last executing test programs: 3m16.8907355s ago: executing program 32 (id=317): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000100)=""/241, 0xf1) 2m48.552474384s ago: executing program 33 (id=1130): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4414, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4002000}, 0x600c010) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000141, 0x0) 2m39.549038269s ago: executing program 34 (id=1888): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000001280)=@in4={0x21, 0x1, 0x2, 0x1c, {0x2, 0x4e20, @loopback}}, 0x24) 2m27.063328068s ago: executing program 35 (id=1794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="38002f800c00020000000000000000000800010000000000200003800800010003"], 0x54}}, 0x0) 2m20.479034562s ago: executing program 36 (id=2450): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000040)="1a00000000000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m39.808538125s ago: executing program 37 (id=4002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 1m30.561799004s ago: executing program 5 (id=4292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1m30.538088166s ago: executing program 5 (id=4294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300000000000800000d00000008000300", @ANYRES32=r2], 0x1c}}, 0x10000000) 1m30.47197497s ago: executing program 5 (id=4297): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000140)) 1m30.47146022s ago: executing program 5 (id=4298): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) 1m30.414930723s ago: executing program 5 (id=4301): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m30.373698356s ago: executing program 5 (id=4302): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}}) 1m15.319956164s ago: executing program 38 (id=4302): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}}) 1m4.556985744s ago: executing program 0 (id=4888): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 1m3.707336843s ago: executing program 0 (id=4927): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x4, 0x800000000a, 0x1}) 1m3.59486492s ago: executing program 0 (id=4931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 1m3.59392036s ago: executing program 0 (id=4932): r0 = gettid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r1, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) 1m3.477013277s ago: executing program 0 (id=4938): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0xc04, &(0x7f0000000580)={[{@orlov}, {@noinit_itable}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xffff7ffd, 0x10100, 0x0, 0x281}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='8\f\x00\x00'], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m3.442311298s ago: executing program 0 (id=4941): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 52.435373883s ago: executing program 1 (id=5202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 52.379895116s ago: executing program 1 (id=5206): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0xa772da54, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000746002c"], 0x50) 52.179522907s ago: executing program 1 (id=5216): syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10011, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) syz_clone(0x88a23180, 0x0, 0x0, 0x0, 0x0, 0x0) 51.978972239s ago: executing program 1 (id=5225): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000640)='./file0\x00', 0x272) 51.955541261s ago: executing program 1 (id=5227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f88", 0x11}, {&(0x7f0000000080)='n', 0x1}, {&(0x7f0000000180)="c5be2422", 0x4}], 0x3) 50.43928078s ago: executing program 1 (id=5275): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 50.439133539s ago: executing program 39 (id=5275): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 48.425776967s ago: executing program 40 (id=4941): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 33.601887424s ago: executing program 7 (id=5680): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[], 0x4e8}, 0x4008000) 33.601460874s ago: executing program 7 (id=5681): r0 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x57, 0x0}, 0x0, 0x120, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 33.575504516s ago: executing program 7 (id=5682): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 33.461746973s ago: executing program 7 (id=5683): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x40002, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 33.423687365s ago: executing program 7 (id=5685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000a0a01020600000000000000020000000900010073797a30"], 0x20}}, 0x4000804) 33.326027201s ago: executing program 7 (id=5687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e9b590007e03dd65193d3000000963f86dd60", 0x13}, {&(0x7f0000000280)="b70000181100dabeef4ba0d5a14462732834d185932a8b3bedc61d15244b6939f1f68b2019475c32ef", 0x29}], 0x2) 33.291135872s ago: executing program 41 (id=5687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e9b590007e03dd65193d3000000963f86dd60", 0x13}, {&(0x7f0000000280)="b70000181100dabeef4ba0d5a14462732834d185932a8b3bedc61d15244b6939f1f68b2019475c32ef", 0x29}], 0x2) 26.167800389s ago: executing program 8 (id=5883): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x4006d1c, 0x2}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x79, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7ffffe, 0x1}, 0x1a110, 0x1, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 26.123602472s ago: executing program 8 (id=5885): unshare(0x20060400) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 25.358685106s ago: executing program 8 (id=5921): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000001100)='./file0\x00', 0x0, 0x989046, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 25.324401258s ago: executing program 8 (id=5922): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) 25.235114524s ago: executing program 8 (id=5925): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) 24.916235672s ago: executing program 8 (id=5932): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 24.899459063s ago: executing program 42 (id=5932): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1.21145644s ago: executing program 2 (id=6544): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a800080008008a47ebbe72da918969ae8367434141104004080000055c0461c1d67f6f94007134cf6efb8000a007d4a73ae61c066d776474a02bb482a5b5db3e915f21277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ef3360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xd9}], 0x1}, 0x0) 980.784002ms ago: executing program 3 (id=6548): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="9a21b617ee3acfd6bcac3ac5221e0833921f0357fa76677a5088f065ee9db398e0a3d7c243c33a78c3d4342fbe6efeaab3cb95031449c21b99f2760731e91620ec10b8429457941979603f8d56c9eac36d8b0f88eb3c483380393711de4cc707e87d216bdc0014fc291105051d6c31beb8d997e36e8e85ce6782c4a79324080507c41e5bea68cfdc34fb90a100b7dd93d0fc100ea57a0d3f2bf3e2abd1334ae4e1c6afcf40", 0xa5}, {&(0x7f0000001740)="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", 0x72a}], 0x2) sendfile(r1, r0, 0x0, 0x7fffeff9) 932.592786ms ago: executing program 2 (id=6549): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 910.739477ms ago: executing program 9 (id=6550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 910.233807ms ago: executing program 6 (id=6551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 843.263031ms ago: executing program 2 (id=6552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@lazytime}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000010a"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 840.273091ms ago: executing program 3 (id=6553): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x1, 0x0, 0x6, 