][ T9753] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 259.928531][ T9756] loop4: detected capacity change from 0 to 512 [ 259.949637][ T9756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.951156][ T9756] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.2047: No space for directory leaf checksum. Please run e2fsck -D. [ 259.951236][ T9756] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.2047: checksumming directory block 0 [ 260.139575][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.149330][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.191279][ T9778] loop4: detected capacity change from 0 to 1024 [ 260.197901][ T9771] loop0: detected capacity change from 0 to 1024 [ 260.204546][ T9771] EXT4-fs: Ignoring removed orlov option [ 260.213890][ T9778] EXT4-fs: Ignoring removed orlov option [ 260.223509][ T9778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.249735][ T9771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.393796][ T9807] loop2: detected capacity change from 0 to 128 [ 260.487326][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.514856][ T9816] loop4: detected capacity change from 0 to 512 [ 260.527505][ T9816] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.545486][ T9807] buffer_io_error: 103830 callbacks suppressed [ 260.545501][ T9807] Buffer I/O error on dev loop2, logical block 305, async page read [ 260.559903][ T9807] Buffer I/O error on dev loop2, logical block 306, async page read [ 260.568050][ T9807] Buffer I/O error on dev loop2, logical block 307, async page read [ 260.595580][ T9807] Buffer I/O error on dev loop2, logical block 308, async page read [ 260.603681][ T9807] Buffer I/O error on dev loop2, logical block 309, async page read [ 260.620992][ T9816] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 260.633632][ T9807] Buffer I/O error on dev loop2, logical block 310, async page read [ 260.652901][ T9807] Buffer I/O error on dev loop2, logical block 311, async page read [ 260.661335][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 260.670391][ T9807] Buffer I/O error on dev loop2, logical block 312, async page read [ 260.679296][ T9807] Buffer I/O error on dev loop2, logical block 305, async page read [ 260.695148][ T9807] Buffer I/O error on dev loop2, logical block 306, async page read [ 260.707237][ T9828] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 260.742365][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.825168][ T9844] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 261.068724][ T9865] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 261.415587][ T9877] program syz.0.2089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.542720][ T9879] loop0: detected capacity change from 0 to 8192 [ 261.704186][ T9884] loop0: detected capacity change from 0 to 1024 [ 261.718171][ T9884] EXT4-fs: Ignoring removed orlov option [ 261.729211][ T9884] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 261.750039][ T9884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.019836][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.334199][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 262.358959][ T9903] loop0: detected capacity change from 0 to 128 [ 262.434093][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 262.434111][ T29] audit: type=1400 audit(1761747320.340:4757): avc: denied { setopt } for pid=9892 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.459648][ T29] audit: type=1400 audit(1761747320.340:4758): avc: denied { write } for pid=9892 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.494696][ T9899] loop1: detected capacity change from 0 to 512 [ 262.543443][ T9899] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.608107][ T9899] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 262.633868][ T9899] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 262.701372][ T29] audit: type=1400 audit(1761747320.707:4759): avc: denied { write } for pid=9892 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 262.749603][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 262.871762][ T9910] infiniband syz!: set active [ 262.876473][ T9910] infiniband syz!: added team_slave_0 [ 262.933823][ T9910] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 262.934040][ T9910] infiniband syz!: Couldn't open port 1 [ 262.987804][ T9908] bio_check_eod: 48849 callbacks suppressed [ 262.987817][ T9908] syz.0.2098: attempt to access beyond end of device [ 262.987817][ T9908] loop0: rw=0, sector=306, nr_sectors = 1 limit=128 [ 263.007747][ T9910] RDS/IB: syz!: added [ 263.011876][ T9910] smc: adding ib device syz! with port count 1 [ 263.028598][ T9910] smc: ib device syz! port 1 has no pnetid [ 263.039996][ T29] audit: type=1400 audit(1761747321.064:4760): avc: denied { read } for pid=9914 comm="syz.3.2100" path="socket:[32746]" dev="sockfs" ino=32746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.081329][ T9908] syz.0.2098: attempt to access beyond end of device [ 263.081329][ T9908] loop0: rw=0, sector=307, nr_sectors = 1 limit=128 [ 263.114334][ T9908] syz.0.2098: attempt to access beyond end of device [ 263.114334][ T9908] loop0: rw=0, sector=308, nr_sectors = 1 limit=128 [ 263.183957][ T9908] syz.0.2098: attempt to access beyond end of device [ 263.183957][ T9908] loop0: rw=0, sector=309, nr_sectors = 1 limit=128 [ 263.233694][ T9908] syz.0.2098: attempt to access beyond end of device [ 263.233694][ T9908] loop0: rw=0, sector=310, nr_sectors = 1 limit=128 [ 263.328872][ T9908] syz.0.2098: attempt to access beyond end of device [ 263.328872][ T9908] loop0: rw=0, sector=311, nr_sectors = 1 limit=128 [ 263.355169][ T9908] syz.0.2098: attempt to access beyond end of device [ 263.355169][ T9908] loop0: rw=0, sector=312, nr_sectors = 1 limit=128 [ 263.419789][ T9921] loop2: detected capacity change from 0 to 1024 [ 263.432672][ T9921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.440058][ T1662] kworker/u8:6: attempt to access beyond end of device [ 263.440058][ T1662] loop0: rw=1, sector=632, nr_sectors = 1 limit=128 [ 263.499366][ T9923] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 263.518764][ T9921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.550076][ T9929] loop0: detected capacity change from 0 to 128 [ 263.569333][ T9929] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 263.655807][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.701275][ T29] audit: type=1326 audit(1761747321.757:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 263.724773][ T9938] loop0: detected capacity change from 0 to 1024 [ 263.736225][ T9938] EXT4-fs: Ignoring removed orlov option [ 263.746391][ T29] audit: type=1326 audit(1761747321.778:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 263.770036][ T29] audit: type=1326 audit(1761747321.778:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 263.793403][ T29] audit: type=1326 audit(1761747321.778:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 263.816781][ T29] audit: type=1326 audit(1761747321.789:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 263.842646][ T9938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.023959][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.033219][ T9953] loop4: detected capacity change from 0 to 1024 [ 264.039941][ T9953] EXT4-fs: Ignoring removed orlov option [ 264.060110][ T9953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.236945][ T9967] loop0: detected capacity change from 0 to 128 [ 264.262254][ T9967] syz.0.2117: attempt to access beyond end of device [ 264.262254][ T9967] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 264.291134][ T9967] syz.0.2117: attempt to access beyond end of device [ 264.291134][ T9967] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 264.464751][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.650882][ T9978] loop4: detected capacity change from 0 to 1024 [ 264.666280][ T9978] EXT4-fs: Ignoring removed orlov option [ 264.683840][ T9978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.977661][ T9981] loop2: detected capacity change from 0 to 512 [ 264.988240][ T9981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.102904][ T9981] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.2122: No space for directory leaf checksum. Please run e2fsck -D. [ 265.118260][ T9981] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2122: checksumming directory block 0 [ 265.223064][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.249277][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.333766][ T9997] loop4: detected capacity change from 0 to 512 [ 265.348655][ T9997] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.426323][ T9997] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.504973][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 266.227755][T10024] loop0: detected capacity change from 0 to 1024 [ 266.228196][T10024] EXT4-fs: Ignoring removed orlov option [ 266.245710][T10024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.428373][T10029] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 266.680422][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.860420][T10047] loop0: detected capacity change from 0 to 1024 [ 266.882461][T10047] EXT4-fs: Ignoring removed orlov option [ 266.895595][T10047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.908687][T10052] program syz.4.2145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.926054][T10055] loop2: detected capacity change from 0 to 2048 [ 266.976209][T10055] Alternate GPT is invalid, using primary GPT. [ 266.982565][T10055] loop2: p1 p2 p3 [ 266.991244][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.055968][T10062] loop1: detected capacity change from 0 to 512 [ 267.077565][T10062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.125030][T10062] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.2149: No space for directory leaf checksum. Please run e2fsck -D. [ 267.125093][T10062] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.2149: checksumming directory block 0 [ 267.338465][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.850884][T10099] loop4: detected capacity change from 0 to 1024 [ 267.871322][T10099] EXT4-fs: Ignoring removed orlov option [ 267.894652][T10099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.959054][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.154243][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 268.154255][ T29] audit: type=1326 audit(1761747326.429:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.184038][ T29] audit: type=1326 audit(1761747326.429:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.207607][ T29] audit: type=1326 audit(1761747326.429:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.231072][ T29] audit: type=1326 audit(1761747326.429:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.254541][ T29] audit: type=1326 audit(1761747326.429:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.446712][T10117] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 268.489746][ T29] audit: type=1326 audit(1761747326.566:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.513180][ T29] audit: type=1326 audit(1761747326.566:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.536776][ T29] audit: type=1326 audit(1761747326.566:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.560350][ T29] audit: type=1326 audit(1761747326.566:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.583957][ T29] audit: type=1326 audit(1761747326.566:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.2.