last executing test programs: 1m53.058085648s ago: executing program 2 (id=759): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xabcf3898003dcabe, &(0x7f0000000140)={[{@prjquota}, {@acl}, {@nogrpid}, {@grpquota}, {@nodelalloc}, {@block_validity}, {@grpjquota}, {@nombcache}]}, 0x80, 0x578, &(0x7f0000000300)="$eJzs3c9vHFcdAPDvrHfd/HBql3KASpQCRUkFWcc1bS0OJUgITpWAckMoBHsTWVlnI++6ja1IOH8BEkICwalcuCDxByChSFw4VQgRCc4gVSJC4MABCchUMzt2HHvW2SSbXf/4fKTxvPn5fW+ceZk38zwTwJH1UkScj4h7aZq+EhGTxfxKMcR6d8jWu7txYz4bkkjTt/+RRFLM29xXUoxPFpsdi4hvfi3ie8nuuO3VtSsXm83GcjE93Vm6Nt1eXTs7VsyYnZ15fe6Nudfmzg2knKci4s2vJPGDX3z1zd98/t2/XrhzJit2TBTLt5fjEWSHqLrXCt2i1/JjsSnbYPkxgu1X1byEheNla6Rpmt5LJ7fNuTmUnAEAsFN2AfuRiPh0RLwSkzG29+UsAAAAcAClX5qI/yXdJzQlxrMfd3osBAAAAA6GSt4HNqnUi74AE1Gp1OvdPrwfjROVZqvd+dyl1srVhds/nYiIqahVLi02G+eKvsJTUUuy6Zk8fX/61R3TsxHxXET8aPJ4Pl2fbzUXRn3zAwAAAI6Ikzva//+e7Lb/AQAAgENmavesyijyAQAAADw9Je3/3HvPDjkjAAAAwFPTq/0PAAAAHApff+utbEg3v3+98M7qypXWO2cXGu0r9aWV+fp8a/la/XKrdTl/Z9/S9m3HSvbXbLWufSGurlyf7jTanen26tqFpdbK1c6FxQc+gQ0AAAAM0XOfvPXnJCLWv3g8HzLjo84UMBTVrVRSjEvO/r8Ufwf0wZAyBQxF2T38nT54ZggZAYau+ojrfzuvMNJ+qg1gn6uNOgPAyCUPWd6z887vi/GnBpsfAABg8E5/vOz5//t9dAFY94kAOOCcxHB07XiQl06OKiPA0OXP//vt8OtiAQ6VWl89AMt84/0/fmfAmQFG4omf/z9Umj5ShgAAgIGbyIekUi9u701EpVKvR5zKPwtQSy4tNhvnIuLZiPjTZO2ZbHom3zJ5aJsBAAAAAAAAAAAAAAAAAAAAAAAAAOhK0yTSvZzfcykAAABwAERU/pb8tvsu/9OTL0/svD8wnvwn/yTweES8+7O3f3z9YqezPJPN/+fW/M5PivmvjuIOBgAAALBN/gHuzXb6ZjseAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbp7saN+bsbN9L/btyYH2bcv385Iqa24udDd0k1juXjY1GLiBP/SqK6bbskIsYGEH/9ZkR8rCx+kmVrK2RZ/ONPP35MFUehLP7JAcSHo+xWVv+cLzv/KvFSPi4//6oRD0w/rt71X2zVf2M9zv9TfcZ44favpnvGvxnxQrW8/inib1Vz1QeiR36M+vHdb62tdVO7a+z0vYjTUR5/e7TpztK16fbq2tnFpYuXG5cbV2dnZ16fe2Putblz05cWm43iZ2n8H37i1/f2Kv+JHvGnuuXP45cd/5f7Kn3E/29f33i+x/9XWfwzn9kdP/ndz4s1dsevFPv6bJHOlp/eTK9309u9+Ms/vLhX+Rful79W8vvvWf4zexf7/i9wECcKADAw7dW1KxebzcbyQUjUHmer7PK1bNHzxRF48oyNP9HmtYjYH4f3cCY22yhl63x/oLHSNE1r5f+ibkVEP/tJYh8csW5ihJUSAADwVNy/6B91TgAAAAAAAAAAAAAAAAAAAODoGuA7w8ZLX7NX8maB9a1U4s3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC+8WEAAAD//8Zp1y0=") r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 1m52.934297672s ago: executing program 2 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6418d2a8151306"], 0x154d) 1m52.855767615s ago: executing program 2 (id=764): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000100)=""/111, 0x6f}], 0x1}, 0x40012150) 1m52.783332047s ago: executing program 2 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m52.782447967s ago: executing program 2 (id=767): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) unshare(0x22020600) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x80085502, 0x0) 1m52.578133284s ago: executing program 2 (id=775): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1m52.577891244s ago: executing program 32 (id=775): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1m38.845789263s ago: executing program 1 (id=1050): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x8021, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1m38.675416619s ago: executing program 1 (id=1052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1m38.478093275s ago: executing program 1 (id=1055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x20002008}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) epoll_pwait(r2, &(0x7f0000004080)=[{}, {}], 0x2, 0xe, 0x0, 0x0) 1m38.443402826s ago: executing program 1 (id=1056): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2804000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x240, &(0x7f0000000480)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1m38.3166524s ago: executing program 1 (id=1061): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m38.261882802s ago: executing program 1 (id=1064): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xd}, 0x108084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d042ada3e813300941e4c650000", @ANYRES32=0x0, @ANYBLOB="00000000100000001c0012800c0001006d6163766c616e000c00028008000900ffffffff140035006d6163766c616e3000"], 0x50}}, 0x8000) 1m30.020921332s ago: executing program 4 (id=1184): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$key(0xf, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m29.092123912s ago: executing program 4 (id=1196): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 1m29.091644273s ago: executing program 4 (id=1197): socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xd, 0x5}, 0x8000, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m29.027835855s ago: executing program 4 (id=1201): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x28a, &(0x7f0000000600)="$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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000001080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x301091, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x1800000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00', 0x89901) 1m28.917811889s ago: executing program 4 (id=1203): write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0xd, @mcast1, 0x401}}}, 0x90) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1m28.651839837s ago: executing program 4 (id=1205): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0xf2a, 0x4) r0 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffc, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1m28.634155757s ago: executing program 33 (id=1205): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0xf2a, 0x4) r0 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffc, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1m23.06420526s ago: executing program 34 (id=1064): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xd}, 0x108084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d042ada3e813300941e4c650000", @ANYRES32=0x0, @ANYBLOB="00000000100000001c0012800c0001006d6163766c616e000c00028008000900ffffffff140035006d6163766c616e3000"], 0x50}}, 0x8000) 1m4.246065517s ago: executing program 0 (id=1628): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x100}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m3.896469828s ago: executing program 0 (id=1632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.82503224s ago: executing program 0 (id=1634): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180700000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m3.207159901s ago: executing program 0 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m3.163001072s ago: executing program 0 (id=1642): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) utime(&(0x7f0000000000)='.\x00', 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xd) 1m2.91821574s ago: executing program 0 (id=1650): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1m2.91803549s ago: executing program 35 (id=1650): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 56.700868073s ago: executing program 3 (id=1758): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 56.446623272s ago: executing program 3 (id=1764): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x11fb, 0x5, 0x7, 0xfffffbff, 0x4}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 56.178362031s ago: executing program 3 (id=1773): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 56.027294716s ago: executing program 3 (id=1781): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 55.967540017s ago: executing program 3 (id=1785): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0xfd}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 55.800989253s ago: executing program 3 (id=1792): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x95, &(0x7f00000001c0)=ANY=[], 0x0) 55.771969044s ago: executing program 36 (id=1792): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x95, &(0x7f00000001c0)=ANY=[], 0x0) 2.175749449s ago: executing program 6 (id=2758): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000004900)=""/170, 0xaa}], 0x1, 0x17e, 0x9) 2.14513319s ago: executing program 6 (id=2759): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e63, 0xe4, @empty, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e630e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee80000000000000000200000000", 0x58}], 0x1) 2.14466738s ago: executing program 6 (id=2760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4ea3, @empty}}, 0x1000, 0x2, 0x8005, 0x101, 0x4c, 0x8, 0xfc}, 0x9c) 1.661944036s ago: executing program 7 (id=2784): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x0) 1.600645148s ago: executing program 7 (id=2786): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000001c0)=@hci, 0x80, 0x0}, 0xb01}, {{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000033c0)=""/80, 0x50}, 0x7fff}], 0x3, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000340)=0x400, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.508884251s ago: executing program 7 (id=2790): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x3f, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.430246033s ago: executing program 7 (id=2793): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 1.370376796s ago: executing program 7 (id=2797): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.204371831s ago: executing program 6 (id=2804): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4) 1.104342534s ago: executing program 8 (id=2807): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="89", 0x1}], 0x1}}], 0x1, 0x0) 935.72755ms ago: executing program 6 (id=2810): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_io_uring_setup(0x495, 0x0, 0x0, 0x0, &(0x7f0000000000)) 453.584785ms ago: executing program 9 (id=2812): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 422.977646ms ago: executing program 7 (id=2813): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8000006}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1800000}}]}, 0x5, 0x596, &(0x7f0000000400)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$usbip_server(r1, &(0x7f0000000240)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0x401}, {0x8}}, 0x30) read$usbmon(r1, &(0x7f0000000500)=""/136, 0x88) 420.811037ms ago: executing program 9 (id=2814): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) chdir(&(0x7f00000003c0)='./bus\x00') r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='c(u&\'\'\t|\t') 322.08264ms ago: executing program 5 (id=2816): syz_io_uring_setup(0x1c3d, &(0x7f0000000180)={0x0, 0x9375, 0x8, 0x2, 0x5a}, &(0x7f0000000280), &(0x7f0000000340), 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000005c0)='*', 0x1}], 0x1}}], 0x1, 0x44) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x7fff, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}}, 0x2, 0x6}, 0x90) 298.41943ms ago: executing program 9 (id=2817): getpid() timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 289.651611ms ago: executing program 5 (id=2818): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 267.090211ms ago: executing program 9 (id=2819): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) 264.088362ms ago: executing program 5 (id=2820): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = gettid() dup3(r1, r0, 0x80000) fcntl$setownex(r0, 0xf, &(0x7f0000003480)={0x0, r2}) fcntl$getownex(r1, 0x10, &(0x7f0000003500)) 216.980673ms ago: executing program 5 (id=2821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='^', 0x1}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x10004841) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300), 0x4) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1}, 0x20002) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1daf", 0x2}], 0x1}}], 0x2, 0x4044004) 216.805433ms ago: executing program 9 (id=2822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x65e, 0x0) setitimer(0x2, 0x0, 0x0) 216.411273ms ago: executing program 8 (id=2823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b9c5ec18837993a6", "94dd7adf162b79d63db3cda2b4b7c3f2779d7b777112824651d28000", "6ebc780b", "3f23b1802d00cd92"}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000", @ANYBLOB="ac1e00010a01010000000000dc0000009bb2"], 0x170}, 0x4080) 185.472474ms ago: executing program 8 (id=2824): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 168.420365ms ago: executing program 8 (id=2825): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xefc8, 0x1f480, 0x0, 0x332}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 138.491696ms ago: executing program 9 (id=2826): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c757466383d312c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c005a086502454ede48cd0c582ac337a877be0c36a8e60d572dbe625e0680a225abe4d4fc79e83de86dce78be26dba8f6ff0abfb9c2fba30a14b3b206ad905e994c27e6d4fc5d74f88b749758f85a07efcf3e17bd78aad46a325ec58b65332fe45ac5db6e722db0a32946415f0b3403d53ad233d1fe2593f1d4fe07041a0091b2f43c1e87fa638a217f4108c00d47c229ae1229250e"], 0x1, 0x373, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 116.915666ms ago: executing program 8 (id=2827): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) clock_settime(0x7ffffffff000, 0x0) 65.500168ms ago: executing program 6 (id=2828): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x85) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 36.165949ms ago: executing program 8 (id=2829): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000000180)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x24042850}, 0x4) 31.792799ms ago: executing program 5 (id=2830): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r2, r0, 0x0) socket(0x2, 0x3, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r3], 0x44}}, 0x0) 0s ago: executing program 5 (id=2831): unshare(0x40400) syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) kernel console output (not intermixed with test programs): s too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.633602][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.644932][ T7385] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.652587][ T7385] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 