0xfff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x11ce, &(0x7f0000001240)="$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") lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 784.943414ms ago: executing program 9 (id=6554): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) ftruncate(r0, 0x6) 740.194067ms ago: executing program 2 (id=6555): socketpair$unix(0x1, 0x2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00000000c0)={0x3a, 0x8000006, 0x4}) 700.840869ms ago: executing program 2 (id=6556): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 693.05391ms ago: executing program 6 (id=6557): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 599.157605ms ago: executing program 4 (id=6558): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x1cc, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x19c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0xb8, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0x85}, {0xc, 0x4, 0x1}, {0xc}, {0xc}, {0xc, 0x4, 0xffffffff}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x8000}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x100000000}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xe}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x64, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x9}, {0xc, 0x4, 0xf}, {0xc}, {0xc, 0x4, 0xbf4c}, {0xc, 0x4, 0xc4ee}, {0xc, 0x4, 0x3f9c}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x3f6bc000000}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x1cc}}, 0x20000000) 598.944785ms ago: executing program 6 (id=6559): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioperm(0x0, 0x7fff, 0x15f9) r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000140)={0x0, 0xffffffffffffffef}) 592.830096ms ago: executing program 3 (id=6560): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 539.152009ms ago: executing program 4 (id=6561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x10, 0x4, 0x0, 0x0, 0x50, 0x68, 0xe000, 0x1, 0x2f, 0x0, @private=0xa010101, @empty, {[@generic={0x83, 0xf, "57ad0a49883bbaf451b2458852"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x16, 0x0, [{0x7, 0x10, "f71c61fbf7fae2723054bc144be7"}]}]}}, {0xa001, 0x880b, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x0, @val=0x80}}}}}}}}, 0x62) 499.031761ms ago: executing program 6 (id=6562): clock_gettime(0x4, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0a81, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0x8012, r0, 0x0) 344.1871ms ago: executing program 4 (id=6563): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}], 0x1}, 0x10182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="38010000160001"], 0x138}}, 0x844) 327.347561ms ago: executing program 4 (id=6564): socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 286.651513ms ago: executing program 9 (id=6565): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 234.192267ms ago: executing program 3 (id=6566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 205.939058ms ago: executing program 9 (id=6567): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 196.257769ms ago: executing program 4 (id=6568): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) sendto$l2tp6(r0, 0x0, 0x0, 0x24000010, &(0x7f00000002c0)={0xa, 0x0, 0x5, @private2, 0xffff8000, 0x2}, 0x20) 169.2252ms ago: executing program 4 (id=6569): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0x3ce, &(0x7f00000004c0)="$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") set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 154.479151ms ago: executing program 3 (id=6570): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 147.767252ms ago: executing program 9 (id=6571): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x12122, 0x10000, 0xfffffffe, 0x2, 0x8, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) 96.077065ms ago: executing program 9 (id=6572): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 85.521775ms ago: executing program 6 (id=6573): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 38.700168ms ago: executing program 3 (id=6574): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x12d1c2, 0x1c) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103000, 0x191) 37.988368ms ago: executing program 2 (id=6575): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001300010925bd70000000000000000000", @ANYRES32, @ANYBLOB="12"], 0x2c}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 0s ago: executing program 6 (id=6576): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): e=0x7ffc0000 [ 196.774876][ T29] audit: type=1326 audit(196.692:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.8.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a60acb9 code=0x7ffc0000 [ 196.896960][ T29] audit: type=1326 audit(196.772:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.8.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd77a60acb9 code=0x7ffc0000 [ 196.920369][ T29] audit: type=1326 audit(196.782:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.8.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a60acb9 code=0x7ffc0000 [ 196.943914][ T29] audit: type=1326 audit(196.782:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16466 comm="syz.8.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a60acb9 code=0x7ffc0000 [ 197.021707][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.156420][T16487] loop4: detected capacity change from 0 to 512 [ 197.171518][T16487] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.181538][T16487] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 197.238885][ T29] audit: type=1326 audit(197.182:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16496 comm="syz.8.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd77a60acb9 code=0x7ffc0000 [ 197.261944][ T29] audit: type=1326 audit(197.182:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16496 comm="syz.8.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd77a60acb9 code=0x7ffc0000 [ 197.285111][ T29] audit: type=1326 audit(197.182:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz.8.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd77a5cb58e code=0x7ffc0000 [ 197.376871][T16508] loop4: detected capacity change from 0 to 512 [ 197.387945][T16508] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 197.401320][T16508] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5027: bg 0: block 255: padding at end of block bitmap is not set [ 197.447512][T16508] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 197.476999][T16508] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5027: invalid indirect mapped block 1 (level 1) [ 197.573059][T16508] EXT4-fs (loop4): 1 truncate cleaned up [ 197.587779][T16508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.666780][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.715458][T16521] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.732220][T16525] loop4: detected capacity change from 0 to 128 [ 197.746523][T16525] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 197.774682][T16525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.798771][T16525] EXT4-fs (loop4): shut down requested (2) [ 197.828440][T15364] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.851830][T16532] loop7: detected capacity change from 0 to 1024 [ 197.852230][T16534] loop8: detected capacity change from 0 to 128 [ 197.862960][T16532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.888990][T16532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 197.901684][T16537] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5041'. [ 197.910918][T16537] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5041'. [ 197.911637][T16532] System zones: 0-1 [ 197.920174][ T3395] delete_channel: no stack [ 197.920206][T16532] , 3-36 [ 197.929459][T16534] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.947677][T16532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.962731][T16537] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5041'. [ 