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 268.639752][T10126] loop4: detected capacity change from 0 to 128 [ 268.646660][T10126] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 269.496471][T10158] loop0: detected capacity change from 0 to 512 [ 269.588010][T10158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.648458][T10158] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.2185: No space for directory leaf checksum. Please run e2fsck -D. [ 269.663829][T10158] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2185: checksumming directory block 0 [ 269.805371][T10169] loop4: detected capacity change from 0 to 512 [ 269.844292][T10169] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.889021][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.959621][T10180] loop1: detected capacity change from 0 to 1024 [ 269.975032][T10180] EXT4-fs: Ignoring removed orlov option [ 269.994037][T10180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.092367][T10169] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 270.158951][T10185] loop0: detected capacity change from 0 to 128 [ 270.179610][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 270.198970][T10185] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 270.273933][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 270.490604][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.458651][T10215] loop0: detected capacity change from 0 to 512 [ 271.466722][T10215] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.520439][T10215] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 271.606117][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 272.196601][ T3514] Bluetooth: hci0: command 0x1003 tx timeout [ 272.202747][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 273.834137][T10249] program syz.1.2215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.911581][T10252] loop1: detected capacity change from 0 to 1024 [ 273.918301][T10252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.933686][T10252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.979674][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.462192][T10276] loop0: detected capacity change from 0 to 1024 [ 274.497531][T10276] EXT4-fs: Ignoring removed orlov option [ 274.539087][T10276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.760190][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.772588][T10282] loop4: detected capacity change from 0 to 1024 [ 274.779795][T10282] EXT4-fs: Ignoring removed orlov option [ 274.792664][T10285] loop0: detected capacity change from 0 to 512 [ 274.800710][T10282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.802677][T10285] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.863708][T10285] __quota_error: 104 callbacks suppressed [ 274.863722][T10285] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 274.902299][T10285] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 275.006601][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 275.126312][T10300] loop0: detected capacity change from 0 to 512 [ 275.135407][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.153475][ T29] audit: type=1326 audit(1761747333.779:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.179835][ T29] audit: type=1326 audit(1761747333.810:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.185014][T10308] program syz.4.2234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.203550][ T29] audit: type=1326 audit(1761747333.810:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.216422][T10300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.236268][ T29] audit: type=1326 audit(1761747333.810:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.236334][ T29] audit: type=1326 audit(1761747333.810:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.295753][ T29] audit: type=1326 audit(1761747333.810:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.319238][ T29] audit: type=1326 audit(1761747333.810:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.342710][ T29] audit: type=1326 audit(1761747333.810:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.366354][ T29] audit: type=1326 audit(1761747333.810:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10303 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 275.393690][T10300] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.2233: No space for directory leaf checksum. Please run e2fsck -D. [ 275.409046][T10300] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2233: checksumming directory block 0 [ 275.452852][T10313] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 275.472318][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.711266][T10331] loop0: detected capacity change from 0 to 128 [ 275.718043][T10331] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 275.812852][T10337] loop0: detected capacity change from 0 to 512 [ 275.820840][T10337] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.848680][T10340] program syz.2.2247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.865825][T10337] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 275.897443][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 275.915783][T10343] loop2: detected capacity change from 0 to 1024 [ 275.922827][T10343] EXT4-fs: Ignoring removed orlov option [ 275.930783][T10343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.013561][T10350] loop0: detected capacity change from 0 to 1024 [ 276.020301][T10350] EXT4-fs: Ignoring removed orlov option [ 276.050011][T10350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.105413][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.140483][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.161740][T10358] loop2: detected capacity change from 0 to 128 [ 276.169214][T10358] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 276.280580][T10362] loop2: detected capacity change from 0 to 1024 [ 276.280956][T10362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.296740][T10362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.502748][T10378] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 276.506576][T10376] program syz.2.2259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.526289][T10378] vlan2: entered allmulticast mode [ 276.637417][T10381] loop2: detected capacity change from 0 to 512 [ 276.645029][T10381] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 276.996083][T10398] loop4: detected capacity change from 0 to 512 [ 277.006797][T10398] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 277.024652][T10402] loop0: detected capacity change from 0 to 128 [ 277.083420][T10405] bio_check_eod: 55176 callbacks suppressed [ 277.083474][T10405] syz.0.2269: attempt to access beyond end of device [ 277.083474][T10405] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 277.103126][T10405] syz.0.2269: attempt to access beyond end of device [ 277.103126][T10405] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 277.116875][T10405] syz.0.2269: attempt to access beyond end of device [ 277.116875][T10405] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 277.130593][T10405] syz.0.2269: attempt to access beyond end of device [ 277.130593][T10405] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 277.144144][T10405] syz.0.2269: attempt to access beyond end of device [ 277.144144][T10405] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 277.157718][T10405] syz.0.2269: attempt to access beyond end of device [ 277.157718][T10405] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 277.157935][ T3514] Bluetooth: hci0: command 0x1003 tx timeout [ 277.171424][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 277.177987][T10405] syz.0.2269: attempt to access beyond end of device [ 277.177987][T10405] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 277.197143][T10405] syz.0.2269: attempt to access beyond end of device [ 277.197143][T10405] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 277.211192][T10405] syz.0.2269: attempt to access beyond end of device [ 277.211192][T10405] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 277.224752][T10405] syz.0.2269: attempt to access beyond end of device [ 277.224752][T10405] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 277.570435][T10416] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 277.610930][T10418] loop0: detected capacity change from 0 to 1024 [ 277.649343][T10418] EXT4-fs: Ignoring removed orlov option [ 277.664318][T10416] vlan0: entered allmulticast mode [ 277.679174][T10421] loop2: detected capacity change from 0 to 1024 [ 277.701440][T10421] EXT4-fs: Ignoring removed orlov option [ 278.070812][T10439] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 278.100618][T10439] vlan0: entered allmulticast mode [ 278.212940][T10443] loop2: detected capacity change from 0 to 128 [ 278.245549][T10445] loop0: detected capacity change from 0 to 1024 [ 278.245850][T10445] EXT4-fs: Ignoring removed orlov option [ 278.874870][ T4336] Bluetooth: hci1: sending frame failed (-49) [ 278.881035][ T3514] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 279.009123][T10469] loop0: detected capacity change from 0 to 8192 [ 279.058964][T10471] loop0: detected capacity change from 0 to 1024 [ 279.065698][T10471] EXT4-fs: Ignoring removed orlov option [ 279.455412][T10481] loop0: detected capacity change from 0 to 1024 [ 279.488673][T10481] EXT4-fs: Ignoring removed orlov option [ 279.818624][T10492] loop0: detected capacity change from 0 to 1024 [ 279.825468][T10492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.196457][T10506] loop0: detected capacity change from 0 to 8192 [ 280.300331][T10513] loop0: detected capacity change from 0 to 1024 [ 280.307110][T10513] EXT4-fs: Ignoring removed orlov option [ 280.498404][T10518] loop0: detected capacity change from 0 to 1024 [ 280.511624][T10518] EXT4-fs: Ignoring removed orlov option [ 280.578214][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.585007][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 280.585038][ T29] audit: type=1326 audit(1761747339.480:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 280.623563][ T29] audit: type=1326 audit(1761747339.490:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10460 comm="syz.4.