95.659011][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.668094][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.694959][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.747038][ T7319] hsr_slave_0: entered promiscuous mode [ 95.753136][ T7319] hsr_slave_1: entered promiscuous mode [ 96.079420][ T7287] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.128177][ T7319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.153250][ T7319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.167021][ T4017] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.176762][ T7319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.189445][ T7319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.216357][ T62] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.246027][ T62] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.269884][ T62] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.351953][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.375536][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.392815][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.400039][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.450181][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.457307][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.486440][ T7319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.507450][ T7319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.637065][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.900316][ T7319] veth0_vlan: entered promiscuous mode [ 96.929779][ T7319] veth1_vlan: entered promiscuous mode [ 96.954242][ T7319] veth0_macvtap: entered promiscuous mode [ 96.964774][ T7319] veth1_macvtap: entered promiscuous mode [ 96.981725][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.999347][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.040394][ T3489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.049245][ T3489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.068529][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.091580][ T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.247701][ T7521] SELinux: failed to load policy [ 97.435121][ T7536] loop6: detected capacity change from 0 to 1764 [ 97.476341][ T7536] ISOFS: Unable to identify CD-ROM format. [ 97.557022][ T62] tipc: Subscription rejected, illegal request [ 97.597846][ T7551] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.689729][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1368'. [ 97.710127][ T7551] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.719671][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1368'. [ 97.751520][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1368'. [ 97.785753][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1368'. [ 97.830229][ T7573] Invalid ELF header magic: != ELF [ 97.853883][ T7551] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.955316][ T7551] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.056790][ T3447] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.085945][ T3447] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.094222][ T3447] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.133341][ T3447] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.145263][ T7592] loop7: detected capacity change from 0 to 256 [ 98.220634][ T7595] syz_tun: entered allmulticast mode [ 98.230376][ T7594] syz_tun: left allmulticast mode [ 99.440539][ T30] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 99.489067][ T7672] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 99.516764][ T7680] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.1403'. [ 99.634236][ T7691] loop5: detected capacity change from 0 to 128 [ 99.752466][ T7702] loop5: detected capacity change from 0 to 512 [ 99.971873][ T7715] loop5: detected capacity change from 0 to 512 [ 99.996339][ T7713] loop7: detected capacity change from 0 to 4096 [ 100.004446][ T7715] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1418: inode has both inline data and extents flags [ 100.041203][ T7713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.066587][ T7715] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.075554][ T7715] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1418: couldn't read orphan inode 15 (err -117) [ 100.084868][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 100.084890][ C0] EXT4-fs (loop5): initial error at time 1774904390: ext4_orphan_get:1397: inode 15 [ 100.084925][ C0] EXT4-fs (loop5): last error at time 1774904390: ext4_orphan_get:1397: inode 15 [ 100.143946][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 100.156400][ T7715] loop5: lost filesystem error report for type 5 error -117 [ 100.156923][ T7715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.185893][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 100.185910][ T28] audit: type=1400 audit(1774904390.488:1612): avc: denied { watch_reads } for pid=7714 comm="syz.5.1418" path="/18/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.217371][ T28] audit: type=1326 audit(1774904390.518:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.7.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 100.243013][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.263896][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.328428][ T7743] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1427'. [ 100.493559][ T7775] sctp: [Deprecated]: syz.6.1436 (pid 7775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.493559][ T7775] Use struct sctp_sack_info instead [ 100.535166][ T28] audit: type=1400 audit(1774904390.838:1614): avc: denied { ioctl } for pid=7779 comm="syz.3.1439" path="socket:[19017]" dev="sockfs" ino=19017 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.674999][ T7803] loop7: detected capacity change from 0 to 512 [ 100.727642][ T7803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.761753][ T7803] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.951408][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.608557][ T7878] loop5: detected capacity change from 0 to 512 [ 101.622334][ T7878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.636510][ T7878] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.690183][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.128838][ T7899] loop5: detected capacity change from 0 to 512 [ 102.150732][ T7899] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.186985][ T7899] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 102.216241][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 102.222733][ C1] EXT4-fs (loop5): initial error at time 1774904392: ext4_mb_generate_buddy:1317 [ 102.231911][ C1] EXT4-fs (loop5): last error at time 1774904392: ext4_mb_generate_buddy:1317 [ 102.246436][ T7899] EXT4-fs (loop5): 1 truncate cleaned up [ 102.255609][ T7899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.270120][ T7899] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1479: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 102.295600][ T7908] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 102.317997][ T7915] netlink: 'syz.3.1487': attribute type 5 has an invalid length. [ 102.354152][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.485307][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 102.513655][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.567116][ T7953] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 102.575332][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1502'. [ 102.584435][ T7953] syz_tun: entered promiscuous mode [ 102.586608][ T70] bond0: (slave syz_tun): interface is now down [ 102.596746][ T7953] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.606534][ T4017] bond0: (slave syz_tun): interface is now down [ 102.613076][ T4017] bond0: now running without any active interface! [ 102.623779][ T7956] loop5: detected capacity change from 0 to 512 [ 102.655239][ T7956] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.672549][ T7956] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 102.984576][ T7991] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.999307][ T7991] bond1: (slave lo): Enslaving as an active interface with an up link [ 103.009547][ T7991] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 103.052682][ T7999] loop7: detected capacity change from 0 to 512 [ 103.061844][ T7999] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.074048][ T7999] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 103.804538][ T8035] loop6: detected capacity change from 0 to 1024 [ 103.821041][ T8035] EXT4-fs: inline encryption not supported [ 103.837551][ T8040] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.869907][ T8035] EXT4-fs: Ignoring removed nobh option [ 103.941506][ T8035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 103.950051][ T8035] System zones: 0-1, 3-12 [ 103.955241][ T8035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.102053][ T8074] bio_check_eod: 8 callbacks suppressed [ 104.102072][ T8074] syz.5.1537: attempt to access beyond end of device [ 104.102072][ T8074] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 104.158983][ T8078] syz.5.1537: attempt to access beyond end of device [ 104.158983][ T8078] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 104.224121][ T8078] syz.5.1537: attempt to access beyond end of device [ 104.224121][ T8078] loop5: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 104.242380][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.256291][ T8078] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 104.272515][ T8078] syz.5.1537: attempt to access beyond end of device [ 104.272515][ T8078] loop5: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 104.305250][ T8078] Buffer I/O error on dev loop5, logical block 70, lost async page write [ 104.336458][ T8078] syz.5.1537: attempt to access beyond end of device [ 104.336458][ T8078] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 104.406771][ T8078] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 104.426693][ T8078] syz.5.1537: attempt to access beyond end of device [ 104.426693][ T8078] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 104.525164][ T8078] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 104.568004][ T8074] syz.5.1537: attempt to access beyond end of device [ 104.568004][ T8074] loop5: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 104.595183][ T8074] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 104.714628][ T8114] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 106.206340][ T28] audit: type=1400 audit(1774904396.508:1615): avc: denied { relabelfrom } for pid=8185 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.256237][ T28] audit: type=1400 audit(1774904396.508:1616): avc: denied { relabelto } for pid=8185 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.342546][ T8217] netlink: 'syz.5.1574': attribute type 34 has an invalid length. [ 107.520858][ T28] audit: type=1400 audit(1774904397.828:1617): avc: denied { setopt } for pid=8232 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.563116][ T8235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.773325][ T8238] set_capacity_and_notify: 1 callbacks suppressed [ 107.773356][ T8238] loop7: detected capacity change from 0 to 32768 [ 108.715032][ T8161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.752326][ T8293] loop6: detected capacity change from 0 to 512 [ 108.762735][ T8293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.848065][ T8293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.873081][ T8293] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.967343][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.987050][ T28] audit: type=1326 audit(1774904399.298:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e34b0c819 code=0x7ffc0000 [ 109.058252][ T28] audit: type=1326 audit(1774904399.328:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e34b0c819 code=0x7ffc0000 [ 109.132770][ T28] audit: type=1326 audit(1774904399.328:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e34b0c819 code=0x7ffc0000 [ 109.253364][ T28] audit: type=1326 audit(1774904399.328:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e34b0c819 code=0x7ffc0000 [ 109.342122][ T28] audit: type=1326 audit(1774904399.328:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e34b0c819 code=0x7ffc0000 [ 109.365762][ T28] audit: type=1326 audit(1774904399.328:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e34b0c819 code=0x7ffc0000 [ 109.389427][ T28] audit: type=1326 audit(1774904399.328:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.0.