197.971684][T16537] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5041'. [ 197.997612][T16539] syzkaller1: entered promiscuous mode [ 198.003280][T16539] syzkaller1: entered allmulticast mode [ 198.066845][T16544] loop1: detected capacity change from 0 to 164 [ 198.117238][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5045'. [ 198.163018][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.406197][T16586] sd 0:0:1:0: device reset [ 198.528983][T16591] SELinux: ebitmap: empty map [ 198.544137][T16591] SELinux: failed to load policy [ 199.206650][T16658] loop4: detected capacity change from 0 to 128 [ 199.822493][T16673] loop1: detected capacity change from 0 to 512 [ 199.838338][T16673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.864704][T13524] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.103322][T16685] loop4: detected capacity change from 0 to 256 [ 200.123420][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5099'. [ 200.345452][T16707] netlink: 'syz.7.5107': attribute type 6 has an invalid length. [ 201.076344][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5129'. [ 201.129951][ T3491] kernel write not supported for file /register (pid: 3491 comm: kworker/1:8) [ 201.459782][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.475264][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.614111][T16811] EXT4-fs: Ignoring removed oldalloc option [ 201.620187][T16811] EXT4-fs: Ignoring removed bh option [ 201.657588][T16811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.718332][T13524] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.828711][T16820] SELinux: failed to load policy [ 202.206644][T16852] netlink: 'syz.7.5164': attribute type 21 has an invalid length. [ 202.215058][T16852] netlink: 'syz.7.5164': attribute type 1 has an invalid length. [ 202.222908][T16852] netlink: 16090 bytes leftover after parsing attributes in process `syz.7.5164'. [ 202.293725][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 202.293744][ T29] audit: type=1326 audit(202.262:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.7.5166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238de2acb9 code=0x7ffc0000 [ 202.323085][ T29] audit: type=1326 audit(202.262:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.7.5166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f238de2acb9 code=0x7ffc0000 [ 202.346327][ T29] audit: type=1326 audit(202.262:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.7.5166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238de2acb9 code=0x7ffc0000 [ 202.369330][ T29] audit: type=1326 audit(202.262:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.7.5166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238de2acb9 code=0x7ffc0000 [ 202.527377][T16868] batadv_slave_0: entered promiscuous mode [ 202.532925][T16869] set_capacity_and_notify: 3 callbacks suppressed [ 202.532941][T16869] loop7: detected capacity change from 0 to 1024 [ 202.535851][T16867] batadv_slave_0: left promiscuous mode [ 202.567472][T16869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.602852][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.010725][T16908] loop4: detected capacity change from 0 to 1024 [ 203.019715][T16908] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 203.030681][T16908] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 203.040733][T16908] JBD2: no valid journal superblock found [ 203.046624][T16908] EXT4-fs (loop4): Could not load journal inode [ 203.084701][ T29] audit: type=1326 audit(203.052:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.4.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 203.107764][ T29] audit: type=1326 audit(203.052:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.4.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 203.132524][ T29] audit: type=1326 audit(203.052:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.4.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 203.175173][ T29] audit: type=1326 audit(203.132:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.4.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 203.211927][ T29] audit: type=1326 audit(203.182:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.4.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 203.234960][ T29] audit: type=1326 audit(203.182:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.4.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 203.261870][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.269315][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.393244][T16901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.404718][T16901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.448161][ T1600] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.469514][ T1600] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.489751][ T1600] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.498434][ T1600] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.518816][T16918] loop8: detected capacity change from 0 to 1024 [ 203.560526][T16918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.579701][T16918] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 1: comm syz.8.5194: lblock 1 mapped to illegal pblock 1 (length 5) [ 203.594027][T16918] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 203.606427][T16918] EXT4-fs (loop8): This should not happen!! Data will be lost [ 203.606427][T16918] [ 203.626584][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5195'. [ 203.712761][ T1600] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 203.727475][ T1600] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 203.739928][ T1600] EXT4-fs (loop8): This should not happen!! Data will be lost [ 203.739928][ T1600] [ 203.751519][ T9206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.863307][T10245] kernel write not supported for file bpf-prog (pid: 10245 comm: kworker/0:9) [ 204.161549][T16971] SELinux: security_context_str_to_sid (ÛO*3Äö!ÛL;‚¹Ò(xë?8°€>${ÓSº¡7®#ÊîßÈ!g’³.&[nÙ¦ú»9ì£P9\E±T•WqÁ›3¨H*Ø8çÆYYL¤œÖäGœRÃ!IªÆ*·¹ò' õæœCDÊÙX [ 204.161549][T16971] êÁs0dnîphóòë5L0µÙë| qòÎü–õD8Ä1ÀŽò‹ûA{ꈆ†nK „Ph¡[ÓÔZÓ‰—tgóù¼Þ0v—•îÒñXÑhõWÍ KÒ£Ö¼P’Têïr¡) failed with errno=-22 [ 204.355328][T16991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5228'. [ 204.406829][T16998] random: crng reseeded on system resumption [ 204.445737][T17001] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 204.462005][T17002] loop8: detected capacity change from 0 to 1024 [ 204.477878][T17002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.614584][ T9206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.615272][T17011] loop4: detected capacity change from 0 to 1024 [ 204.631579][T17011] EXT4-fs: inline encryption not supported [ 204.648029][T17011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.669122][T17011] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.5234: Allocating blocks 449-513 which overlap fs metadata [ 204.684525][T17011] EXT4-fs (loop4): Remounting filesystem read-only [ 204.691260][T17011] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1607: inode #19: comm syz.4.5234: cleanup dec ref error -117 [ 204.706390][T17015] loop8: detected capacity change from 0 to 1024 [ 204.723233][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.739569][T17015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.829729][ T9206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.357666][T17081] netlink: 'syz.8.5266': attribute type 1 has an invalid length. [ 205.368363][T17083] loop4: detected capacity change from 0 to 512 [ 205.375286][T17083] EXT4-fs: Ignoring removed nobh option [ 205.382481][T17083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.393717][T17083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 205.402563][T17083] System zones: 1-12 [ 205.407149][T17083] EXT4-fs (loop4): 1 truncate