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 281.352050][T10545] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 281.380549][T10545] vlan2: entered allmulticast mode [ 281.516627][T10549] loop4: detected capacity change from 0 to 512 [ 281.559767][T10549] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 281.578035][T10549] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 281.813001][T10576] loop4: detected capacity change from 0 to 1024 [ 281.836532][T10576] EXT4-fs: Ignoring removed orlov option [ 281.841608][T10580] loop2: detected capacity change from 0 to 1024 [ 281.848754][T10580] EXT4-fs: Ignoring removed orlov option [ 282.030013][T10587] loop4: detected capacity change from 0 to 1024 [ 282.044343][T10587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.396542][T10613] loop2: detected capacity change from 0 to 1024 [ 282.405851][T10613] EXT4-fs: Ignoring removed orlov option [ 282.459859][T10620] loop1: detected capacity change from 0 to 128 [ 282.504273][T10623] loop4: detected capacity change from 0 to 1024 [ 282.511059][T10623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.624111][T10631] bio_check_eod: 8708 callbacks suppressed [ 282.624125][T10631] syz.1.2349: attempt to access beyond end of device [ 282.624125][T10631] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 282.645177][T10631] syz.1.2349: attempt to access beyond end of device [ 282.645177][T10631] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 282.659617][T10631] syz.1.2349: attempt to access beyond end of device [ 282.659617][T10631] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 282.858224][T10631] syz.1.2349: attempt to access beyond end of device [ 282.858224][T10631] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 283.096276][T10631] syz.1.2349: attempt to access beyond end of device [ 283.096276][T10631] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 283.110701][T10631] syz.1.2349: attempt to access beyond end of device [ 283.110701][T10631] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 283.136996][T10631] syz.1.2349: attempt to access beyond end of device [ 283.136996][T10631] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 283.214227][T10631] syz.1.2349: attempt to access beyond end of device [ 283.214227][T10631] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 283.240438][T10631] syz.1.2349: attempt to access beyond end of device [ 283.240438][T10631] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 283.253957][T10631] syz.1.2349: attempt to access beyond end of device [ 283.253957][T10631] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 283.267215][ T29] audit: type=1326 audit(1761747342.304:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 283.290861][ T29] audit: type=1326 audit(1761747342.304:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 283.314370][ T29] audit: type=1326 audit(1761747342.304:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 283.337914][ T29] audit: type=1326 audit(1761747342.304:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 283.361524][ T29] audit: type=1326 audit(1761747342.304:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 283.612238][T10652] loop1: detected capacity change from 0 to 128 [ 283.648187][T10652] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 283.934486][T10657] loop2: detected capacity change from 0 to 512 [ 283.998000][T10657] EXT4-fs mount: 33 callbacks suppressed [ 283.998058][T10657] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.017062][T10659] loop4: detected capacity change from 0 to 1024 [ 284.033650][T10659] EXT4-fs: Ignoring removed orlov option [ 284.047452][T10659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.063977][T10657] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 284.083211][T10657] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 284.129376][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.146186][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 284.236274][ T29] audit: type=1326 audit(1761747342.535:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.4.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 284.282033][T10664] loop2: detected capacity change from 0 to 1024 [ 284.301885][T10664] EXT4-fs: Ignoring removed orlov option [ 284.316642][T10664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.564908][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.731738][T10691] loop2: detected capacity change from 0 to 1024 [ 284.738323][T10691] EXT4-fs: Ignoring removed orlov option [ 284.750953][T10691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.882064][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.062204][T10706] loop1: detected capacity change from 0 to 1024 [ 285.062793][T10706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.114259][T10706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.147857][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.279884][T10710] loop2: detected capacity change from 0 to 1024 [ 285.280948][T10710] EXT4-fs: Ignoring removed orlov option [ 285.289445][T10710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.769126][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.919330][T10715] loop2: detected capacity change from 0 to 1024 [ 285.947092][T10715] EXT4-fs: Ignoring removed orlov option [ 285.961875][T10715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.039708][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.093694][T10727] loop1: detected capacity change from 0 to 512 [ 286.100767][T10729] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 286.119757][T10727] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.144481][T10729] vlan2: entered allmulticast mode [ 286.169187][T10727] __quota_error: 2 callbacks suppressed [ 286.169199][T10727] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 286.215185][T10727] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 286.377557][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 286.410324][T10743] loop1: detected capacity change from 0 to 1024 [ 286.418313][T10743] EXT4-fs: Ignoring removed orlov option [ 286.451829][T10743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.072315][T10769] loop4: detected capacity change from 0 to 128 [ 287.398521][T10769] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 287.937339][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.112295][ T29] audit: type=1326 audit(1761747348.425:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 289.112324][ T29] audit: type=1326 audit(1761747348.425:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 289.112422][ T29] audit: type=1326 audit(1761747348.425:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 289.112443][ T29] audit: type=1326 audit(1761747348.425:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10789 comm="syz.3.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 289.295938][T10798] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 289.339578][T10798] vlan0: entered allmulticast mode [ 289.475251][T10806] loop4: detected capacity change from 0 to 1024 [ 289.491890][T10806] EXT4-fs: Ignoring removed orlov option [ 289.516816][T10806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.623600][T10815] loop2: detected capacity change from 0 to 128 [ 289.723963][T10817] bio_check_eod: 43 callbacks suppressed [ 289.723977][T10817] syz.2.2417: attempt to access beyond end of device [ 289.723977][T10817] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 289.753068][T10817] syz.2.2417: attempt to access beyond end of device [ 289.753068][T10817] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 289.766707][T10817] syz.2.2417: attempt to access beyond end of device [ 289.766707][T10817] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 289.845176][T10817] syz.2.2417: attempt to access beyond end of device [ 289.845176][T10817] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 289.872904][T10817] syz.2.2417: attempt to access beyond end of device [ 289.872904][T10817] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 289.898398][T10817] syz.2.2417: attempt to access beyond end of device [ 289.898398][T10817] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 289.934680][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.946405][T10817] syz.2.2417: attempt to access beyond end of device [ 289.946405][T10817] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 289.965496][T10817] syz.2.2417: attempt to access beyond end of device [ 289.965496][T10817] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 289.979280][T10817] syz.2.2417: attempt to access beyond end of device [ 289.979280][T10817] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 289.993308][T10817] syz.2.2417: attempt to access beyond end of device [ 289.993308][T10817] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 290.075691][ T29] audit: type=1326 audit(1761747349.454:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.4.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 290.128998][ T29] audit: type=1326 audit(1761747349.454:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.4.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 290.152672][ T29] audit: type=1326 audit(1761747349.454:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.4.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 290.176451][ T29] audit: type=1326 audit(1761747349.454:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.4.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 290.200096][ T29] audit: type=1326 audit(1761747349.454:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10826 comm="syz.4.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 290.266768][T10833] loop0: detected capacity change from 0 to 1024 [ 290.293768][T10833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.383190][T10841] loop2: detected capacity change from 0 to 1024 [ 290.390822][T10841] EXT4-fs: Ignoring removed orlov option [ 290.428239][T10833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.442321][T10841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.466609][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.746255][T10856] loop0: detected capacity change from 0 to 1024 [ 290.770269][T10856] EXT4-fs: Ignoring removed orlov option [ 290.813294][T10855] Process accounting resumed [ 290.823890][T10856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.933213][T10860] loop4: detected capacity change from 0 to 1024 [ 290.954179][T10860] EXT4-fs: Ignoring removed orlov option [ 290.980393][T10860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.519318][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.537539][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.635530][T10867] loop0: detected capacity change from 0 to 128 [ 291.671399][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.711528][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 291.711542][ T29] audit: type=1326 audit(1761747351.155:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 291.741198][ T29] audit: type=1326 audit(1761747351.155:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 291.898054][ T29] audit: type=1326 audit(1761747351.228:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 291.921661][ T29] audit: type=1326 audit(1761747351.228:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 291.945174][ T29] audit: type=1326 audit(1761747351.228:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 292.721190][T10891] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 292.767278][T10893] program syz.4.2443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.821898][T10891] vlan2: entered allmulticast mode [ 293.536072][T10903] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 293.695408][T10903] vlan2: entered allmulticast mode [ 293.893388][ T29] audit: type=1326 audit(1761747353.454:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 293.917166][ T29] audit: type=1326 audit(1761747353.454:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 293.974328][T10921] FAULT_INJECTION: forcing a failure. [ 293.974328][T10921] name failslab, interval 1, probability 0, space 0, times 0 [ 293.987075][T10921] CPU: 0 UID: 0 PID: 10921 Comm: syz.2.2455 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.987100][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.987194][T10921] Call Trace: [ 293.987225][T10921] [ 293.987233][T10921] __dump_stack+0x1d/0x30 [ 293.987251][T10921] dump_stack_lvl+0xe8/0x140 [ 293.987268][T10921] dump_stack+0x15/0x1b [ 293.987282][T10921] should_fail_ex+0x265/0x280 [ 293.987377][T10921] should_failslab+0x8c/0xb0 [ 293.987419][T10921] kmem_cache_alloc_noprof+0x50/0x480 [ 293.987441][T10921] ? copy_fs_struct+0x31/0x110 [ 