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e34b0c819 code=0x7ffc0000 [ 109.628987][ T8343] loop6: detected capacity change from 0 to 1024 [ 109.766418][ T8343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.828664][ T8343] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 109.875956][ T8350] rdma_op ffff88810b361980 conn xmit_rdma 0000000000000000 [ 109.964903][ T8357] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 256 with error 28 [ 109.988462][ T8357] EXT4-fs (loop6): This should not happen!! Data will be lost [ 109.988462][ T8357] [ 110.014535][ T8357] EXT4-fs (loop6): Total free blocks count 0 [ 110.030875][ T8357] EXT4-fs (loop6): Free/Dirty block details [ 110.040938][ T8357] EXT4-fs (loop6): free_blocks=20480 [ 110.056253][ T8357] EXT4-fs (loop6): dirty_blocks=272 [ 110.066265][ T8357] EXT4-fs (loop6): Block reservation details [ 110.078769][ T8357] EXT4-fs (loop6): i_reserved_data_blocks=17 [ 110.306877][ T4014] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 256 with max blocks 2048 with error 28 [ 110.484723][ T8364] loop5: detected capacity change from 0 to 4096 [ 110.491305][ T6761] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 110.502836][ T8364] EXT4-fs: Ignoring removed bh option [ 110.531313][ T8364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.672669][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.049895][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 111.099267][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.116300][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.123587][ T8393] bridge_slave_0: entered allmulticast mode [ 111.131173][ T8393] bridge_slave_0: entered promiscuous mode [ 111.140211][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.147685][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.155450][ T8393] bridge_slave_1: entered allmulticast mode [ 111.162920][ T8393] bridge_slave_1: entered promiscuous mode [ 111.184440][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.195183][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.216178][ T8393] team0: Port device team_slave_0 added [ 111.223128][ T8393] team0: Port device team_slave_1 added [ 111.240821][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.247890][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.279031][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.290591][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.297830][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.324445][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.362863][ T8393] hsr_slave_0: entered promiscuous mode [ 111.369334][ T8393] hsr_slave_1: entered promiscuous mode [ 111.375448][ T8393] debugfs: 'hsr0' already exists in 'hsr' [ 111.381723][ T8393] Cannot create hsr debugfs directory [ 111.552060][ T8393] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 111.565369][ T8393] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 111.579970][ T8393] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 111.600360][ T8393] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 112.155081][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.211045][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.239292][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.246444][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.290688][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.297792][ T4017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.334966][ T8393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.348069][ T8393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.358750][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 112.358766][ T28] audit: type=1400 audit(1774904402.658:1643): avc: denied { bind } for pid=8467 comm="syz.6.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.413401][ T28] audit: type=1400 audit(1774904402.658:1644): avc: denied { listen } for pid=8467 comm="syz.6.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.699395][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.959718][ T8426] kexec: Could not allocate control_code_buffer [ 113.067018][ T8393] veth0_vlan: entered promiscuous mode [ 113.092232][ T8393] veth1_vlan: entered promiscuous mode [ 113.160385][ T8393] veth0_macvtap: entered promiscuous mode [ 113.169162][ T8393] veth1_macvtap: entered promiscuous mode [ 113.195153][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.215916][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.381460][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.388827][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.449087][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.459097][ T8511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.492104][ T4014] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.526307][ T4014] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.562241][ T4014] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.587175][ T4014] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.636316][ T4014] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.673829][ T4014] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.699983][ T4014] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.749977][ T8517] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1651'. [ 113.766417][ T4014] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.929119][ T28] audit: type=1326 audit(1774904404.238:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 113.957991][ T8503] kexec: Could not allocate control_code_buffer [ 113.966292][ T28] audit: type=1326 audit(1774904404.238:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 114.005755][ T28] audit: type=1326 audit(1774904404.238:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 114.085408][ T28] audit: type=1326 audit(1774904404.238:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 114.158276][ T8537] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1692'. [ 114.160364][ T8529] loop5: detected capacity change from 0 to 8192 [ 114.188197][ T28] audit: type=1326 audit(1774904404.238:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 114.247297][ T28] audit: type=1326 audit(1774904404.308:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 114.271242][ T8529] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.301534][ T28] audit: type=1326 audit(1774904404.308:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 114.305935][ T8547] loop7: detected capacity change from 0 to 512 [ 114.325715][ T28] audit: type=1326 audit(1774904404.308:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.8.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6059ac819 code=0x7ffc0000 [ 114.367542][ T8549] syzkaller0: entered promiscuous mode [ 114.373186][ T8549] syzkaller0: entered allmulticast mode [ 114.418762][ T8547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.440165][ T8547] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.684421][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.361921][ T8665] Process accounting resumed [ 115.397972][ T8695] loop8: detected capacity change from 0 to 512 [ 115.439426][ T8695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.459745][ T8695] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.595838][ T8705] IPv6: Can't replace route, no match found [ 115.715749][ T8722] netlink: 1315 bytes leftover after parsing attributes in process `syz.3.1727'. [ 115.875720][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.036417][ T5499] IPVS: starting estimator thread 0... [ 116.139259][ T8745] IPVS: using max 2544 ests per chain, 127200 per kthread [ 116.331998][ T8756] loop8: detected capacity change from 0 to 4096 [ 116.372444][ T8756] EXT4-fs: Ignoring removed bh option [ 116.428044][ T8756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.433595][ T8766] IPv6: Can't replace route, no match found [ 116.452898][ T8769] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 116.522731][ T8773] loop7: detected capacity change from 0 to 128 [ 116.546350][ T3419] IPVS: starting estimator thread 0... [ 116.547987][ T8769] bond1: entered promiscuous mode [ 116.570910][ T8769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.646314][ T8777] IPVS: using max 2592 ests per chain, 129600 per kthread [ 116.688384][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.714394][ T8778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.785651][ T8778] bond1: (slave bond2): making interface the new active one [ 116.815172][ T4017] kworker/u8:10: attempt to access beyond end of device [ 116.815172][ T4017] loop7: rw=1, sector=145, nr_sectors = 40 limit=128 [ 116.842222][ T8778] bond2: entered promiscuous mode [ 116.847693][ T4017] kworker/u8:10: attempt to access beyond end of device [ 116.847693][ T4017] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 116.863109][ T4017] kworker/u8:10: attempt to access beyond end of device [ 116.863109][ T4017] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 116.877717][ T8778] bond1: (slave bond2): Enslaving as an active interface with an up link [ 116.896369][ T4017] kworker/u8:10: attempt to access beyond end of device [ 116.896369][ T4017] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 116.924815][ T4017] kworker/u8:10: attempt to access beyond end of device [ 116.924815][ T4017] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 116.980683][ T8787] loop6: detected capacity change from 0 to 512 [ 116.993325][ T4017] kworker/u8:10: attempt to access beyond end of device [ 116.993325][ T4017] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 117.007750][ T8787] EXT4-fs: Ignoring removed orlov option [ 117.045025][ T4017] kworker/u8:10: attempt to access beyond end of device [ 117.045025][ T4017] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 117.062806][ T4017] kworker/u8:10: attempt to access beyond end of device [ 117.062806][ T4017] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 117.077007][ T4017] kworker/u8:10: attempt to access beyond end of device [ 117.077007][ T4017] loop7: rw=1, sector=305, nr_sectors = 8 limit=128 [ 117.091616][ T4017] kworker/u8:10: attempt to access beyond end of device [ 117.091616][ T4017] loop7: rw=1, sector=321, nr_sectors = 8 limit=128 [ 117.138516][ T8787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.156476][ T8787] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.202129][ T8787] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1755: corrupted inode contents [ 117.216228][ T8798] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 117.224296][ T8787] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #2: comm syz.6.1755: mark_inode_dirty error [ 117.236117][ T8787] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1755: corrupted inode contents [ 117.252668][ T8805] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1755: corrupted inode contents [ 117.265046][ T8805] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #2: comm syz.6.1755: mark_inode_dirty error [ 117.284136][ T8805] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1755: corrupted inode contents [ 117.310157][ T8805] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1755: mark_inode_dirty error [ 117.324645][ T8787] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.1755: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 117.324645][ T8787] [ 117.348465][ T8816] loop5: detected capacity change from 0 to 128 [ 117.355277][ T8816] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.368177][ T8787] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1755: corrupted inode contents [ 117.380784][ T8787] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.1755: mark_inode_dirty error [ 117.392059][ T8787] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 117.400588][ T8816] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.439318][ T8791] futex_wake_op: syz.8.1757 tries to shift op by 32; fix this program [ 117.440067][ T8180] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.500251][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.519255][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1769'. [ 117.568833][ T8826] hsr_slave_0: left promiscuous mode [ 117.588538][ T8826] hsr_slave_1: left promiscuous mode [ 117.869086][ T5789] bond0: (slave syz_tun): Releasing backup interface [ 117.882920][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 117.882937][ T28] audit: type=1400 audit(1774904408.188:1676): avc: denied { ioctl } for pid=8867 comm="syz.7.1789" path="socket:[23730]" dev="sockfs" ino=23730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.907284][ T8870] xt_hashlimit: size too large, truncated to 1048576 [ 117.925911][ T8868] ipvlan2: entered promiscuous mode [ 117.932827][ T8868] ipvlan2: entered allmulticast mode [ 117.940265][ T8868] erspan0: entered allmulticast mode [ 117.948237][ T8868] team0: Device ipvlan2 failed to register rx_handler [ 117.964629][ T4017] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.978912][ T4017] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.078523][ T4017] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.096374][ T8886] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1796'. [ 118.112984][ T4017] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.140777][ T8889] netlink: 'syz.7.1797': attribute type 14 has an invalid length. [ 118.149224][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1797'. [ 118.170949][ T4023] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.183654][ T4023] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.194535][ T8889] netlink: 'syz.7.1797': attribute type 14 has an invalid length. [ 118.207190][ T4023] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.216515][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1797'. [ 118.225503][ T4023] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.257418][ T4017] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.276330][ T4017] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.330696][ T4017] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.356396][ T4017] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.410828][ T8903] bond1: option mode: unable to set because the bond device has slaves [ 118.422181][ T8905] loop5: detected capacity change from 0 to 512 [ 118.462206][ T8905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.483168][ T8903] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 118.485509][ T8905] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.594512][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.775967][ T8920] loop7: detected capacity change from 0 to 512 [ 118.859125][ T8920] EXT4-fs: Mount option(s) incompatible with ext2 [ 118.916075][ T8880] kexec: Could not allocate control_code_buffer [ 118.942134][ T4017] dvmrp0 (unregistering): left allmulticast mode [ 119.076361][ T4017] bond0 (unregistering): Released all slaves [ 119.100869][ T4017] bond1 (unregistering): (slave bond2): Releasing backup interface [ 119.115741][ T4017] bond2 (unregistering): left promiscuous mode [ 119.134827][ T4017] bond1 (unregistering): Released all slaves [ 119.150258][ T4017] bond2 (unregistering): Released all slaves [ 119.258670][ T4017] tipc: Disabling bearer [ 119.263978][ T4017] tipc: Left network mode [ 119.272446][ T4017] hsr_slave_0: left promiscuous mode [ 119.281506][ T4017] hsr_slave_1: left promiscuous mode [ 119.298280][ T4017] veth1_macvtap: left promiscuous mode [ 119.311537][ T4017] veth0_macvtap: left promiscuous mode [ 119.322760][ T4017] veth1_vlan: left promiscuous mode [ 119.334903][ T4017] veth0_vlan: left promiscuous mode [ 119.548799][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 119.762428][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.792639][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.825670][ T8877] bridge_slave_0: entered allmulticast mode [ 119.857406][ T8877] bridge_slave_0: entered promiscuous mode [ 119.886124][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.928329][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.959781][ T8877] bridge_slave_1: entered allmulticast mode [ 119.989599][ T8877] bridge_slave_1: entered promiscuous mode [ 120.090809][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.177643][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.256571][ T8877] team0: Port device team_slave_0 added [ 120.284982][ T8877] team0: Port device team_slave_1 added [ 120.317222][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.324438][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.352840][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.374348][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.393788][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.434636][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.465747][ T8877] hsr_slave_0: entered promiscuous mode [ 120.471882][ T8877] hsr_slave_1: entered promiscuous mode [ 121.166488][ T9027] loop8: detected capacity change from 0 to 512 [ 121.173398][ T9027] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 121.218371][ T9027] EXT4-fs (loop8): 1 truncate cleaned up [ 121.224694][ T9027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.290042][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.312650][ T9037] loop6: detected capacity change from 0 to 512 [ 121.339942][ T9037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.362847][ T9037] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.474448][ T8877] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 121.483663][ T8877] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 121.493328][ T8877] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 121.503307][ T8877] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 121.582210][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.599541][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.609210][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.616338][ T8179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.636043][ T8877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.654953][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.702597][ T8877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.755957][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.763092][ T8179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.858800][ T9061] bridge_slave_0: left allmulticast mode [ 121.864631][ T9061] bridge_slave_0: left promiscuous mode [ 121.871581][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.882104][ T9061] bridge_slave_1: left allmulticast mode [ 121.905786][ T9061] bridge_slave_1: left promiscuous mode [ 121.913110][ T28] audit: type=1400 audit(1774904412.218:1677): avc: denied { create } for pid=9066 comm="syz.5.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.933247][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.940992][ T28] audit: type=1400 audit(1774904412.238:1678): avc: denied { ioctl } for pid=9066 comm="syz.5.1838" path="socket:[24125]" dev="sockfs" ino=24125 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.981823][ T9061] bond0: (slave bond_slave_0): Releasing backup interface [ 122.003275][ T9061] bond0: (slave bond_slave_1): Releasing backup interface [ 122.042681][ T9061] team0: Port device team_slave_0 removed [ 122.048433][ T9073] loop5: detected capacity change from 0 to 512 [ 122.062822][ T9061] team0: Port device team_slave_1 removed [ 122.076808][ T9061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.077160][ T9073] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 122.084379][ T9061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.102604][ T9073] EXT4-fs (loop5): 1 truncate cleaned up [ 122.112536][ T9061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.131794][ T9073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.145454][ T9061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.155978][ T9061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.184653][ T9072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1840: bg 0: block 465: padding at end of block bitmap is not set [ 122.199281][ T28] audit: type=1400 audit(1774904412.488:1679): avc: denied { map } for pid=9072 comm="syz.5.1840" path="/129/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.312395][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.388986][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.503389][ T9083] SELinux: failed to load policy [ 122.679867][ T8877] veth0_vlan: entered promiscuous mode [ 122.697637][ T8877] veth1_vlan: entered promiscuous mode [ 122.723908][ T8877] veth0_macvtap: entered promiscuous mode [ 122.739024][ T8877] veth1_macvtap: entered promiscuous mode [ 122.775590][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.800106][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.820704][ T8180] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.840939][ T8180] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.869721][ T8180] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.886663][ T8180] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.208799][ T28] audit: type=1326 audit(1774904413.518:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.276787][ T28] audit: type=1326 audit(1774904413.538:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.338283][ T28] audit: type=1326 audit(1774904413.538:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.382026][ T28] audit: type=1326 audit(1774904413.548:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.446244][ T28] audit: type=1326 audit(1774904413.548:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.564370][ T28] audit: type=1326 audit(1774904413.548:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.641406][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1864'. [ 123.650120][ T28] audit: type=1326 audit(1774904413.548:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.669962][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1864'. [ 123.715763][ T62] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.724157][ T62] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.735012][ T28] audit: type=1326 audit(1774904413.548:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.737975][ T62] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.781508][ T62] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.806118][ T28] audit: type=1326 audit(1774904413.548:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 123.869634][ T28] audit: type=1326 audit(1774904413.558:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.9.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a9dec819 code=0x7ffc0000 [ 124.148579][ T9164] loop6: detected capacity change from 0 to 128 [ 124.165356][ T9162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.178318][ T9164] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.211929][ T9164] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.328508][ T6761] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.480355][ T9188] loop6: detected capacity change from 0 to 128 [ 124.798283][ T8180] bio_check_eod: 98 callbacks suppressed [ 124.798300][ T8180] kworker/u8:26: attempt to access beyond end of device [ 124.798300][ T8180] loop6: rw=1, sector=145, nr_sectors = 40 limit=128 [ 124.827008][ T8180] kworker/u8:26: attempt to access beyond end of device [ 124.827008][ T8180] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 124.868988][ T8180] kworker/u8:26: attempt to access beyond end of device [ 124.868988][ T8180] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 124.926451][ T8180] kworker/u8:26: attempt to access beyond end of device [ 124.926451][ T8180] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 124.956252][ T9219] loop9: detected capacity change from 0 to 1024 [ 124.967369][ T8180] kworker/u8:26: attempt to access beyond end of device [ 124.967369][ T8180] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 124.996448][ T8180] kworker/u8:26: attempt to access beyond end of device [ 124.996448][ T8180] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 125.010247][ T8180] kworker/u8:26: attempt to access beyond end of device [ 125.010247][ T8180] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 125.024015][ T8180] kworker/u8:26: attempt to access beyond end of device [ 125.024015][ T8180] loop6: rw=1, sector=289, nr_sectors = 8 limit=128 [ 125.037608][ T8180] kworker/u8:26: attempt to access beyond end of device [ 125.037608][ T8180] loop6: rw=1, sector=305, nr_sectors = 8 limit=128 [ 125.051623][ T8180] kworker/u8:26: attempt to access beyond end of device [ 125.051623][ T8180] loop6: rw=1, sector=321, nr_sectors = 8 limit=128 [ 125.084165][ T9224] loop6: detected capacity change from 0 to 1024 [ 125.087123][ T9219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.092614][ T9224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 125.146456][ T9224] System zones: 0-1, 3-36 [ 125.159658][ T9224] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1890: bad orphan inode 134217728 [ 125.216254][ T9224] loop6: lost filesystem error report for type 5 error -117 [ 125.216895][ T9224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.309871][ T9224] team0: Port device vxcan3 added [ 125.367426][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.385920][ T8877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.441218][ T9232] loop6: detected capacity change from 0 to 128 [ 125.552433][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1895'. [ 125.582155][ T9234] hsr_slave_0: left promiscuous mode [ 125.599068][ T9234] hsr_slave_1: left promiscuous mode [ 125.797448][ T9244] loop5: detected capacity change from 0 to 128 [ 126.474079][ T9260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.495015][ T9276] loop5: detected capacity change from 0 to 1024 [ 126.527397][ T9276] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 126.527397][ T9276] [ 126.554921][ T9280] loop8: detected capacity change from 0 to 128 [ 126.655760][ T9287] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 126.702342][ T9288] loop8: detected capacity change from 0 to 128 [ 127.340732][ T9300] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 127.364557][ T9305] loop8: detected capacity change from 0 to 2048 [ 127.379707][ T9303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.651024][ T9331] loop6: detected capacity change from 0 to 512 [ 127.665792][ T9331] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.709445][ T9331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.712895][ T9338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.747607][ T9331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.776351][ T9331] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.856630][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.884710][ T9212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.958474][ T9353] loop6: detected capacity change from 0 to 1024 [ 127.997172][ T9353] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 128.163520][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.170973][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.216409][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 128.216428][ T28] audit: type=1326 audit(1774912610.519:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.284206][ T28] audit: type=1326 audit(1774912610.529:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.311135][ T28] audit: type=1326 audit(1774912610.529:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.335247][ T28] audit: type=1326 audit(1774912610.529:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.361664][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.371985][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.425756][ T8180] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.470049][ T8180] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.479228][ T8180] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.498901][ T28] audit: type=1326 audit(1774912610.529:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.522792][ T8180] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.544952][ T28] audit: type=1326 audit(1774912610.529:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.601280][ T28] audit: type=1326 audit(1774912610.529:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.608309][ T9396] bridge_slave_0: left allmulticast mode [ 128.634006][ T9396] bridge_slave_0: left promiscuous mode [ 128.639935][ T28] audit: type=1326 audit(1774912610.529:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.642589][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.665021][ T28] audit: type=1326 audit(1774912610.529:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.694170][ T28] audit: type=1326 audit(1774912610.529:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.7.