cleaned up [ 205.418955][T17083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.435697][T17083] EXT4-fs (loop4): shut down requested (2) [ 205.463161][T17086] loop8: detected capacity change from 0 to 512 [ 205.471896][T17086] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.494959][T17086] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 205.503591][T17086] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 205.513019][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.513882][T17086] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548) [ 205.535251][ T3312] udevd[3312]: Failed to create symlink /run/udev/watch/5373: File exists [ 205.606439][T17091] loop4: detected capacity change from 0 to 512 [ 205.627531][T17091] EXT4-fs: Ignoring removed orlov option [ 205.633248][T17091] EXT4-fs: Ignoring removed i_version option [ 205.639623][T17091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.666116][T17091] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 205.674193][T17091] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 205.695054][T17091] EXT4-fs (loop4): orphan cleanup on readonly fs [ 205.716198][T17091] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.731378][T17091] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 205.749876][T17101] loop8: detected capacity change from 0 to 1024 [ 205.757097][T17101] EXT4-fs: Ignoring removed bh option [ 205.765058][T17091] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5271: bg 0: block 40: padding at end of block bitmap is not set [ 205.780030][T17091] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 205.789269][T17091] EXT4-fs (loop4): 1 truncate cleaned up [ 205.850474][T17091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.869462][T17091] EXT4-fs (loop4): shut down requested (2) [ 205.876061][T17091] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 205.884933][T17091] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 205.895881][T17091] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 205.911830][T17101] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.951293][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.975098][ T9206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.045986][ T9990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.105882][ T9990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.178497][T17127] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 206.214945][T17127] EXT4-fs (loop4): invalid journal inode [ 206.238000][T17127] EXT4-fs (loop4): can't get journal size [ 206.259275][T17104] chnl_net:caif_netlink_parms(): no params data found [ 206.265080][T17127] EXT4-fs (loop4): 1 truncate cleaned up [ 206.272502][T17127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.329532][T17104] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.337185][T17104] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.344599][T17104] bridge_slave_0: entered allmulticast mode [ 206.345359][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.354574][T17104] bridge_slave_0: entered promiscuous mode [ 206.369411][T17104] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.376605][T17104] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.384224][T17104] bridge_slave_1: entered allmulticast mode [ 206.391157][T17104] bridge_slave_1: entered promiscuous mode [ 206.413835][T17139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.441718][T17104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.456783][T17139] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.5284: corrupted in-inode xattr: overlapping e_value [ 206.476514][T17139] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5284: couldn't read orphan inode 15 (err -117) [ 206.477376][T17104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.502101][T17139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.515433][T17104] team0: Port device team_slave_0 added [ 206.527544][T17104] team0: Port device team_slave_1 added [ 206.552340][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.562976][T17104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.570049][T17104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.596093][T17104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.623611][T17104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.630648][T17104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.656989][T17104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.706175][T17104] hsr_slave_0: entered promiscuous mode [ 206.712292][T17104] hsr_slave_1: entered promiscuous mode [ 206.718798][T17104] debugfs: 'hsr0' already exists in 'hsr' [ 206.724544][T17104] Cannot create hsr debugfs directory [ 207.024634][T17197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.027667][T17104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.041402][T17197] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 207.053359][T17104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.067526][T17197] System zones: 0-1, 3-36 [ 207.076179][T17104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.084140][T17197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.099222][T17104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.120701][T17104] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.127851][T17104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.135177][T17104] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.142560][T17104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.163195][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.195244][T17104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.213999][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.232730][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.249318][T17221] EXT4-fs: Ignoring removed orlov option [ 207.264201][T17104] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.284255][ T1771] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.291374][ T1771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.303658][T17221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.352812][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 207.352831][ T29] audit: type=1400 audit(463.324:1344): avc: denied { mount } for pid=17237 comm="syz.8.5309" name="/" dev="configfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 207.354539][ T1771] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.359099][ T29] audit: type=1400 audit(463.324:1345): avc: denied { search } for pid=17237 comm="syz.8.5309" name="/" dev="configfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.381488][ T1771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.388553][ T29] audit: type=1400 audit(463.324:1346): avc: denied { mounton } for pid=17237 comm="syz.8.5309" path="/" dev="configfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.453151][T17104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.463646][T17104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.475171][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.507617][ T29] audit: type=1326 audit(463.484:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 207.648359][ T29] audit: type=1326 audit(463.484:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 207.671926][ T29] audit: type=1326 audit(463.514:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 207.673203][T17104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.695030][ T29] audit: type=1326 audit(463.514:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 207.724869][ T29] audit: type=1326 audit(463.514:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 207.736640][T17267] SELinux: failed to load policy [ 207.747933][ T29] audit: type=1326 audit(463.514:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 207.747970][ T29] audit: type=1326 audit(463.514:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17246 comm="syz.4.5313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 