293.987471][T10921] copy_fs_struct+0x31/0x110 [ 293.987556][T10921] ksys_unshare+0x2c6/0x6d0 [ 293.987583][T10921] ? __bpf_trace_sys_enter+0x10/0x30 [ 293.987622][T10921] ? trace_sys_enter+0xd0/0xf0 [ 293.987643][T10921] __x64_sys_unshare+0x1f/0x30 [ 293.987667][T10921] x64_sys_call+0x2915/0x3000 [ 293.987687][T10921] do_syscall_64+0xd2/0x200 [ 293.987725][T10921] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.987751][T10921] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 293.987777][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.987796][T10921] RIP: 0033:0x7f780268efc9 [ 293.987868][T10921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.987886][T10921] RSP: 002b:00007f78010ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 293.987905][T10921] RAX: ffffffffffffffda RBX: 00007f78028e5fa0 RCX: 00007f780268efc9 [ 293.987918][T10921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 293.987929][T10921] RBP: 00007f78010ef090 R08: 0000000000000000 R09: 0000000000000000 [ 293.987954][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.988018][T10921] R13: 00007f78028e6038 R14: 00007f78028e5fa0 R15: 00007fff10f968a8 [ 293.988034][T10921] [ 294.226845][ T29] audit: type=1326 audit(1761747353.507:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 294.250346][ T29] audit: type=1326 audit(1761747353.507:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 294.273830][ T29] audit: type=1326 audit(1761747353.507:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 294.301285][T10923] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 294.331173][T10923] vlan0: entered allmulticast mode [ 294.462729][T10927] loop2: detected capacity change from 0 to 8192 [ 294.987471][T10940] loop2: detected capacity change from 0 to 1024 [ 295.008128][T10940] EXT4-fs: Ignoring removed orlov option [ 295.139689][T10940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.184682][T10942] loop4: detected capacity change from 0 to 512 [ 295.223602][T10942] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.256498][T10952] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 295.433747][T10952] vlan0: entered allmulticast mode [ 295.444683][T10942] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 295.469800][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 295.539239][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.651730][T10955] loop4: detected capacity change from 0 to 1024 [ 295.665223][T10955] EXT4-fs: Ignoring removed orlov option [ 295.682658][T10955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.565683][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.162241][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 297.162255][ T29] audit: type=1326 audit(1761747356.887:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 297.229675][ T29] audit: type=1326 audit(1761747356.919:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 297.253224][ T29] audit: type=1326 audit(1761747356.919:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 297.378364][T10982] loop4: detected capacity change from 0 to 128 [ 297.409770][T10982] bio_check_eod: 6635 callbacks suppressed [ 297.409809][T10982] syz.4.2477: attempt to access beyond end of device [ 297.409809][T10982] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 297.455782][T10986] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 297.467903][T10982] syz.4.2477: attempt to access beyond end of device [ 297.467903][T10982] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 297.498176][T10986] vlan0: entered allmulticast mode [ 297.514125][T10982] syz.4.2477: attempt to access beyond end of device [ 297.514125][T10982] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 297.530878][T10987] syz.4.2477: attempt to access beyond end of device [ 297.530878][T10987] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 297.544639][T10982] syz.4.2477: attempt to access beyond end of device [ 297.544639][T10982] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 297.558144][T10987] syz.4.2477: attempt to access beyond end of device [ 297.558144][T10987] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 297.587724][T10991] program syz.1.2481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.598539][T10982] syz.4.2477: attempt to access beyond end of device [ 297.598539][T10982] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 297.601034][T10987] syz.4.2477: attempt to access beyond end of device [ 297.601034][T10987] loop4: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 297.621957][T10982] syz.4.2477: attempt to access beyond end of device [ 297.621957][T10982] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 297.664310][T10987] syz.4.2477: attempt to access beyond end of device [ 297.664310][T10987] loop4: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 297.778810][T11011] loop1: detected capacity change from 0 to 128 [ 297.785631][T11011] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 298.179428][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 298.208920][ T29] audit: type=1326 audit(1761747357.990:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 298.346066][ T29] audit: type=1326 audit(1761747357.990:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.2.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780268efc9 code=0x7ffc0000 [ 298.496830][ T29] audit: type=1326 audit(1761747358.294:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.3.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 298.520464][ T29] audit: type=1326 audit(1761747358.294:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.3.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 298.544019][ T29] audit: type=1326 audit(1761747358.294:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.3.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 298.567569][ T29] audit: type=1326 audit(1761747358.294:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.3.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 298.591072][ T29] audit: type=1326 audit(1761747358.294:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz.3.2498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 298.754588][T11039] loop4: detected capacity change from 0 to 128 [ 298.781102][T11039] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 298.859771][T11043] loop4: detected capacity change from 0 to 512 [ 298.869707][T11047] loop0: detected capacity change from 0 to 128 [ 298.902418][T11043] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.944715][T11043] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 298.992968][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 299.071139][T11047] buffer_io_error: 88047 callbacks suppressed [ 299.071164][T11047] Buffer I/O error on dev loop0, logical block 305, async page read [ 299.112753][T11047] Buffer I/O error on dev loop0, logical block 306, async page read [ 299.138336][T11056] tipc: Started in network mode [ 299.143309][T11056] tipc: Node identity ac14140f, cluster identity 4711 [ 299.150237][T11047] Buffer I/O error on dev loop0, logical block 307, async page read [ 299.158511][T11047] Buffer I/O error on dev loop0, logical block 308, async page read [ 299.167029][T11056] tipc: New replicast peer: 255.255.255.83 [ 299.173283][T11056] tipc: Enabled bearer , priority 10 [ 299.204293][T11059] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 299.322782][T11063] vlan0: entered allmulticast mode [ 299.325291][T11047] Buffer I/O error on dev loop0, logical block 309, async page read [ 299.341223][T11047] Buffer I/O error on dev loop0, logical block 310, async page read [ 299.349359][T11047] Buffer I/O error on dev loop0, logical block 311, async page read [ 299.357489][T11047] Buffer I/O error on dev loop0, logical block 312, async page read [ 299.366326][T11047] Buffer I/O error on dev loop0, logical block 305, async page read [ 299.374627][T11047] Buffer I/O error on dev loop0, logical block 306, async page read [ 299.635923][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2516'. [ 300.626286][ T9] tipc: Node number set to 2886997007 [ 301.779087][T11087] FAULT_INJECTION: forcing a failure. [ 301.779087][T11087] name failslab, interval 1, probability 0, space 0, times 0 [ 301.791803][T11087] CPU: 0 UID: 0 PID: 11087 Comm: syz.1.2519 Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.791829][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.791839][T11087] Call Trace: [ 301.791844][T11087] [ 301.791851][T11087] __dump_stack+0x1d/0x30 [ 301.791922][T11087] dump_stack_lvl+0xe8/0x140 [ 301.792025][T11087] dump_stack+0x15/0x1b [ 301.792043][T11087] should_fail_ex+0x265/0x280 [ 301.792062][T11087] should_failslab+0x8c/0xb0 [ 301.792089][T11087] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 301.792207][T11087] ? dup_task_struct+0x70/0x6b0 [ 301.792235][T11087] dup_task_struct+0x70/0x6b0 [ 301.792259][T11087] ? _parse_integer+0x27/0x40 [ 301.792305][T11087] copy_process+0x399/0x2000 [ 301.792373][T11087] ? kstrtouint+0x76/0xc0 [ 301.792396][T11087] ? kstrtouint_from_user+0x9f/0xf0 [ 301.792446][T11087] ? __rcu_read_unlock+0x4f/0x70 [ 301.792470][T11087] kernel_clone+0x16c/0x5c0 [ 301.792491][T11087] ? vfs_write+0x7e8/0x960 [ 301.792589][T11087] __x64_sys_clone+0xe6/0x120 [ 301.792618][T11087] x64_sys_call+0x119c/0x3000 [ 301.792698][T11087] do_syscall_64+0xd2/0x200 [ 301.792716][T11087] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.792738][T11087] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 301.792760][T11087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.792805][T11087] RIP: 0033:0x7f362a9defc9 [ 301.792820][T11087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.792835][T11087] RSP: 002b:00007f362943efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 301.792854][T11087] RAX: ffffffffffffffda RBX: 00007f362ac35fa0 RCX: 00007f362a9defc9 [ 301.792867][T11087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 301.792934][T11087] RBP: 00007f362943f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.792945][T11087] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 301.792955][T11087] R13: 00007f362ac36038 R14: 00007f362ac35fa0 R15: 00007ffd26e2de98 [ 301.792973][T11087] [ 302.228549][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 302.228625][ T29] audit: type=1326 audit(1761747362.169:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.258358][ T29] audit: type=1326 audit(1761747362.169:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.282058][ T29] audit: type=1326 audit(1761747362.169:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.305594][ T29] audit: type=1326 audit(1761747362.169:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.329064][ T29] audit: type=1326 audit(1761747362.179:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.352425][ T29] audit: type=1326 audit(1761747362.179:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.375945][ T29] audit: type=1326 audit(1761747362.179:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.399540][ T29] audit: type=1326 audit(1761747362.179:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.423061][ T29] audit: type=1326 audit(1761747362.179:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.446585][ T29] audit: type=1326 audit(1761747362.179:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.0.