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44776fd04e code=0x7ffc0000 [ 128.718401][ T9396] bridge_slave_1: left allmulticast mode [ 128.724414][ T9396] bridge_slave_1: left promiscuous mode [ 128.731095][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.742632][ T9396] bond0: (slave bond_slave_0): Releasing backup interface [ 128.763309][ T9396] bond0: (slave bond_slave_1): Releasing backup interface [ 128.772496][ T9396] team0: Port device team_slave_0 removed [ 128.783140][ T9396] team0: Port device team_slave_1 removed [ 128.790086][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.797893][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.805637][ T9396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.905402][ T9405] netlink: 'syz.6.1961': attribute type 4 has an invalid length. [ 128.939271][ T9405] netlink: 'syz.6.1961': attribute type 4 has an invalid length. [ 129.181837][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1970'. [ 129.199169][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1970'. [ 129.209352][ T9426] netlink: 'syz.8.1970': attribute type 7 has an invalid length. [ 129.220828][ T62] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.230096][ T62] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.239771][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1970'. [ 129.249147][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1970'. [ 129.258518][ T9426] netlink: 'syz.8.1970': attribute type 7 has an invalid length. [ 129.266445][ T62] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.275185][ T62] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.323028][ T9434] loop8: detected capacity change from 0 to 1024 [ 129.342902][ T9434] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.364365][ T9434] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.379286][ T9434] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: comm syz.8.1974: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.393194][ T9434] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 129.406046][ T9434] EXT4-fs (loop8): This should not happen!! Data will be lost [ 129.406046][ T9434] [ 129.425808][ T8179] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: comm kworker/u8:25: lblock 0 mapped to illegal pblock 0 (length 1) [ 129.439673][ T8179] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 129.455421][ T8179] EXT4-fs (loop8): This should not happen!! Data will be lost [ 129.455421][ T8179] [ 129.466103][ T8179] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 112: padding at end of block bitmap is not set [ 129.481903][ T8179] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 129.494675][ T8179] EXT4-fs (loop8): This should not happen!! Data will be lost [ 129.494675][ T8179] [ 129.504665][ T8179] EXT4-fs (loop8): Total free blocks count 0 [ 129.511197][ T8179] EXT4-fs (loop8): Free/Dirty block details [ 129.517351][ T8179] EXT4-fs (loop8): free_blocks=0 [ 129.522774][ T8393] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 129.570727][ T9442] loop8: detected capacity change from 0 to 512 [ 129.613546][ T9444] loop8: detected capacity change from 0 to 512 [ 129.627993][ T9444] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 129.636094][ T9444] System zones: 0-2, 18-18, 34-35 [ 129.647340][ T9444] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.661672][ T9444] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.727770][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.775427][ T9451] loop8: detected capacity change from 0 to 736 [ 129.810564][ T9449] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.823964][ T9451] rock: directory entry would overflow storage [ 129.836005][ T9451] rock: sig=0x3b10, size=4, remaining=3 [ 129.912226][ T9457] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 129.943415][ T9457] EXT4-fs (loop6): 1 truncate cleaned up [ 129.951301][ T9457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.966856][ T9456] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1983: bg 0: block 465: padding at end of block bitmap is not set [ 129.992109][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.992710][ T9465] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 130.113079][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1990'. [ 130.848237][ T9348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.050598][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2007'. [ 131.069966][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2007'. [ 131.096952][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2007'. [ 131.215998][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2011'. [ 131.219007][ T9523] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2012'. [ 131.468427][ T9541] bridge_slave_0: left allmulticast mode [ 131.484421][ T9541] bridge_slave_0: left promiscuous mode [ 131.495011][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.517082][ T9541] bridge_slave_1: left allmulticast mode [ 131.522787][ T9541] bridge_slave_1: left promiscuous mode [ 131.549146][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.580038][ T9541] bond0: (slave bond_slave_0): Releasing backup interface [ 131.601787][ T9541] bond0: (slave bond_slave_1): Releasing backup interface [ 131.631546][ T9541] team0: Port device team_slave_0 removed [ 131.653225][ T9541] team0: Port device team_slave_1 removed [ 131.667983][ T9541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.685936][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.697953][ T9541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.715531][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.746145][ T9541] bond1: (slave vlan0): Releasing backup interface [ 131.921136][ T9551] set_capacity_and_notify: 4 callbacks suppressed [ 131.921156][ T9551] loop9: detected capacity change from 0 to 128 [ 132.295461][ T62] bio_check_eod: 314 callbacks suppressed [ 132.295533][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.295533][ T62] loop9: rw=1, sector=145, nr_sectors = 40 limit=128 [ 132.334848][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.334848][ T62] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 132.358762][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.358762][ T62] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 132.384804][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.384804][ T62] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 132.418639][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.418639][ T62] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 132.452610][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.452610][ T62] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 132.486453][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.486453][ T62] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 132.526487][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.526487][ T62] loop9: rw=1, sector=289, nr_sectors = 8 limit=128 [ 132.559729][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.559729][ T62] loop9: rw=1, sector=305, nr_sectors = 8 limit=128 [ 132.593394][ T62] kworker/u8:4: attempt to access beyond end of device [ 132.593394][ T62] loop9: rw=1, sector=321, nr_sectors = 8 limit=128 [ 133.341520][ T9646] netlink: 'syz.7.2043': attribute type 10 has an invalid length. [ 133.353453][ T9646] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 134.050320][ T9675] loop6: detected capacity change from 0 to 764 [ 134.059791][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 134.059808][ T28] audit: type=1400 audit(1774912616.369:1910): avc: denied { watch watch_reads } for pid=9674 comm="syz.6.2055" path="/175/file1/file0" dev="loop6" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 135.163068][ T9702] loop5: detected capacity change from 0 to 512 [ 135.212353][ T9702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.225075][ T9702] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.708434][ T9707] __nla_validate_parse: 6 callbacks suppressed [ 135.708453][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2056'. [ 135.732503][ T9711] loop7: detected capacity change from 0 to 128 [ 135.795973][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.843137][ T9717] ip6erspan0: entered promiscuous mode [ 136.004097][ T9732] loop8: detected capacity change from 0 to 4096 [ 136.041446][ T9732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.149007][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.184098][ T9745] loop6: detected capacity change from 0 to 1024 [ 136.206748][ T9745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.261948][ T9745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.344484][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.384691][ T9755] loop6: detected capacity change from 0 to 1024 [ 136.451959][ T9755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.507709][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.513594][ T9800] loop5: detected capacity change from 0 to 128 [ 137.546001][ T9800] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.576391][ T9800] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.632793][ T7319] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.821559][ T9826] PID 9826 killed due to inadequate hugepage pool [ 137.903340][ T9829] netlink: 'syz.6.2111': attribute type 1 has an invalid length. [ 137.911824][ T9829] netlink: 'syz.6.2111': attribute type 2 has an invalid length. [ 137.937064][ T9833] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2113'. [ 138.032702][ T9843] loop9: detected capacity change from 0 to 128 [ 138.099736][ T9849] loop6: detected capacity change from 0 to 128 [ 138.113330][ T28] audit: type=1326 audit(1774912620.419:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 138.149608][ T28] audit: type=1326 audit(1774912620.419:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 138.178468][ T28] audit: type=1326 audit(1774912620.449:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 138.202072][ T28] audit: type=1326 audit(1774912620.449:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.6.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 138.249355][ T9853] loop8: detected capacity change from 0 to 512 [ 138.255883][ T8178] bio_check_eod: 206 callbacks suppressed [ 138.255898][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.255898][ T8178] loop9: rw=1, sector=145, nr_sectors = 40 limit=128 [ 138.258745][ T9853] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.280410][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.280410][ T8178] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 138.301237][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.301237][ T8178] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 138.314931][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.314931][ T8178] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 138.329037][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.329037][ T8178] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 138.342806][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.342806][ T8178] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 138.343925][ T9853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.356352][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.356352][ T8178] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 138.382145][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.382145][ T8178] loop9: rw=1, sector=289, nr_sectors = 8 limit=128 [ 138.395875][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.395875][ T8178] loop9: rw=1, sector=305, nr_sectors = 8 limit=128 [ 138.409419][ T8178] kworker/u8:24: attempt to access beyond end of device [ 138.409419][ T8178] loop9: rw=1, sector=321, nr_sectors = 8 limit=128 [ 138.426241][ T9853] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.487373][ T9859] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2123'. [ 138.620237][ T9863] netlink: 'syz.9.2125': attribute type 10 has an invalid length. [ 138.683405][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.732687][ T9864] netlink: 'syz.9.2125': attribute type 10 has an invalid length. [ 138.745080][ T9864] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.838873][ T9863] bond0: (slave dummy0): Releasing backup interface [ 138.864797][ T9863] team0: Port device dummy0 added [ 139.006736][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2133'. [ 139.101730][ T9884] ip6gre2: entered promiscuous mode [ 139.107197][ T9884] ip6gre2: entered allmulticast mode [ 139.116124][ T9884] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 139.117146][ T40] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 139.145684][ T40] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 139.153507][ T9367] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 139.182488][ T9889] loop8: detected capacity change from 0 to 512 [ 139.219958][ T9889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.273131][ T9889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.310057][ T9889] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.345962][ T9907] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2144'. [ 139.381184][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.388462][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.398186][ T8393] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.434056][ T9907] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2144'. [ 139.534304][ T9927] ip6gre1: entered allmulticast mode [ 139.577833][ T9931] loop7: detected capacity change from 0 to 128 [ 139.646355][ T9367] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 139.726773][ T9367] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 139.823249][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'. [ 139.839908][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2157'. [ 140.051178][ T9955] netlink: 'syz.8.2165': attribute type 10 has an invalid length. [ 140.082353][ T9955] team0: Port device dummy0 added [ 140.094424][ T9955] netlink: 'syz.8.2165': attribute type 10 has an invalid length. [ 140.127550][ T9955] team0: Port device dummy0 removed [ 140.145426][ T9955] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.277600][ T9967] netlink: 'syz.9.2169': attribute type 1 has an invalid length. [ 140.307869][ T9967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.344889][ T9967] bond2: (slave geneve2): making interface the new active one [ 140.354018][ T9967] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 140.508593][ T28] audit: type=1326 audit(1774912622.819:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.532500][ T28] audit: type=1326 audit(1774912622.819:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.556061][ T28] audit: type=1326 audit(1774912622.819:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.583315][ T28] audit: type=1326 audit(1774912622.819:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25c7a1d04e code=0x7ffc0000 [ 140.608920][ T28] audit: type=1326 audit(1774912622.819:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.633039][ T28] audit: type=1326 audit(1774912622.819:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.660880][ T28] audit: type=1326 audit(1774912622.819:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.684544][ T28] audit: type=1326 audit(1774912622.819:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9979 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.709526][ T28] audit: type=1326 audit(1774912622.969:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 140.771247][ T9999] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2181'. [ 140.902158][T10012] loop6: detected capacity change from 0 to 764 [ 140.954412][T10012] Symlink component flag not implemented [ 140.966691][T10012] Symlink component flag not implemented [ 140.972618][T10012] Symlink component flag not implemented (128) [ 141.013178][T10012] Symlink component flag not implemented (122) [ 141.042222][T10015] pimreg: entered allmulticast mode [ 141.049629][T10015] pimreg: left allmulticast mode [ 141.688030][ T28] audit: type=1400 audit(1774912623.999:1924): avc: denied { ioctl } for pid=10047 comm="syz.8.2200" path="socket:[27603]" dev="sockfs" ino=27603 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 141.859384][T10058] loop8: detected capacity change from 0 to 128 [ 142.132189][T10079] loop5: detected capacity change from 0 to 512 [ 142.147607][T10079] tipc: Started in network mode [ 142.168842][T10079] tipc: Node identity ac1414aa, cluster identity 4711 [ 142.186403][T10079] tipc: Enabling of bearer rejected, failed to enable media [ 142.413916][T10092] : renamed from vlan0 (while UP) [ 142.537107][T10100] gretap1: entered promiscuous mode [ 142.619088][T10113] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.2228'. [ 142.694154][T10123] loop6: detected capacity change from 0 to 128 [ 142.701286][T10123] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 142.714849][ T8179] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 142.723484][ T8179] FAT-fs (loop6): Filesystem has been set read-only [ 142.730254][ T8179] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 143.267190][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 143.616666][ T3619] Bluetooth: hci0: sending frame failed (-49) [ 143.622825][ T3540] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 143.652335][T10167] loop5: detected capacity change from 0 to 512 [ 143.715377][T10167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.745111][T10167] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.798487][T10181] loop6: detected capacity change from 0 to 128 [ 143.900995][T10167] EXT4-fs error (device loop5): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.5.2250: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=8, size=2048 fake=0 [ 143.924874][T10167] EXT4-fs (loop5): Remounting filesystem read-only [ 143.964165][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.013395][T10194] ipip0: entered promiscuous mode [ 144.028033][T10194] ipip0: entered allmulticast mode [ 144.108984][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.141869][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.167320][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.187485][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.355293][T10228] netlink: 'syz.9.2278': attribute type 1 has an invalid length. [ 144.369553][T10228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.385897][T10228] bond3: (slave geneve3): making interface the new active one [ 144.386133][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b39000: rx timeout, send abort [ 144.394954][T10228] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 144.416642][ T8180] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.449174][ T8180] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.459099][T10233] netlink: 'syz.9.2279': attribute type 64 has an invalid length. [ 144.484249][ T8180] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.495538][ T8180] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.511537][T10233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10233 comm=syz.9.2279 [ 144.524371][T10233] netlink: 'syz.9.2279': attribute type 64 has an invalid length. [ 144.646667][T10247] loop5: detected capacity change from 0 to 512 [ 144.662458][T10247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.675728][T10247] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.711474][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.774920][T10253] loop5: detected capacity change from 0 to 1024 [ 144.797060][T10253] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 144.797060][T10253] [ 144.809570][T10244] loop9: detected capacity change from 0 to 32768 [ 144.846684][ T6429] loop9: p1 p3 < > [ 144.860733][T10257] loop8: detected capacity change from 0 to 128 [ 144.872783][T10244] loop9: p1 p3 < > [ 144.886235][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115381600: rx timeout, send abort [ 144.901635][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b39000: abort rx timeout. Force session deactivation [ 144.979608][T10265] pimreg: entered allmulticast mode [ 145.049411][ T6425] udevd[6425]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 145.061018][ T6429] udevd[6429]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 145.077712][ T6429] udevd[6429]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 145.089733][ T6425] udevd[6425]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 145.125932][T10273] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2298'. [ 145.268032][ T8180] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.357746][ T8180] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.394526][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115381600: abort rx timeout. Force session deactivation [ 145.433859][ T8180] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.617156][ T8180] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.940191][ T8180] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 145.957052][ T8180] bond0 (unregistering): Released all slaves [ 145.974598][T10283] chnl_net:caif_netlink_parms(): no params data found [ 146.045468][ T8180] hsr_slave_0: left promiscuous mode [ 146.053887][ T8180] hsr_slave_1: left promiscuous mode [ 146.260057][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2309'. [ 146.338541][T10325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.352801][T10325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.375736][T10283] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.383025][T10283] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.390714][T10283] bridge_slave_0: entered allmulticast mode [ 146.397286][T10283] bridge_slave_0: entered promiscuous mode [ 146.405552][T10283] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.420038][T10283] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.427367][T10283] bridge_slave_1: entered allmulticast mode [ 146.434046][T10283] bridge_slave_1: entered promiscuous mode [ 146.450800][T10336] tipc: Started in network mode [ 146.457058][T10336] tipc: Node identity 4, cluster identity 4711 [ 146.463296][T10336] tipc: Node number set to 4 [ 146.475575][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.476131][T10340] netlink: 'syz.7.2313': attribute type 83 has an invalid length. [ 146.496410][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.521155][T10283] team0: Port device team_slave_0 added [ 146.527944][T10283] team0: Port device team_slave_1 added [ 146.543789][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.575496][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.604798][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 146.604814][ T28] audit: type=1400 audit(1774912628.909:1978): avc: denied { getopt } for pid=10342 comm="syz.9.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.622087][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.657316][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.664454][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.707683][T10353] loop9: detected capacity change from 0 to 1024 [ 146.716265][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.741434][T10357] netlink: 'syz.6.2319': attribute type 9 has an invalid length. [ 146.754050][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2319'. [ 146.784312][T10364] loop7: detected capacity change from 0 to 512 [ 146.804830][T10283] hsr_slave_0: entered promiscuous mode [ 146.818074][T10353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.821052][T10283] hsr_slave_1: entered promiscuous mode [ 146.831508][T10364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.848766][T10364] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.863170][ T3619] Bluetooth: hci0: command 0x1003 tx timeout [ 146.866509][ T3540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.895164][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.948864][ T8877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.958054][T10357] netlink: 'syz.6.2319': attribute type 9 has an invalid length. [ 146.986275][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2319'. [ 147.095647][T10387] netlink: 'syz.7.2325': attribute type 1 has an invalid length. [ 147.161109][ T28] audit: type=1400 audit(1774912629.469:1979): avc: denied { write } for pid=10389 comm="syz.6.2326" lport=54479 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 147.220109][T10387] bond2: entered promiscuous mode [ 147.247440][T10387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.329713][T10397] bond2: (slave bridge2): making interface the new active one [ 147.350165][T10397] bridge2: entered promiscuous mode [ 147.362115][T10397] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 147.615243][T10283] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 147.658809][T10283] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 147.685882][T10283] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 147.704585][T10283] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 147.740374][ T28] audit: type=1400 audit(1774912630.049:1980): avc: denied { attach_queue } for pid=10414 comm="syz.9.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.911405][T10429] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2336'. [ 148.044783][T10283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.096906][T10283] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.125153][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.132365][ T8179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.213916][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.221151][ T8179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.402717][T10283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.442717][T10486] loop7: detected capacity change from 0 to 1024 [ 148.494548][T10447] loop6: detected capacity change from 0 to 32768 [ 148.522523][T10486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.546381][ T6429] loop6: p1 p3 < > [ 148.569171][T10486] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.581911][T10447] loop6: p1 p3 < > [ 148.656931][ T28] audit: type=1326 audit(1774912630.969:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.5.2352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a50dec819 code=0x0 [ 148.804783][ T28] audit: type=1326 audit(1774912631.109:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.6.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 148.838981][ T28] audit: type=1326 audit(1774912631.109:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.6.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 148.868226][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.873764][ T28] audit: type=1326 audit(1774912631.139:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.6.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 148.905056][ T28] audit: type=1326 audit(1774912631.139:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.6.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 148.940544][T10283] veth0_vlan: entered promiscuous mode [ 148.950596][ T28] audit: type=1326 audit(1774912631.139:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.6.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 149.002548][T10283] veth1_vlan: entered promiscuous mode [ 149.004468][ T6425] udevd[6425]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 149.009808][ T6429] udevd[6429]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 149.018402][ T28] audit: type=1326 audit(1774912631.139:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.6.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c7a5c819 code=0x7ffc0000 [ 149.061909][T10283] veth0_macvtap: entered promiscuous mode [ 149.069839][T10283] veth1_macvtap: entered promiscuous mode [ 149.082053][T10283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.093171][T10283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.107944][ T4017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.120138][T10547] loop7: detected capacity change from 0 to 128 [ 149.130281][ T4017] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.139158][ T4017] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.149594][ T4017] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.637585][T10570] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 150.829864][T10593] netlink: 'syz.7.2376': attribute type 4 has an invalid length. [ 150.839919][T10593] netlink: 'syz.7.2376': attribute type 4 has an invalid length. [ 151.038739][T10601] loop7: detected capacity change from 0 to 256 [ 151.059287][T10601] FAT-fs (loop7): bogus number of FAT sectors [ 151.067862][T10601] FAT-fs (loop7): Can't find a valid FAT filesystem [ 151.942648][T10544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.958719][T10609] 9pnet: p9_errstr2errno: server reported unknown error  [ 152.012908][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 152.012928][ T28] audit: type=1400 audit(1774912634.319:2010): avc: denied { write } for pid=10613 comm="syz.9.