207.754441][T17262] set_capacity_and_notify: 5 callbacks suppressed [ 207.754478][T17262] loop8: detected capacity change from 0 to 8192 [ 207.875813][T17262] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.054770][T17104] veth0_vlan: entered promiscuous mode [ 208.088514][T17104] veth1_vlan: entered promiscuous mode [ 208.134626][T17312] netlink: 'syz.8.5325': attribute type 29 has an invalid length. [ 208.143543][T17104] veth0_macvtap: entered promiscuous mode [ 208.160142][T17104] veth1_macvtap: entered promiscuous mode [ 208.176738][T17312] netlink: 'syz.8.5325': attribute type 29 has an invalid length. [ 208.193542][T17104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.217076][T17312] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5325'. [ 208.226946][T17104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.244006][T17313] loop4: detected capacity change from 0 to 8192 [ 208.244164][T17320] loop7: detected capacity change from 0 to 512 [ 208.267969][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.283214][T17320] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.5326: inode has both inline data and extents flags [ 208.297185][T17320] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.5326: couldn't read orphan inode 15 (err -117) [ 208.328525][T17320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.340918][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.366735][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.388662][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.395853][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.503680][T17283] chnl_net:caif_netlink_parms(): no params data found [ 208.642468][T17283] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.649768][T17283] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.703056][T17283] bridge_slave_0: entered allmulticast mode [ 208.734247][T17372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5334'. [ 208.746357][T17283] bridge_slave_0: entered promiscuous mode [ 208.752457][T17374] loop7: detected capacity change from 0 to 256 [ 208.763759][T17283] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.771387][T17283] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.780411][T17374] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.791234][T17283] bridge_slave_1: entered allmulticast mode [ 208.799394][T17283] bridge_slave_1: entered promiscuous mode [ 208.836461][T17283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.857437][T17283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.890431][T17385] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 208.898458][T17385] FAT-fs (loop7): Filesystem has been set read-only [ 208.911634][T17283] team0: Port device team_slave_0 added [ 208.920447][T17385] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 208.930272][T17283] team0: Port device team_slave_1 added [ 208.957393][T17385] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 208.967118][T17283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.974293][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.001015][T17283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.024178][T17398] loop2: detected capacity change from 0 to 512 [ 209.033620][T17283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.040636][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.066636][T17283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.090245][T17398] EXT4-fs (loop2): 1 truncate cleaned up [ 209.118381][T17283] hsr_slave_0: entered promiscuous mode [ 209.121030][T17398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.124634][T17283] hsr_slave_1: entered promiscuous mode [ 209.155161][T17283] debugfs: 'hsr0' already exists in 'hsr' [ 209.161569][T17283] Cannot create hsr debugfs directory [ 209.176194][T17398] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 209.226527][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.684773][T17438] loop8: detected capacity change from 0 to 512 [ 209.702435][T17441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=17441 comm=syz.7.5351 [ 210.090153][T17283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.118505][T17283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.131217][T17283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.164348][T17283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.311070][T17283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.339621][T17283] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.361102][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.368469][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.405121][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.412282][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.450760][T17283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.604088][T17283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.618648][T17540] loop8: detected capacity change from 0 to 512 [ 210.674266][T17540] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.5374: corrupted inode contents [ 210.679918][T17554] atomic_op ffff888119e88d28 conn xmit_atomic 0000000000000000 [ 210.726237][T17540] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.5374: mark_inode_dirty error [ 210.756403][T17558] EXT4-fs (loop8): shut down requested (1) [ 210.831858][T17283] veth0_vlan: entered promiscuous mode [ 210.856894][T17283] veth1_vlan: entered promiscuous mode [ 210.920820][T17283] veth0_macvtap: entered promiscuous mode [ 210.925902][T17580] loop7: detected capacity change from 0 to 512 [ 210.947190][T17283] veth1_macvtap: entered promiscuous mode [ 210.963555][T17580] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.5381: corrupted inode contents [ 210.973289][T17283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.000807][T17283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.023355][ T1600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.025800][T17580] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #2: comm syz.7.5381: mark_inode_dirty error [ 211.050843][T17580] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.5381: corrupted inode contents [ 211.053687][ T1600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.082390][ T1600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.103130][T17580] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.5381: mark_inode_dirty error [ 211.104253][ T1600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.286602][T17619] loop8: detected capacity change from 0 to 512 [ 211.297162][T17619] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.354265][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5389'. [ 211.406946][T17632] loop2: detected capacity change from 0 to 128 [ 211.580200][T17650] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5399: invalid indirect mapped block 256 (level 2) [ 211.597360][T17650] EXT4-fs (loop7): 2 truncates cleaned up [ 211.809488][T17684] EXT4-fs: Ignoring removed nobh option [ 211.866663][T17684] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 211.916379][T17684] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5406: invalid indirect mapped block 256 (level 1) [ 211.957008][T17684] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5406: invalid indirect mapped block 2683928664 (level 1) [ 211.972800][T17684] EXT4-fs (loop4): 1 truncate cleaned up [ 212.010058][T17684] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.5406: invalid fast symlink length 39 [ 212.374842][T17751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17751 comm=syz.2.5424 [ 212.627174][T17768] EXT4-fs: Ignoring removed nobh option [ 212.632975][T17768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.777762][T17720] geneve0: entered promiscuous mode [ 212.783403][T17720] geneve0: entered allmulticast mode [ 213.166677][T10245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.204528][T17837] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82 [ 213.217106][T17835] tipc: Started in network mode [ 213.222076][T17835] tipc: Node identity 7f000001, cluster identity 4711 [ 213.250198][T17835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.258521][T17835] tipc: Enabled bearer , priority 10 [ 213.275657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.320496][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 213.320515][ T29] audit: type=1326 audit(469.294:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 213.385743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.394481][ T29] audit: type=1326 audit(469.324:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 213.417515][ T29] audit: type=1326 audit(469.324:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 213.440793][ T29] audit: type=1326 audit(469.324:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17841 comm="syz.4.