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 302.775495][T11096] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 302.799729][T11096] vlan0: entered allmulticast mode [ 302.994473][T11109] loop1: detected capacity change from 0 to 512 [ 303.002286][T11109] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.104122][T11109] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 305.389896][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 305.797221][T11141] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 305.861592][T11141] vlan0: entered allmulticast mode [ 306.000482][T11149] loop1: detected capacity change from 0 to 128 [ 306.022007][T11148] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 306.105596][T11148] vlan0: entered allmulticast mode [ 306.208820][T11149] bio_check_eod: 12863 callbacks suppressed [ 306.208844][T11149] syz.1.2542: attempt to access beyond end of device [ 306.208844][T11149] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 306.246747][T11149] syz.1.2542: attempt to access beyond end of device [ 306.246747][T11149] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 306.303284][T11149] syz.1.2542: attempt to access beyond end of device [ 306.303284][T11149] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 306.366401][T11149] syz.1.2542: attempt to access beyond end of device [ 306.366401][T11149] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 306.408842][T11149] syz.1.2542: attempt to access beyond end of device [ 306.408842][T11149] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 306.437369][T11161] FAULT_INJECTION: forcing a failure. [ 306.437369][T11161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.438373][T11149] syz.1.2542: attempt to access beyond end of device [ 306.438373][T11149] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 306.450446][T11161] CPU: 1 UID: 0 PID: 11161 Comm: syz.0.2547 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.450539][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.450551][T11161] Call Trace: [ 306.450558][T11161] [ 306.450565][T11161] __dump_stack+0x1d/0x30 [ 306.450587][T11161] dump_stack_lvl+0xe8/0x140 [ 306.450606][T11161] dump_stack+0x15/0x1b [ 306.450630][T11161] should_fail_ex+0x265/0x280 [ 306.450648][T11161] should_fail+0xb/0x20 [ 306.450663][T11161] should_fail_usercopy+0x1a/0x20 [ 306.450683][T11161] _copy_to_user+0x20/0xa0 [ 306.450706][T11161] simple_read_from_buffer+0xb5/0x130 [ 306.450794][T11161] proc_fail_nth_read+0x10e/0x150 [ 306.450822][T11161] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.450882][T11161] vfs_read+0x1a8/0x770 [ 306.450903][T11161] ? __rcu_read_unlock+0x4f/0x70 [ 306.450927][T11161] ? __fget_files+0x184/0x1c0 [ 306.451000][T11161] ksys_read+0xda/0x1a0 [ 306.451022][T11161] __x64_sys_read+0x40/0x50 [ 306.451107][T11161] x64_sys_call+0x27c0/0x3000 [ 306.451127][T11161] do_syscall_64+0xd2/0x200 [ 306.451144][T11161] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 306.451169][T11161] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 306.451239][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.451259][T11161] RIP: 0033:0x7f6f8950d9dc [ 306.451274][T11161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 306.451290][T11161] RSP: 002b:00007f6f87f77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.451308][T11161] RAX: ffffffffffffffda RBX: 00007f6f89765fa0 RCX: 00007f6f8950d9dc [ 306.451331][T11161] RDX: 000000000000000f RSI: 00007f6f87f770a0 RDI: 0000000000000006 [ 306.451342][T11161] RBP: 00007f6f87f77090 R08: 0000000000000000 R09: 0000000000000000 [ 306.451354][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.451365][T11161] R13: 00007f6f89766038 R14: 00007f6f89765fa0 R15: 00007ffc3f9692b8 [ 306.451438][T11161] [ 306.662809][T11149] syz.1.2542: attempt to access beyond end of device [ 306.662809][T11149] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 306.683728][T11149] syz.1.2542: attempt to access beyond end of device [ 306.683728][T11149] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 306.698594][T11149] syz.1.2542: attempt to access beyond end of device [ 306.698594][T11149] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 306.712822][T11149] syz.1.2542: attempt to access beyond end of device [ 306.712822][T11149] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 306.727224][T11174] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 306.765794][T11176] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 306.779018][T11176] vlan0: entered allmulticast mode [ 306.808560][T11174] vlan0: entered allmulticast mode [ 306.848479][T11180] loop1: detected capacity change from 0 to 1024 [ 306.865427][T11180] EXT4-fs: Ignoring removed orlov option [ 306.904520][T11180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.975713][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.041233][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 307.041247][ T29] audit: type=1326 audit(1761747367.261:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.080125][T11201] program syz.0.2562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.089793][ T29] audit: type=1326 audit(1761747367.261:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.113108][ T29] audit: type=1326 audit(1761747367.261:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.136585][ T29] audit: type=1326 audit(1761747367.261:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.159987][ T29] audit: type=1326 audit(1761747367.261:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.183479][ T29] audit: type=1326 audit(1761747367.261:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.206843][ T29] audit: type=1326 audit(1761747367.261:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.230368][ T29] audit: type=1326 audit(1761747367.261:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.253941][ T29] audit: type=1326 audit(1761747367.261:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.277461][ T29] audit: type=1326 audit(1761747367.271:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.3.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f0eeefc9 code=0x7ffc0000 [ 307.344605][T11209] loop0: detected capacity change from 0 to 512 [ 307.361431][T11203] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 307.390026][T11203] vlan0: entered allmulticast mode [ 307.414738][T11209] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.447363][T11214] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 307.456400][T11209] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 307.513135][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 307.528549][T11214] vlan2: entered allmulticast mode [ 307.567007][T11222] loop1: detected capacity change from 0 to 1024 [ 307.619874][T11222] EXT4-fs: Ignoring removed orlov option [ 307.675748][T11222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.714591][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.734948][T11235] loop0: detected capacity change from 0 to 128 [ 307.760121][T11235] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 307.997075][T11251] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 308.048939][T11251] vlan0: entered allmulticast mode [ 308.885635][T11263] loop0: detected capacity change from 0 to 512 [ 308.932378][T11263] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.010295][T11263] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 309.093937][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 309.272313][T11274] loop2: detected capacity change from 0 to 1024 [ 309.295553][T11274] EXT4-fs: Ignoring removed orlov option [ 309.314777][T11275] loop0: detected capacity change from 0 to 8192 [ 309.323103][T11274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.360291][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.455836][T11283] loop2: detected capacity change from 0 to 1024 [ 309.475449][T11283] EXT4-fs: Ignoring removed orlov option [ 309.489307][T11283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.536344][T11288] loop0: detected capacity change from 0 to 128 [ 309.838653][T11300] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 309.929090][T11300] vlan0: entered allmulticast mode [ 310.257959][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.383494][T11307] loop0: detected capacity change from 0 to 1024 [ 310.448132][T11307] EXT4-fs: Ignoring removed orlov option [ 310.506096][T11307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.714110][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.735977][T11314] loop2: detected capacity change from 0 to 8192 [ 311.066426][T11322] loop2: detected capacity change from 0 to 512 [ 311.092873][T11322] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.152145][T11322] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.335398][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 311.370289][T11330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11330 comm=syz.4.2610 [ 311.432917][T11338] loop4: detected capacity change from 0 to 128 [ 311.457235][T11338] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 311.502192][T11340] loop2: detected capacity change from 0 to 8192 [ 311.521522][T11344] loop4: detected capacity change from 0 to 1024 [ 311.528922][T11344] EXT4-fs: Ignoring removed orlov option [ 311.539261][T11344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.570860][T11347] program syz.2.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.609441][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.907078][T11355] loop4: detected capacity change from 0 to 512 [ 311.916067][T11355] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.009564][T11355] __quota_error: 37 callbacks suppressed [ 312.009577][T11355] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 312.079655][T11355] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 312.223089][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 312.973894][T11369] loop4: detected capacity change from 0 to 128 [ 313.003258][T11369] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 313.122074][T11373] loop4: detected capacity change from 0 to 128 [ 313.212894][T11373] bio_check_eod: 110 callbacks suppressed [ 313.212909][T11373] syz.4.2628: attempt to access beyond end of device [ 313.212909][T11373] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 313.263933][T11373] syz.4.2628: attempt to access beyond end of device [ 313.263933][T11373] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 313.306466][T11373] syz.4.2628: attempt to access beyond end of device [ 313.306466][T11373] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 313.333321][T11376] loop2: detected capacity change from 0 to 1024 [ 313.339940][T11376] EXT4-fs: Ignoring removed orlov option [ 313.352404][T11373] syz.4.2628: attempt to access beyond end of device [ 313.352404][T11373] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 313.376504][T11373] syz.4.2628: attempt to access beyond end of device [ 313.376504][T11373] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 313.400409][T11376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.418406][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.425491][T11373] syz.4.2628: attempt to access beyond end of device [ 313.425491][T11373] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 313.425823][ T29] audit: type=1326 audit(1761747373.959:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 313.439078][T11373] syz.4.2628: attempt to access beyond end of device [ 313.439078][T11373] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 313.462475][ T29] audit: type=1326 audit(1761747373.959:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11334 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8950efc9 code=0x7ffc0000 [ 313.475920][T11373] syz.4.2628: attempt to access beyond end of device [ 313.475920][T11373] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 313.533220][T11373] syz.4.2628: attempt to access beyond end of device [ 313.533220][T11373] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 313.533264][T11373] syz.4.2628: attempt to access beyond end of device [ 313.533264][T11373] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 313.570547][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.599273][T11387] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 313.617001][T11387] vlan2: entered allmulticast mode [ 313.635321][T11385] loop4: detected capacity change from 0 to 1024 [ 313.635577][T11385] EXT4-fs: Ignoring removed orlov option [ 313.662436][T11385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.698889][T11392] loop2: detected capacity change from 0 to 512 [ 313.702219][T11392] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.752719][T11392] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 313.752745][T11392] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 313.827402][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 314.029948][T11400] loop2: detected capacity change from 0 to 8192 [ 314.105312][T11402] loop0: detected capacity change from 0 to 128 [ 314.115317][T11402] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 314.151755][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.182199][T11406] program syz.2.2638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.195217][ T29] audit: type=1326 audit(1761747374.768:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.4.