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.221450][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2390'. [ 152.230706][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2390'. [ 152.254763][T10628] netlink: 'syz.7.2390': attribute type 6 has an invalid length. [ 152.274705][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2390'. [ 152.292620][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2390'. [ 152.302374][T10628] netlink: 'syz.7.2390': attribute type 6 has an invalid length. [ 152.352570][ T28] audit: type=1326 audit(1774912634.659:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.401480][ T28] audit: type=1326 audit(1774912634.659:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.442079][ T28] audit: type=1326 audit(1774912634.659:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.452649][T10642] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 152.466035][ T28] audit: type=1326 audit(1774912634.659:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.509186][ T28] audit: type=1326 audit(1774912634.689:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.557957][ T28] audit: type=1326 audit(1774912634.689:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.581847][ T28] audit: type=1326 audit(1774912634.689:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.610267][ T28] audit: type=1326 audit(1774912634.689:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.678297][T10653] loop9: detected capacity change from 0 to 4096 [ 152.685121][T10653] EXT4-fs: Ignoring removed bh option [ 152.713527][ T28] audit: type=1326 audit(1774912634.689:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.5.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x7ffc0000 [ 152.718313][T10653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.855023][T10670] loop6: detected capacity change from 0 to 128 [ 152.950536][T10675] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2411'. [ 152.959962][T10675] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2411'. [ 153.019477][ T62] bio_check_eod: 98 callbacks suppressed [ 153.019528][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.019528][ T62] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 153.091467][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.091467][ T62] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 153.136339][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.136339][ T62] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 153.184110][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.184110][ T62] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 153.216295][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.216295][ T62] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 153.233864][T10691] loop8: detected capacity change from 0 to 512 [ 153.240362][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.240362][ T62] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 153.255269][T10691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.267476][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.267476][ T62] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 153.283467][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.283467][ T62] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 153.297320][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.297320][ T62] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 153.298977][T10691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.311350][ T62] kworker/u8:4: attempt to access beyond end of device [ 153.311350][ T62] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 153.323425][T10691] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.381820][T10691] EXT4-fs (loop8): Online defrag not supported for non-extent files [ 153.453275][T10283] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.505074][T10704] loop6: detected capacity change from 0 to 128 [ 153.510573][T10704] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.510754][T10704] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.554728][T10704] Invalid argument reading file caps for ./file0 [ 153.590138][ T6761] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.756103][ T8877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.878557][T10720] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 153.885120][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.912993][T10720] vhci_hcd vhci_hcd.0: Device attached [ 153.931086][T10720] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 153.937698][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.952916][T10726] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2432'. [ 153.970537][T10726] netlink: zone id is out of range [ 153.978190][T10720] vhci_hcd vhci_hcd.0: Device attached [ 153.984509][T10726] netlink: zone id is out of range [ 153.989866][T10729] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(8) [ 153.996387][T10729] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.041883][T10726] netlink: set zone limit has 8 unknown bytes [ 154.048100][T10729] vhci_hcd vhci_hcd.0: Device attached [ 154.074349][T10720] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(7) [ 154.080924][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.096253][T10720] vhci_hcd vhci_hcd.0: Device attached [ 154.114899][T10720] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(11) [ 154.121532][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.132593][T10720] vhci_hcd vhci_hcd.0: Device attached [ 154.146241][ T9380] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 154.167908][T10729] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(14) [ 154.174670][T10729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.183098][T10729] vhci_hcd vhci_hcd.0: Device attached [ 154.191149][T10749] vhci_hcd: connection closed [ 154.191357][T10739] vhci_hcd: connection closed [ 154.192579][T10745] vhci_hcd: connection closed [ 154.198136][T10721] vhci_hcd: connection reset by peer [ 154.200766][T10730] vhci_hcd: connection closed [ 154.205700][T10727] vhci_hcd: connection closed [ 154.210735][ T62] vhci_hcd vhci_hcd.9: stop threads [ 154.238993][ T62] vhci_hcd vhci_hcd.9: release socket [ 154.244445][ T62] vhci_hcd vhci_hcd.9: disconnect device [ 154.254762][ T62] vhci_hcd vhci_hcd.9: stop threads [ 154.260379][ T62] vhci_hcd vhci_hcd.9: release socket [ 154.265914][ T62] vhci_hcd vhci_hcd.9: disconnect device [ 154.285833][ T62] vhci_hcd vhci_hcd.9: stop threads [ 154.291508][ T62] vhci_hcd vhci_hcd.9: release socket [ 154.329154][ T62] vhci_hcd vhci_hcd.9: disconnect device [ 154.347916][ T62] vhci_hcd vhci_hcd.9: stop threads [ 154.353432][ T62] vhci_hcd vhci_hcd.9: release socket [ 154.368178][ T62] vhci_hcd vhci_hcd.9: disconnect device [ 154.374257][ T62] vhci_hcd vhci_hcd.9: stop threads [ 154.385706][ T62] vhci_hcd vhci_hcd.9: release socket [ 154.391743][ T62] vhci_hcd vhci_hcd.9: disconnect device [ 154.395419][T10756] loop6: detected capacity change from 0 to 4096 [ 154.411708][ T62] vhci_hcd vhci_hcd.9: stop threads [ 154.424186][T10756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.438301][T10756] EXT4-fs (loop6): shut down requested (2) [ 154.444715][ T62] vhci_hcd vhci_hcd.9: release socket [ 154.459812][ T62] vhci_hcd vhci_hcd.9: disconnect device [ 154.466001][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.762822][T10787] loop7: detected capacity change from 0 to 1024 [ 154.830137][T10787] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 154.843361][T10787] System zones: 0-1, 3-36 [ 154.858473][T10787] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2454: bad orphan inode 134217728 [ 154.886392][T10787] loop7: lost filesystem error report for type 5 error -117 [ 154.887045][T10787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.926655][T10785] loop6: detected capacity change from 0 to 32768 [ 154.967333][T10785] loop6: p1 p3 < > [ 155.031951][T10797] loop8: detected capacity change from 0 to 4096 [ 155.088592][T10797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.293248][ T6429] udevd[6429]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 155.304465][ T6425] udevd[6425]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 155.355828][T10804] loop5: detected capacity change from 0 to 8192 [ 155.389476][T10283] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.553311][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.735118][T10822] loop7: detected capacity change from 0 to 512 [ 155.748243][T10822] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.805049][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2469'. [ 156.085168][T10840] loop5: detected capacity change from 0 to 512 [ 156.094166][T10840] EXT4-fs: Ignoring removed nobh option [ 156.132673][T10840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.172438][T10840] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.203563][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.857368][ T3412] IPVS: starting estimator thread 0... [ 156.946415][T10878] IPVS: using max 2640 ests per chain, 132000 per kthread [ 157.169642][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 157.169717][ T28] audit: type=1400 audit(1774912639.479:2129): avc: denied { getopt } for pid=10899 comm="syz.5.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 157.238313][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2501'. [ 157.534002][T10916] loop5: detected capacity change from 0 to 4096 [ 157.666697][T10916] EXT4-fs: Ignoring removed bh option [ 157.688597][T10916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.719784][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.057268][ T5492] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 158.067458][ T5492] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.153769][T10944] loop8: detected capacity change from 0 to 512 [ 158.188243][T10944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.238047][T10283] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.418343][T10966] netlink: 'syz.5.2527': attribute type 1 has an invalid length. [ 158.757132][T10988] loop5: detected capacity change from 0 to 256 [ 158.802443][ T28] audit: type=1400 audit(1774912641.109:2130): avc: denied { watch watch_reads } for pid=10987 comm="syz.5.2536" path="/258/file0/file0" dev="loop5" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 158.988502][T10992] loop9: detected capacity change from 0 to 1024 [ 159.012694][T10992] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 159.012694][T10992] [ 159.041905][ T4014] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.177057][ T9380] usb 19-1: enqueue for inactive port 0 [ 159.186440][ T9380] usb 19-1: enqueue for inactive port 0 [ 159.189163][T10997] hsr0: entered promiscuous mode [ 159.211584][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2539'. [ 159.266378][ T9380] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 159.485709][ T28] audit: type=1400 audit(1774912641.789:2131): avc: denied { map } for pid=11012 comm="syz.8.2546" path="socket:[30448]" dev="sockfs" ino=30448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.529276][ T28] audit: type=1400 audit(1774912641.789:2132): avc: denied { accept } for pid=11012 comm="syz.8.2546" path="socket:[30448]" dev="sockfs" ino=30448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.567859][T11017] loop5: detected capacity change from 0 to 512 [ 159.592239][T11017] EXT4-fs: Ignoring removed nobh option [ 159.599932][T11017] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 159.608912][T11017] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2549: attempt to clear invalid blocks 1 len 1 [ 159.627095][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2550'. [ 159.638382][T11017] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 159.646751][T11017] EXT4-fs (loop5): Remounting filesystem read-only [ 159.662576][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 159.662606][ C1] EXT4-fs (loop5): initial error at time 1774912641: ext4_clear_blocks:876: inode 13 [ 159.662639][ C1] EXT4-fs (loop5): last error at time 1774912641: ext4_clear_blocks:876: inode 13 [ 159.688516][T11017] EXT4-fs (loop5): 1 truncate cleaned up [ 159.694589][T11017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.711574][T11017] EXT4-fs (loop5): shut down requested (0) [ 159.758695][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.865896][T10980] kexec: Could not allocate control_code_buffer [ 159.928599][T11029] loop6: detected capacity change from 0 to 1024 [ 159.935713][T11029] EXT4-fs: Ignoring removed bh option [ 159.963189][T11029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.977075][T11029] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.051815][T11038] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.2554: Freeing blocks not in datazone - block = 0, count = 16 [ 160.110987][ T8178] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:24: bg 0: block 112: padding at end of block bitmap is not set [ 160.128248][ T8178] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 160.142641][ T8178] EXT4-fs (loop6): This should not happen!! Data will be lost [ 160.142641][ T8178] [ 160.152701][ T8178] EXT4-fs (loop6): Total free blocks count 0 [ 160.158940][ T8178] EXT4-fs (loop6): Free/Dirty block details [ 160.165338][ T8178] EXT4-fs (loop6): free_blocks=16 [ 160.170583][ T8178] EXT4-fs (loop6): dirty_blocks=32 [ 160.175954][ T8178] EXT4-fs (loop6): Block reservation details [ 160.182192][ T8178] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 160.189598][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2048 with max blocks 4 with error 28 [ 160.202337][ T6761] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 160.626431][ T28] audit: type=1326 audit(1774912642.929:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.7.2569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x0 [ 160.670064][T11073] loop6: detected capacity change from 0 to 4096 [ 160.682206][T11073] EXT4-fs: Ignoring removed bh option [ 160.727548][T11073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.057945][ T28] audit: type=1400 audit(1774912643.369:2134): avc: denied { ioctl } for pid=11087 comm="syz.8.2576" path="socket:[30567]" dev="sockfs" ino=30567 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 161.096274][ T3619] Bluetooth: hci0: command 0x1003 tx timeout [ 161.096838][ T3540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.153689][ T28] audit: type=1400 audit(1774912643.459:2135): avc: denied { ioctl } for pid=11095 comm="syz.8.2588" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=31564 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.208057][T11098] loop9: detected capacity change from 0 to 4096 [ 161.225947][T11098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.252435][ T28] audit: type=1400 audit(1774912643.559:2136): avc: denied { accept } for pid=11100 comm="syz.8.