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 213.528293][T17861] Invalid argument reading file caps for ./file0 [ 213.607414][T17874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5448'. [ 213.626218][ T29] audit: type=1400 audit(469.574:1453): avc: denied { getopt } for pid=17869 comm="syz.3.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.654655][T17874] 8021q: VLANs not supported on gre0 [ 214.028782][T17904] set_capacity_and_notify: 6 callbacks suppressed [ 214.028808][T17904] loop4: detected capacity change from 0 to 128 [ 214.095618][T17904] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.5454: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 214.369232][T17927] loop2: detected capacity change from 0 to 128 [ 214.391351][T17927] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.403856][ T3402] tipc: Node number set to 2130706433 [ 214.431190][T17927] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.481738][ T2624] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.516070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.524344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.782051][T17948] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 214.812788][T17948] SELinux: failed to load policy [ 214.835386][T17947] loop8: detected capacity change from 0 to 2048 [ 214.854298][T17951] loop2: detected capacity change from 0 to 1024 [ 214.861494][T17951] EXT4-fs: Ignoring removed bh option [ 214.902772][T17951] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.5468: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 214.949030][T17951] EXT4-fs (loop2): Remounting filesystem read-only [ 214.950842][T17956] syzkaller1: entered promiscuous mode [ 214.961347][T17956] syzkaller1: entered allmulticast mode [ 215.047173][T17951] EXT4-fs (loop2): shut down requested (0) [ 215.075671][T17943] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.156020][T17943] EXT4-fs (loop8): Remounting filesystem read-only [ 215.162722][T17943] EXT4-fs (loop8): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 215.214673][T17969] loop4: detected capacity change from 0 to 2048 [ 215.286009][ T3312] loop4: p1 p3 p4 [ 215.291735][ T3312] loop4: p4 size 589824 extends beyond EOD, truncated [ 215.316350][T17969] loop4: p1 p3 p4 [ 215.322004][T17969] loop4: p4 size 589824 extends beyond EOD, truncated [ 215.347908][T17975] loop8: detected capacity change from 0 to 128 [ 215.462259][T17979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.474410][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 215.477385][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 215.503876][ T3570] udevd[3570]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 215.513982][ T29] audit: type=1400 audit(471.484:1454): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.1.245 dest=35488 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 215.591106][T17979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.636803][ T29] audit: type=1400 audit(471.514:1455): avc: denied { write } for pid=17738 comm="syz.7.5420" path="socket:[49813]" dev="sockfs" ino=49813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.659783][ T29] audit: type=1400 audit(471.534:1456): avc: denied { read write } for pid=9206 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.683770][ T29] audit: type=1400 audit(471.534:1457): avc: denied { open } for pid=9206 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.708683][ T29] audit: type=1400 audit(471.534:1458): avc: denied { ioctl } for pid=9206 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.789255][T17979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.862293][T17979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.934240][ T1600] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.947151][ T1600] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.962705][T17992] syzkaller1: entered promiscuous mode [ 215.968318][T17992] syzkaller1: entered allmulticast mode [ 215.986455][ T1600] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.007126][ T1600] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.064960][T17996] netlink: 'syz.4.5484': attribute type 1 has an invalid length. [ 216.073321][T17996] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5484'. [ 216.232887][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5492'. [ 216.295120][T18012] team0: Port device team_slave_0 removed [ 216.437540][T18030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.607869][T18030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.660185][T18030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.771345][T18030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.870765][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.889031][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.912641][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.932544][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.260871][T18058] xt_hashlimit: max too large, truncated to 1048576 [ 217.276144][T18058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.320595][T18063] bridge0: entered promiscuous mode [ 217.327750][T18063] bridge0: port 3(macvtap1) entered blocking state [ 217.334460][T18063] bridge0: port 3(macvtap1) entered disabled state [ 217.341492][T18063] macvtap1: entered allmulticast mode [ 217.346946][T18063] bridge0: entered allmulticast mode [ 217.355701][T18063] macvtap1: left allmulticast mode [ 217.360862][T18063] bridge0: left allmulticast mode [ 217.368242][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5515'. [ 217.377223][T18063] bridge0: left promiscuous mode [ 217.465309][T18067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.489445][T18067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.629676][T18075] loop4: detected capacity change from 0 to 1024 [ 217.686572][T18075] EXT4-fs (loop4): shut down requested (1) [ 217.699759][T18081] netlink: 'syz.7.5523': attribute type 83 has an invalid length. [ 217.725166][T18083] loop8: detected capacity change from 0 to 128 [ 217.817484][T18083] syz.8.5524: attempt to access beyond end of device [ 217.817484][T18083] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 217.838358][T18089] batadv_slave_1: entered promiscuous mode [ 217.850987][T18088] batadv_slave_1: left promiscuous mode [ 217.858401][ T1771] kworker/u8:11: attempt to access beyond end of device [ 217.858401][ T1771] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 217.951160][T18095] netlink: 'syz.4.5531': attribute type 15 has an invalid length. [ 218.174862][T18126] loop8: detected capacity change from 0 to 2048 [ 218.230318][T18126] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5544: bg 0: block 345: padding at end of block bitmap is not set [ 218.265298][T18126] EXT4-fs (loop8): Remounting filesystem read-only [ 218.346914][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 218.346933][ T29] audit: type=1400 audit(474.324:1552): avc: denied { bind } for pid=18139 comm="syz.8.