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 314.196181][ T29] audit: type=1326 audit(1761747374.768:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.4.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 314.196206][ T29] audit: type=1326 audit(1761747374.768:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.4.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 314.196324][ T29] audit: type=1326 audit(1761747374.768:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.4.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 314.196348][ T29] audit: type=1326 audit(1761747374.768:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.4.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 314.221250][ T29] audit: type=1326 audit(1761747374.799:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.4.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 314.248831][ T160] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.392473][T11415] loop2: detected capacity change from 0 to 1024 [ 314.392655][T11415] EXT4-fs: Ignoring removed orlov option [ 314.451280][T11418] tipc: Started in network mode [ 314.451305][T11418] tipc: Node identity ac14140f, cluster identity 4711 [ 314.451448][T11418] tipc: New replicast peer: 255.255.255.83 [ 314.451483][T11418] tipc: Enabled bearer , priority 10 [ 314.663602][T11415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.749894][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.384086][T11431] loop2: detected capacity change from 0 to 128 [ 315.418315][T11429] loop1: detected capacity change from 0 to 8192 [ 315.513791][ T9] tipc: Node number set to 2886997007 [ 315.569499][T11438] loop2: detected capacity change from 0 to 128 [ 315.603867][T11438] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 315.876801][T11449] loop1: detected capacity change from 0 to 128 [ 315.997842][T11455] loop2: detected capacity change from 0 to 128 [ 316.114842][T11464] vlan0: entered allmulticast mode [ 316.161541][ T3501] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.288018][T11473] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 316.293386][T11473] vlan0: entered allmulticast mode [ 316.407116][T11476] loop2: detected capacity change from 0 to 512 [ 316.409048][T11476] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.501950][T11476] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 316.540067][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 316.540939][T11480] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 316.566633][T11480] vlan0: entered allmulticast mode [ 316.617026][ T3313] syz_tun (unregistering): left allmulticast mode [ 316.664876][T11492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2669'. [ 316.679518][T11495] loop1: detected capacity change from 0 to 1024 [ 316.679766][T11495] EXT4-fs: Ignoring removed orlov option [ 316.695037][T11495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.710613][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.730374][T11501] loop2: detected capacity change from 0 to 1024 [ 316.730607][T11501] EXT4-fs: Ignoring removed orlov option [ 316.732695][T11501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.937414][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.953483][T11514] program syz.1.2676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.967010][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 316.967023][ T29] audit: type=1400 audit(1761747377.676:5384): avc: denied { write } for pid=11517 comm="syz.0.2679" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 317.002136][T11519] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 317.023841][T11519] vlan2: entered allmulticast mode [ 317.033778][ T52] batadv13: left allmulticast mode [ 317.038950][ T52] batadv13: left promiscuous mode [ 317.044169][ T52] bridge0: port 15(batadv13) entered disabled state [ 317.053316][ T52] batadv12: left allmulticast mode [ 317.058475][ T52] batadv12: left promiscuous mode [ 317.063604][ T52] bridge0: port 14(batadv12) entered disabled state [ 317.070909][ T52] batadv11: left allmulticast mode [ 317.076131][ T52] batadv11: left promiscuous mode [ 317.081203][ T52] bridge0: port 13(batadv11) entered disabled state [ 317.088444][ T52] batadv10: left allmulticast mode [ 317.093559][ T52] batadv10: left promiscuous mode [ 317.098735][ T52] bridge0: port 12(batadv10) entered disabled state [ 317.117759][T11524] loop2: detected capacity change from 0 to 1024 [ 317.128997][T11524] EXT4-fs: Ignoring removed orlov option [ 317.135468][ T29] audit: type=1400 audit(1761747377.854:5385): avc: denied { read write } for pid=11517 comm="syz.0.2679" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.137132][T11524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.158800][ T29] audit: type=1400 audit(1761747377.854:5386): avc: denied { open } for pid=11517 comm="syz.0.2679" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.194428][ T29] audit: type=1400 audit(1761747377.865:5387): avc: denied { read } for pid=11517 comm="syz.0.2679" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.217644][ T29] audit: type=1400 audit(1761747377.865:5388): avc: denied { open } for pid=11517 comm="syz.0.2679" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.243229][ T52] batadv9: left allmulticast mode [ 317.248305][ T52] batadv9: left promiscuous mode [ 317.253332][ T52] bridge0: port 11(batadv9) entered disabled state [ 317.260573][ T52] batadv8: left allmulticast mode [ 317.265600][ T52] batadv8: left promiscuous mode [ 317.270637][ T52] bridge0: port 10(batadv8) entered disabled state [ 317.277898][ T52] batadv7: left allmulticast mode [ 317.282938][ T52] batadv7: left promiscuous mode [ 317.288045][ T52] bridge0: port 9(batadv7) entered disabled state [ 317.295532][ T52] batadv6: left allmulticast mode [ 317.300625][ T52] batadv6: left promiscuous mode [ 317.305808][ T52] bridge0: port 8(batadv6) entered disabled state [ 317.313172][ T52] batadv5: left allmulticast mode [ 317.318273][ T52] batadv5: left promiscuous mode [ 317.323342][ T52] bridge0: port 7(batadv5) entered disabled state [ 317.330381][ T52] batadv4: left allmulticast mode [ 317.335434][ T52] batadv4: left promiscuous mode [ 317.340539][ T52] bridge0: port 6(batadv4) entered disabled state [ 317.347578][ T52] batadv3: left allmulticast mode [ 317.352696][ T52] batadv3: left promiscuous mode [ 317.357789][ T52] bridge0: port 5(batadv3) entered disabled state [ 317.364838][ T52] batadv2: left allmulticast mode [ 317.369864][ T52] batadv2: left promiscuous mode [ 317.374900][ T52] bridge0: port 4(batadv2) entered disabled state [ 317.382103][ T52] batadv1: left allmulticast mode [ 317.387125][ T52] batadv1: left promiscuous mode [ 317.392217][ T52] bridge0: port 3(batadv1) entered disabled state [ 317.399135][ T52] bridge_slave_1: left allmulticast mode [ 317.404814][ T52] bridge_slave_1: left promiscuous mode [ 317.410529][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.418176][ T52] bridge_slave_0: left promiscuous mode [ 317.423829][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.468508][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.477825][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.486840][ T52] bond0 (unregistering): Released all slaves [ 317.494329][T11481] chnl_net:caif_netlink_parms(): no params data found [ 317.557456][ T52] tipc: Disabling bearer [ 317.562461][ T52] tipc: Left network mode [ 317.566990][ T29] audit: type=1326 audit(1761747378.306:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.4.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 317.590923][ T29] audit: type=1326 audit(1761747378.316:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.4.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 317.614508][ T29] audit: type=1326 audit(1761747378.316:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.4.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 317.638103][ T29] audit: type=1326 audit(1761747378.316:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.4.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 317.661872][ T29] audit: type=1326 audit(1761747378.316:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.4.