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.425548][ T8877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.518308][T11118] netlink: 'syz.9.2585': attribute type 5 has an invalid length. [ 161.552965][T11121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.564811][T11121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.660299][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.786519][ T28] audit: type=1400 audit(1774912644.089:2137): avc: denied { setopt } for pid=11131 comm="syz.9.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.932123][T11145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.963535][T11167] loop7: detected capacity change from 0 to 512 [ 164.970931][T11167] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.981966][T11167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.018486][T11168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.034793][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2606'. [ 165.055170][T11167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.069454][T11167] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.116458][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.145535][T11186] loop6: detected capacity change from 0 to 128 [ 165.209852][ T28] audit: type=1400 audit(1774912647.519:2138): avc: denied { write } for pid=11189 comm="syz.6.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.390888][T11211] futex_wake_op: syz.9.2626 tries to shift op by -1; fix this program [ 165.463438][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2628'. [ 165.702093][ T28] audit: type=1400 audit(1774912648.009:2139): avc: denied { read } for pid=11234 comm="syz.9.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.811148][T11242] loop5: detected capacity change from 0 to 128 [ 166.020533][T11240] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.044220][ T28] audit: type=1326 audit(1774912648.349:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.2640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a50dec819 code=0x0 [ 166.068150][T11240] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.219922][T11247] loop8: detected capacity change from 0 to 1024 [ 166.240781][T11247] EXT4-fs: Ignoring removed bh option [ 166.401213][T11247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.470000][T11247] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.555270][T11247] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: block 3: comm syz.8.2641: lblock 3 mapped to illegal pblock 3 (length 3) [ 166.618657][T11266] EXT4-fs error (device loop8): ext4_ext_remove_space:2969: inode #15: comm syz.8.2641: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 166.676596][T11247] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 166.698053][T11266] EXT4-fs error (device loop8) in ext4_setattr:6028: Corrupt filesystem [ 166.705843][T11247] EXT4-fs (loop8): This should not happen!! Data will be lost [ 166.705843][T11247] [ 166.759584][T11276] loop5: detected capacity change from 0 to 256 [ 166.760492][T11278] loop6: detected capacity change from 0 to 512 [ 166.772329][T11272] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #15: block 3: comm syz.8.2641: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.828790][T11278] EXT4-fs: Ignoring removed i_version option [ 166.871188][T11278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.898727][ T40] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 166.931058][ T40] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 166.993386][ T40] EXT4-fs (loop8): This should not happen!! Data will be lost [ 166.993386][ T40] [ 167.042230][T10283] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 167.066700][T10283] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.077889][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.118619][ T28] audit: type=1326 audit(1774912649.419:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.5.2657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a50dec819 code=0x0 [ 167.188708][T11290] team_slave_0: entered promiscuous mode [ 167.194411][T11290] team_slave_1: entered promiscuous mode [ 167.226944][T11290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.239900][T11290] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 167.251001][ T28] audit: type=1400 audit(1774912649.549:2142): avc: denied { setopt } for pid=11291 comm="syz.6.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.466702][T11299] loop6: detected capacity change from 0 to 4096 [ 167.509774][T11299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.598215][ T6761] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.083241][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2675'. [ 168.294554][ T28] audit: type=1400 audit(1774912650.599:2143): avc: denied { write } for pid=5492 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32991 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.362112][ T28] audit: type=1400 audit(1774912650.669:2144): avc: denied { read write } for pid=11355 comm="syz.5.2685" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.398517][ T28] audit: type=1400 audit(1774912650.669:2145): avc: denied { open } for pid=11355 comm="syz.5.2685" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.444423][T11362] loop5: detected capacity change from 0 to 128 [ 168.599000][T11362] bio_check_eod: 24 callbacks suppressed [ 168.599018][T11362] syz.5.2688: attempt to access beyond end of device [ 168.599018][T11362] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 168.867176][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.885858][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.886610][ T28] audit: type=1326 audit(1774912651.189:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.8.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da6ec819 code=0x7ffc0000 [ 168.960972][ T28] audit: type=1326 audit(1774912651.189:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.8.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da6ec819 code=0x7ffc0000 [ 169.098026][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2708'. [ 169.638477][T11431] loop7: detected capacity change from 0 to 2048 [ 169.698131][ T6425] loop7: p2 p3 p7 [ 169.711126][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 169.731266][T11431] loop7: p2 p3 p7 [ 169.881384][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 169.888500][ T6429] udevd[6429]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 169.902446][ T6425] udevd[6425]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 170.114908][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2729'. [ 170.339369][T11456] bond4: entered promiscuous mode [ 170.366530][T11456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.127505][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 171.127521][ T28] audit: type=1400 audit(1774912653.439:2168): avc: denied { accept } for pid=11489 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 171.189827][T11488] loop5: detected capacity change from 0 to 4096 [ 171.207348][T11488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.303537][ T7319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.329053][ T9377] IPVS: starting estimator thread 0... [ 171.377273][ T28] audit: type=1400 audit(1774912653.689:2169): avc: denied { read } for pid=11498 comm="syz.5.2746" path="socket:[32290]" dev="sockfs" ino=32290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.436964][T11495] IPVS: using max 2640 ests per chain, 132000 per kthread [ 171.454037][T11499] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 171.556125][ T28] audit: type=1326 audit(1774912653.859:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.595867][ T28] audit: type=1326 audit(1774912653.859:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.623050][ T28] audit: type=1326 audit(1774912653.899:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.696940][ T28] audit: type=1326 audit(1774912653.899:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.723582][ T28] audit: type=1326 audit(1774912653.899:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.749998][ T28] audit: type=1326 audit(1774912653.899:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.777169][ T28] audit: type=1326 audit(1774912653.899:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.802349][ T28] audit: type=1326 audit(1774912653.899:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.7.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447773c819 code=0x7ffc0000 [ 171.834139][T11539] : port 1(veth0_to_bridge) entered blocking state [ 171.841183][T11539] : port 1(veth0_to_bridge) entered disabled state [ 171.855193][T11539] veth0_to_bridge: entered allmulticast mode [ 171.870165][T11539] veth0_to_bridge: entered promiscuous mode [ 171.996469][T11563] netlink: 'syz.5.2775': attribute type 4 has an invalid length. [ 172.238999][T11594] loop8: detected capacity change from 0 to 128 [ 172.410666][T11614] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2798'. [ 172.633105][T11634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=11634 comm=syz.8.2806 [ 172.681327][T11629] A link change request failed with some changes committed already. Interface vxcan3 may have been left with an inconsistent configuration, please check. [ 172.699784][T11627] syzkaller1: entered promiscuous mode [ 172.705569][T11627] syzkaller1: entered allmulticast mode [ 172.757361][T11633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.804747][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2808'. [ 172.834968][T11642] can0: slcan on ttyS3. [ 172.841700][T11642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.855748][T11642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.908267][T11642] can0 (unregistered): slcan off ttyS3. [ 173.354615][T11678] loop7: detected capacity change from 0 to 1024 [ 173.368839][T11678] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 173.382513][T11678] System zones: 0-1, 3-12 [ 173.388506][T11678] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.567648][T11699] syz.9.2822 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.644239][T11708] loop9: detected capacity change from 0 to 512 [ 173.661037][T11708] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.743980][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2830'. [ 173.779726][ T8179] ================================================================== [ 173.787963][ T8179] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 173.797506][ T8179] [ 173.799928][ T8179] write to 0xffff888148fc40b5 of 2 bytes by task 11708 on cpu 0: [ 173.807916][ T8179] copy_folio_from_iter_atomic+0x75f/0x1170 [ 173.813958][ T8179] generic_perform_write+0x2c1/0x490 [ 173.819288][ T8179] __generic_file_write_iter+0x9e/0x120 [ 173.825156][ T8179] generic_file_write_iter+0x8d/0x310 [ 173.830544][ T8179] iter_file_splice_write+0x6c4/0xa80 [ 173.835922][ T8179] direct_splice_actor+0x156/0x2a0 [ 173.841042][ T8179] splice_direct_to_actor+0x311/0x670 [ 173.846420][ T8179] do_splice_direct+0x119/0x1a0 [ 173.851528][ T8179] do_sendfile+0x382/0x650 [ 173.855977][ T8179] __x64_sys_sendfile64+0x105/0x150 [ 173.861206][ T8179] x64_sys_call+0x2dc4/0x3020 [ 173.865908][ T8179] do_syscall_64+0x12c/0x370 [ 173.870510][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.876593][ T8179] [ 173.878933][ T8179] read to 0xffff888148fc4000 of 512 bytes by task 8179 on cpu 1: [ 173.886657][ T8179] copy_folio_from_iter_atomic+0x75f/0x1170 [ 173.892582][ T8179] generic_perform_write+0x2c1/0x490 [ 173.897893][ T8179] shmem_file_write_iter+0xc5/0xf0 [ 173.903025][ T8179] lo_rw_aio+0x67d/0x730 [ 173.907295][ T8179] loop_process_work+0x56c/0xac0 [ 173.912250][ T8179] loop_workfn+0x31/0x40 [ 173.916505][ T8179] process_scheduled_works+0x513/0xa10 [ 173.921978][ T8179] worker_thread+0x58a/0x780 [ 173.926578][ T8179] kthread+0x22a/0x280 [ 173.930652][ T8179] ret_from_fork+0x150/0x360 [ 173.935252][ T8179] ret_from_fork_asm+0x1a/0x30 [ 173.940027][ T8179] [ 173.942447][ T8179] Reported by Kernel Concurrency Sanitizer on: [ 173.948771][ T8179] CPU: 1 UID: 0 PID: 8179 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 173.958316][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.968375][ T8179] Workqueue: loop9 loop_workfn [ 173.973152][ T8179] ================================================================== [ 174.189453][ T7092] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000.