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.372255][ T29] audit: type=1400 audit(474.324:1553): avc: denied { name_bind } for pid=18139 comm="syz.8.5548" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 218.392766][ T29] audit: type=1400 audit(474.324:1554): avc: denied { node_bind } for pid=18139 comm="syz.8.5548" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 218.450907][ T29] audit: type=1400 audit(474.424:1555): avc: denied { setopt } for pid=18146 comm="syz.8.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.497594][T18150] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5552'. [ 219.212999][T18170] loop7: detected capacity change from 0 to 512 [ 219.227455][T18170] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.5559: couldn't read orphan inode 26 (err -116) [ 219.239805][T18170] EXT4-fs (loop7): Remounting filesystem read-only [ 219.250922][ T29] audit: type=1400 audit(475.224:1556): avc: denied { append } for pid=18169 comm="syz.7.5559" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.274685][ T29] audit: type=1400 audit(475.224:1557): avc: denied { open } for pid=18169 comm="syz.7.5559" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.298147][ T29] audit: type=1400 audit(475.234:1558): avc: denied { ioctl } for pid=18169 comm="syz.7.5559" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.361458][ T29] audit: type=1400 audit(475.334:1559): avc: denied { create } for pid=18176 comm="syz.7.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 219.388541][ T29] audit: type=1400 audit(475.364:1560): avc: denied { write } for pid=18176 comm="syz.7.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 219.389689][T18177] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 219.443475][ T29] audit: type=1400 audit(475.414:1561): avc: denied { ioctl } for pid=18180 comm="syz.8.5563" path="socket:[50618]" dev="sockfs" ino=50618 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.692833][T18199] loop7: detected capacity change from 0 to 256 [ 219.752894][T18207] batadv_slave_0: entered promiscuous mode [ 219.769445][T18206] batadv_slave_0: left promiscuous mode [ 219.776412][T18209] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5576'. [ 219.884828][T18223] netlink: 'syz.4.5583': attribute type 1 has an invalid length. [ 219.950775][T18229] loop7: detected capacity change from 0 to 2048 [ 220.087578][T18244] netlink: 4580 bytes leftover after parsing attributes in process `syz.7.5592'. [ 220.097027][T18244] netlink: 4580 bytes leftover after parsing attributes in process `syz.7.5592'. [ 220.149152][T18247] loop4: detected capacity change from 0 to 8192 [ 220.281559][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5597'. [ 220.427041][T18273] loop7: detected capacity change from 0 to 512 [ 220.427579][T10249] kernel write not supported for file bpf-prog (pid: 10249 comm: kworker/0:13) [ 220.472555][T18273] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 220.501016][ T8246] EXT4-fs unmount: 27 callbacks suppressed [ 220.501053][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.846882][T18304] loop7: detected capacity change from 0 to 512 [ 220.859613][T18304] EXT4-fs (loop7): 1 truncate cleaned up [ 220.873617][T18304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.890303][T18304] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5619: bg 0: block 465: padding at end of block bitmap is not set [ 220.910983][T18304] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 220.925041][T18304] EXT4-fs (loop7): This should not happen!! Data will be lost [ 220.925041][T18304] [ 220.934874][T18304] EXT4-fs (loop7): Total free blocks count 0 [ 220.941773][T18304] EXT4-fs (loop7): Free/Dirty block details [ 220.948074][T18304] EXT4-fs (loop7): free_blocks=0 [ 220.948620][T18310] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 220.953203][T18304] EXT4-fs (loop7): dirty_blocks=2 [ 220.953222][T18304] EXT4-fs (loop7): Block reservation details [ 220.953236][T18304] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 221.143400][T18328] loop3: detected capacity change from 0 to 512 [ 221.188722][T18328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.216578][T18340] netlink: 'syz.7.5635': attribute type 11 has an invalid length. [ 221.225110][T18340] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5635'. [ 221.245712][T18340] netlink: 'syz.7.5635': attribute type 11 has an invalid length. [ 221.253689][T18340] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5635'. [ 221.296509][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.374937][T18357] loop2: detected capacity change from 0 to 512 [ 221.420183][T18357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.466445][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.643177][T18367] futex_wake_op: syz.3.5647 tries to shift op by -1; fix this program [ 221.950453][T18406] loop2: detected capacity change from 0 to 128 [ 221.965513][T18404] loop4: detected capacity change from 0 to 1024 [ 221.980464][T18404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.016857][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.020716][T18406] syz.2.5665: attempt to access beyond end of device [ 222.020716][T18406] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 222.040345][T18406] buffer_io_error: 8 callbacks suppressed [ 222.040365][T18406] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 222.317310][T18444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.356983][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.428476][T18464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.467842][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.540844][T18482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.584401][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.715163][T18516] macvlan1: entered promiscuous mode [ 222.721911][T18516] macvlan1: left promiscuous mode [ 222.934223][ T910] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 223.008253][ T910] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 223.126817][ T910] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 223.145314][T18584] netlink: 'syz.3.5693': attribute type 3 has an invalid length. [ 223.153251][T18584] netlink: 'syz.3.5693': attribute type 1 has an invalid length. [ 223.161442][T18584] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.5693'. [ 223.208340][ T910] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 223.296612][T18602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.306710][T18602] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 223.315880][ T910] bridge_slave_1: left allmulticast mode [ 223.321747][ T910] bridge_slave_1: left promiscuous mode [ 223.327602][ T910] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.362108][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 223.362189][ T29] audit: type=1400 audit(479.324:2218): avc: denied { watch watch_reads } for pid=18600 comm="syz.2.5698" path="/63/bus" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 223.392321][ T910] bridge_slave_0: left promiscuous mode [ 223.398392][ T910] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.547570][ T910] bridge0 (unregistering): left allmulticast mode [ 223.607705][ T910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.620573][ T9991] kernel write not supported for file bpf-prog (pid: 9991 comm: kworker/1:15) [ 223.630661][ T29] audit: type=1400 audit(479.594:2219): avc: denied { create } for pid=18622 comm="syz.3.