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 317.686597][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.721903][T11538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2682'. [ 317.731672][T11481] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.738943][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.746085][T11481] bridge_slave_0: entered allmulticast mode [ 317.752835][T11481] bridge_slave_0: entered promiscuous mode [ 317.760030][ T52] hsr_slave_0: left promiscuous mode [ 317.765718][ T52] hsr_slave_1: left promiscuous mode [ 317.771308][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.778868][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.785999][ T1662] batman_adv: batadv4: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 317.799757][ T1662] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 317.821606][ T52] team0 (unregistering): Port device team_slave_1 removed [ 317.838925][ T52] team0 (unregistering): Port device team_slave_0 removed [ 317.877260][T11481] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.884339][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.893680][T11481] bridge_slave_1: entered allmulticast mode [ 317.902172][T11481] bridge_slave_1: entered promiscuous mode [ 317.908231][T11540] loop1: detected capacity change from 0 to 1024 [ 317.917589][T11540] EXT4-fs: Ignoring removed orlov option [ 317.925560][T11540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.951659][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.962606][T11481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.973989][T11481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.994137][T11481] team0: Port device team_slave_0 added [ 318.000833][T11481] team0: Port device team_slave_1 added [ 318.016628][T11481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.023629][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.049533][T11481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.060620][T11481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.067622][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.093561][T11481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.127776][T11552] loop1: detected capacity change from 0 to 1024 [ 318.132177][T11481] hsr_slave_0: entered promiscuous mode [ 318.139973][T11552] EXT4-fs: Ignoring removed orlov option [ 318.140654][T11481] hsr_slave_1: entered promiscuous mode [ 318.151801][T11481] debugfs: 'hsr0' already exists in 'hsr' [ 318.154328][T11558] loop2: detected capacity change from 0 to 128 [ 318.157606][T11481] Cannot create hsr debugfs directory [ 318.171769][T11552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.245386][T11558] bio_check_eod: 1696 callbacks suppressed [ 318.245399][T11558] syz.2.2690: attempt to access beyond end of device [ 318.245399][T11558] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 318.264945][T11558] syz.2.2690: attempt to access beyond end of device [ 318.264945][T11558] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 318.278524][T11558] syz.2.2690: attempt to access beyond end of device [ 318.278524][T11558] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 318.293011][T11558] syz.2.2690: attempt to access beyond end of device [ 318.293011][T11558] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 318.310739][T11558] syz.2.2690: attempt to access beyond end of device [ 318.310739][T11558] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 318.324237][T11558] syz.2.2690: attempt to access beyond end of device [ 318.324237][T11558] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 318.337904][T11558] syz.2.2690: attempt to access beyond end of device [ 318.337904][T11558] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 318.351403][T11558] syz.2.2690: attempt to access beyond end of device [ 318.351403][T11558] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 318.364858][T11558] syz.2.2690: attempt to access beyond end of device [ 318.364858][T11558] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 318.378475][T11558] syz.2.2690: attempt to access beyond end of device [ 318.378475][T11558] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 318.403956][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.443915][T11571] loop1: detected capacity change from 0 to 1024 [ 318.452592][T11571] EXT4-fs: Ignoring removed orlov option [ 318.522776][T11571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.971128][T11481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.053708][T11481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.101144][T11481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.130858][T11481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.224010][T11481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.279121][T11481] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.299347][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.306442][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.341180][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.348300][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.466032][T11481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.590741][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.594736][ T3501] Bluetooth: hci0: command 0x1003 tx timeout [ 319.616479][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.769130][T11599] loop1: detected capacity change from 0 to 1024 [ 319.775871][T11599] EXT4-fs: Ignoring removed orlov option [ 319.824412][T11599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.137507][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.210392][T11481] veth0_vlan: entered promiscuous mode [ 320.218351][T11613] loop2: detected capacity change from 0 to 512 [ 320.227663][T11481] veth1_vlan: entered promiscuous mode [ 320.235484][T11613] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.284235][T11481] veth0_macvtap: entered promiscuous mode [ 320.291425][T11613] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 320.322550][T11481] veth1_macvtap: entered promiscuous mode [ 320.345891][T11481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.359455][T11481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.374232][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.385795][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.422511][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.453741][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.519029][T11620] loop3: detected capacity change from 0 to 128 [ 320.534124][T11620] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 320.681470][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 322.032092][T11643] loop4: detected capacity change from 0 to 512 [ 322.782535][T11643] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.120275][T11655] loop1: detected capacity change from 0 to 128 [ 323.134549][T11655] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 323.149766][T11658] loop2: detected capacity change from 0 to 128 [ 323.159758][T11660] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 323.162372][T11643] __quota_error: 31 callbacks suppressed [ 323.162384][T11643] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 323.186861][T11643] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.228407][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 323.268357][T11665] bio_check_eod: 70 callbacks suppressed [ 323.268372][T11665] syz.2.2714: attempt to access beyond end of device [ 323.268372][T11665] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 323.339769][T11665] syz.2.2714: attempt to access beyond end of device [ 323.339769][T11665] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 323.436113][T11665] syz.2.2714: attempt to access beyond end of device [ 323.436113][T11665] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 323.473386][T11675] loop0: detected capacity change from 0 to 512 [ 323.489528][T11665] syz.2.2714: attempt to access beyond end of device [ 323.489528][T11665] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 323.503474][T11675] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.637873][T11665] syz.2.2714: attempt to access beyond end of device [ 323.637873][T11665] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 323.679043][T11675] Quota error (device loop0): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 323.701401][T11675] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.724720][T11665] syz.2.2714: attempt to access beyond end of device [ 323.724720][T11665] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 323.790318][T11665] syz.2.2714: attempt to access beyond end of device [ 323.790318][T11665] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 323.874717][T11665] syz.2.2714: attempt to access beyond end of device [ 323.874717][T11665] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 323.905843][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 323.930295][T11665] syz.2.2714: attempt to access beyond end of device [ 323.930295][T11665] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 323.992225][T11665] syz.2.2714: attempt to access beyond end of device [ 323.992225][T11665] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 324.147603][T11682] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2722'. [ 324.196185][ T29] audit: type=1400 audit(1761747385.267:5424): avc: denied { sqpoll } for pid=11681 comm="syz.2.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 324.489312][T11690] program syz.4.2724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.105376][T11695] tipc: Enabling of bearer rejected, already enabled [ 325.218943][T11701] loop1: detected capacity change from 0 to 128 [ 325.344463][T11703] loop2: detected capacity change from 0 to 8192 [ 325.382118][T11706] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 325.452344][T11706] vlan2: entered allmulticast mode [ 325.516283][T11709] loop2: detected capacity change from 0 to 512 [ 325.552972][T11709] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.702937][T11710] loop1: detected capacity change from 0 to 8192 [ 325.715045][T11709] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 325.739880][T11709] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 325.864234][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 325.896214][T11718] loop1: detected capacity change from 0 to 128 [ 326.173067][T11727] loop2: detected capacity change from 0 to 1024 [ 326.191439][T11727] EXT4-fs: Ignoring removed orlov option [ 326.209795][T11727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.305942][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.379815][T11744] program syz.1.2745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.465993][T11748] loop1: detected capacity change from 0 to 1024 [ 326.472583][T11748] EXT4-fs: Ignoring removed orlov option [ 326.479861][T11748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.681626][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.785901][T11761] loop2: detected capacity change from 0 to 128 [ 326.954112][T11774] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 327.089173][T11786] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 327.102130][T11786] vlan0: entered allmulticast mode [ 327.849198][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 328.162828][T11805] loop1: detected capacity change from 0 to 512 [ 328.189785][T11805] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.240940][T11807] loop3: detected capacity change from 0 to 1024 [ 328.266195][T11807] EXT4-fs: Ignoring removed orlov option [ 328.301809][T11805] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 328.317042][T11805] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 328.338987][T11815] loop2: detected capacity change from 0 to 512 [ 328.348336][T11815] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.362098][T11807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.391714][T11815] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 328.405383][T11481] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.414945][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 328.424258][T11815] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 328.484788][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 328.496306][T11829] loop1: detected capacity change from 0 to 128 [ 328.502708][T11827] loop3: detected capacity change from 0 to 128 [ 328.520021][T11827] bio_check_eod: 1191 callbacks suppressed [ 328.520035][T11827] syz.3.2774: attempt to access beyond end of device [ 328.520035][T11827] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 328.539691][T11827] syz.3.2774: attempt to access beyond end of device [ 328.539691][T11827] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 328.553318][T11827] syz.3.2774: attempt to access beyond end of device [ 328.553318][T11827] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 328.568079][T11831] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 328.582037][T11831] vlan2: entered allmulticast mode [ 328.589372][T11827] syz.3.2774: attempt to access beyond end of device [ 328.589372][T11827] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 328.603636][T11827] syz.3.2774: attempt to access beyond end of device [ 328.603636][T11827] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 328.617236][T11827] syz.3.2774: attempt to access beyond end of device [ 328.617236][T11827] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 328.631417][T11827] syz.3.2774: attempt to access beyond end of device [ 328.631417][T11827] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 328.645078][T11827] syz.3.2774: attempt to access beyond end of device [ 328.645078][T11827] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 328.679022][T11827] syz.3.2774: attempt to access beyond end of device [ 328.679022][T11827] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 328.730920][ T29] audit: type=1326 audit(1761747389.991:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 328.754483][ T29] audit: type=1326 audit(1761747389.991:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 328.772425][T11846] loop0: detected capacity change from 0 to 1024 [ 328.778166][ T29] audit: type=1326 audit(1761747389.991:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 328.784616][T11846] EXT4-fs: Ignoring removed orlov option [ 328.808017][ T29] audit: type=1326 audit(1761747389.991:5428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.1.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362a9defc9 code=0x7ffc0000 [ 328.840025][T11846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.852762][ T1662] kworker/u8:6: attempt to access beyond end of device [ 328.852762][ T1662] loop3: rw=1, sector=305, nr_sectors = 1 limit=128 [ 328.890602][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.918457][T11854] loop3: detected capacity change from 0 to 512 [ 328.939243][T11854] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.966383][T11863] loop0: detected capacity change from 0 to 128 [ 328.974849][T11864] loop1: detected capacity change from 0 to 1024 [ 328.983798][T11864] EXT4-fs: Ignoring removed orlov option [ 329.003648][T11864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.016510][T11854] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 329.026940][T11854] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.057739][T11481] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 329.288814][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.375876][T11875] loop1: detected capacity change from 0 to 8192 [ 329.487547][T11879] loop1: detected capacity change from 0 to 128 [ 329.517355][T11881] loop2: detected capacity change from 0 to 128 [ 329.525787][T11881] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 329.625439][T11893] loop1: detected capacity change from 0 to 512 [ 329.633871][T11893] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.650023][T11893] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 329.658464][T11889] loop4: detected capacity change from 0 to 8192 [ 329.660613][T11893] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.701676][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 329.829201][T11910] loop1: detected capacity change from 0 to 128 [ 329.836022][T11910] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 329.858511][ T29] audit: type=1326 audit(1761747391.199:5429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.4.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 329.882097][ T29] audit: type=1326 audit(1761747391.199:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11907 comm="syz.4.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f07ee55efc9 code=0x7ffc0000 [ 330.073307][T11925] loop4: detected capacity change from 0 to 512 [ 330.087050][T11926] loop0: detected capacity change from 0 to 512 [ 330.089421][T11925] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.118050][T11926] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.135216][T11925] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.150042][T11929] loop1: detected capacity change from 0 to 8192 [ 330.156804][T11926] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 330.222107][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 330.237312][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 330.310885][T11945] loop1: detected capacity change from 0 to 128 [ 330.321714][T11945] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 331.313528][T11959] loop2: detected capacity change from 0 to 8192 [ 332.253821][T11981] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 332.271895][T11981] vlan2: entered allmulticast mode [ 332.338574][T11987] loop4: detected capacity change from 0 to 512 [ 332.346710][T11987] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.382185][T11987] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 332.404927][ T3317] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 332.514531][T11995] loop0: detected capacity change from 0 to 512 [ 332.525462][T11995] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.544304][T11995] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 332.571832][ T3312] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 332.600842][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 332.619863][ T4336] Bluetooth: hci0: command 0x1003 tx timeout [ 332.619863][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 332.698935][T12007] loop0: detected capacity change from 0 to 128 [ 333.166222][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'. [ 333.194154][T12016] loop3: detected capacity change from 0 to 8192 [ 333.215963][T12022] loop1: detected capacity change from 0 to 128 [ 333.258884][T12022] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 333.342354][T12030] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 333.342356][T12027] loop3: detected capacity change from 0 to 512 [ 333.363712][T12027] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.382363][T12030] vlan0: entered allmulticast mode [ 333.621778][T12027] __quota_error: 63 callbacks suppressed [ 333.621794][T12027] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 333.652485][T12027] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 333.767151][T11481] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 333.800562][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2859'. [ 333.831445][T12051] loop1: detected capacity change from 0 to 1024 [ 333.845249][ T29] audit: type=1326 audit(1761747395.388:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 333.849235][T12051] EXT4-fs: Ignoring removed orlov option [ 333.868776][ T29] audit: type=1326 audit(1761747395.388:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 333.897802][ T29] audit: type=1326 audit(1761747395.388:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 333.921360][ T29] audit: type=1326 audit(1761747395.398:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 333.944869][ T29] audit: type=1326 audit(1761747395.398:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 333.968427][ T29] audit: type=1326 audit(1761747395.398:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 333.991834][ T29] audit: type=1326 audit(1761747395.398:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 334.015312][ T29] audit: type=1326 audit(1761747395.398:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 334.039517][ T29] audit: type=1326 audit(1761747395.398:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.3.2858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0439efc9 code=0x7ffc0000 [ 334.070449][T12051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.105314][T12057] loop4: detected capacity change from 0 to 8192 [ 334.134114][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.151323][T12059] loop1: detected capacity change from 0 to 128 [ 334.165649][T12059] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 334.228898][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 334.360630][T12071] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 334.383621][T12071] vlan0: entered allmulticast mode [ 334.524777][ T4336] Bluetooth: hci1: command 0x1003 tx timeout [ 334.530845][ T3501] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 334.611066][T12086] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 334.628581][T12086] vlan2: entered allmulticast mode [ 335.053054][T12104] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 335.067501][T12102] loop2: detected capacity change from 0 to 512 [ 335.072461][T12104] vlan2: entered allmulticast mode [ 335.087459][T12102] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.115963][T12102] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 335.151933][ T1662] Bluetooth: hci1: Frame reassembly failed (-84) [ 335.158881][ T3325] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 335.180753][T12119] loop2: detected capacity change from 0 to 1024 [ 335.187556][T12119] EXT4-fs: Ignoring removed orlov option [ 335.248075][T12119] ================================================================== [ 335.256194][T12119] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 335.264453][T12119] [ 335.266765][T12119] write to 0xffff888105bde460 of 4 bytes by task 12122 on cpu 0: [ 335.274460][T12119] writeback_single_inode+0x150/0x3f0 [ 335.279829][T12119] sync_inode_metadata+0x5b/0x90 [ 335.284757][T12119] generic_buffers_fsync_noflush+0xd9/0x120 [ 335.290636][T12119] ext4_sync_file+0x1ab/0x690 [ 335.295298][T12119] vfs_fsync_range+0x10d/0x130 [ 335.300051][T12119] ext4_buffered_write_iter+0x34f/0x3c0 [ 335.305589][T12119] ext4_file_write_iter+0x387/0xf60 [ 335.310771][T12119] iter_file_splice_write+0x666/0xa60 [ 335.316127][T12119] direct_splice_actor+0x156/0x2a0 [ 335.321247][T12119] splice_direct_to_actor+0x312/0x680 [ 335.326603][T12119] do_splice_direct+0xda/0x150 [ 335.331350][T12119] do_sendfile+0x380/0x650 [ 335.335756][T12119] __x64_sys_sendfile64+0x105/0x150 [ 335.340951][T12119] x64_sys_call+0x2bb4/0x3000 [ 335.345624][T12119] do_syscall_64+0xd2/0x200 [ 335.350125][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.356013][T12119] [ 335.358323][T12119] read to 0xffff888105bde460 of 4 bytes by task 12119 on cpu 1: [ 335.365938][T12119] __mark_inode_dirty+0x191/0x750 [ 335.370965][T12119] ext4_write_inline_data_end+0x3e5/0x5f0 [ 335.376676][T12119] ext4_write_end+0x3d7/0x730 [ 335.381346][T12119] generic_perform_write+0x312/0x490 [ 335.386627][T12119] ext4_buffered_write_iter+0x1ee/0x3c0 [ 335.392156][T12119] ext4_file_write_iter+0x387/0xf60 [ 335.397341][T12119] iter_file_splice_write+0x666/0xa60 [ 335.402705][T12119] direct_splice_actor+0x156/0x2a0 [ 335.407811][T12119] splice_direct_to_actor+0x312/0x680 [ 335.413168][T12119] do_splice_direct+0xda/0x150 [ 335.417922][T12119] do_sendfile+0x380/0x650 [ 335.422336][T12119] __x64_sys_sendfile64+0x105/0x150 [ 335.427533][T12119] x64_sys_call+0x2bb4/0x3000 [ 335.432206][T12119] do_syscall_64+0xd2/0x200 [ 335.436703][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.442582][T12119] [ 335.444893][T12119] value changed: 0x00000070 -> 0x00000002 [ 335.450593][T12119] [ 335.452900][T12119] Reported by Kernel Concurrency Sanitizer on: [ 335.459039][T12119] CPU: 1 UID: 0 PID: 12119 Comm: syz.2.2886 Not tainted syzkaller #0 PREEMPT(voluntary) [ 335.468829][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.478869][T12119] ================================================================== [ 336.201066][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 336.201073][ T4336] Bluetooth: hci0: command 0x1003 tx timeout [ 337.115424][ T3501] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 337.115431][ T3514] Bluetooth: hci1: command 0x1003 tx timeout