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 223.668163][ T910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.679371][ T910] bond0 (unregistering): Released all slaves [ 223.699099][ T29] audit: type=1400 audit(479.654:2220): avc: denied { mount } for pid=18624 comm="syz.8.5709" name="/" dev="autofs" ino=51073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 223.721987][ T29] audit: type=1400 audit(479.664:2221): avc: denied { search } for pid=3049 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.743394][ T29] audit: type=1400 audit(479.664:2222): avc: denied { search } for pid=3049 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.764601][ T29] audit: type=1400 audit(479.664:2223): avc: denied { search } for pid=3049 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.785833][ T29] audit: type=1400 audit(479.664:2224): avc: denied { read } for pid=3049 comm="dhcpcd" name="n64" dev="tmpfs" ino=24411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.808699][ T29] audit: type=1400 audit(479.664:2225): avc: denied { open } for pid=3049 comm="dhcpcd" path="/run/udev/data/n64" dev="tmpfs" ino=24411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.831782][ T29] audit: type=1400 audit(479.664:2226): avc: denied { getattr } for pid=3049 comm="dhcpcd" path="/run/udev/data/n64" dev="tmpfs" ino=24411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 223.856258][ T29] audit: type=1400 audit(479.674:2227): avc: denied { create } for pid=18626 comm="syz.4.5710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.880247][T18636] EXT4-fs: Ignoring removed nobh option [ 223.928555][T18636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.944253][ T910] hsr_slave_0: left promiscuous mode [ 223.950278][ T910] hsr_slave_1: left promiscuous mode [ 223.957610][ T910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.965316][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5714'. [ 223.970432][ T910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.982432][ T910] batman_adv: batadv0: Removing interface: dummy0 [ 224.024200][ T910] team0 (unregistering): Port device team_slave_1 removed [ 224.043322][ T910] team0 (unregistering): Port device team_slave_0 removed [ 224.062572][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.106345][T18657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.133057][T18657] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.5716: bad orphan inode 131083 [ 224.158820][T18657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.181440][T18579] chnl_net:caif_netlink_parms(): no params data found [ 224.190347][T18657] EXT4-fs error (device loop3): ext4_check_dx_root:2201: inode #2: comm syz.3.5716: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 224.250814][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5724'. [ 224.304485][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.365329][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.372576][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.389249][T18698] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.399456][T18579] bridge_slave_0: entered allmulticast mode [ 224.409679][T18698] vhci_hcd vhci_hcd.2: invalid port number 96 [ 224.415912][T18698] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 224.419138][T18579] bridge_slave_0: entered promiscuous mode [ 224.432393][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.440641][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.448328][T18579] bridge_slave_1: entered allmulticast mode [ 224.455285][T18579] bridge_slave_1: entered promiscuous mode [ 224.501542][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.542783][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.590004][T18716] set_capacity_and_notify: 6 callbacks suppressed [ 224.590023][T18716] loop3: detected capacity change from 0 to 2048 [ 224.632904][ T910] IPVS: stop unused estimator thread 0... [ 224.640394][T18579] team0: Port device team_slave_0 added [ 224.654562][T18579] team0: Port device team_slave_1 added [ 224.664938][T18716] Alternate GPT is invalid, using primary GPT. [ 224.671604][T18716] loop3: p1 p2 p3 [ 224.675460][T18716] loop3: partition table partially beyond EOD, truncated [ 224.715664][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.722858][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.749186][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.775202][T18735] netlink: 'syz.2.5736': attribute type 3 has an invalid length. [ 224.783960][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.791244][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.813464][ T3010] Alternate GPT is invalid, using primary GPT. [ 224.818061][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.835518][ T3010] loop3: p1 p2 p3 [ 224.839386][ T3010] loop3: partition table partially beyond EOD, truncated [ 224.848986][T18579] hsr_slave_0: entered promiscuous mode [ 224.874893][T18579] hsr_slave_1: entered promiscuous mode [ 224.880503][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 224.891525][T18579] debugfs: 'hsr0' already exists in 'hsr' [ 224.897687][T18579] Cannot create hsr debugfs directory [ 224.909318][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 224.919734][T18741] loop3: detected capacity change from 0 to 1024 [ 224.923293][T18743] netlink: 'syz.2.5740': attribute type 1 has an invalid length. [ 224.933965][T18741] EXT4-fs: Ignoring removed orlov option [ 224.959752][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 225.039639][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 225.046728][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 225.052387][T18741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.060745][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 225.241461][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.262637][T18781] loop2: detected capacity change from 0 to 512 [ 225.304686][T18781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.315033][T18579] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.342003][T18579] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.355168][T18579] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 225.365272][T18579] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 225.391882][T18781] EXT4-fs error (device loop2): ext4_get_first_dir_block:3527: inode #12: comm syz.2.5751: Directory hole found for htree leaf block 0 [ 225.419289][T18802] netlink: 'syz.3.5755': attribute type 64 has an invalid length. [ 225.427441][T18802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5755'. [ 225.466908][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.471004][T18810] netlink: 'syz.3.5755': attribute type 64 has an invalid length. [ 225.483788][T18810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5755'. [ 225.502750][T18579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.517197][T18579] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.551212][T18815] loop2: detected capacity change from 0 to 1024 [ 225.566639][T15912] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.573840][T15912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.582403][T18815] EXT4-fs: Ignoring removed oldalloc option [ 225.608336][T18815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.638071][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.645269][T15912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.703905][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.858318][T18579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.995138][T18862] loop8: detected capacity change from 0 to 2048 [ 226.038907][T18873] loop4: detected capacity change from 0 to 512 [ 226.047972][T18862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.084307][T18873] EXT4-fs: Ignoring removed oldalloc option [ 226.135242][T18873] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.5772: Parent and EA inode have the same ino 15 [ 226.227323][T18873] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.5772: Parent and EA inode have the same ino 15 [ 226.276602][T18873] EXT4-fs (loop4): 1 orphan inode deleted [ 226.283168][T18873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.342397][T18579] veth0_vlan: entered promiscuous mode [ 226.350569][T18579] veth1_vlan: entered promiscuous mode [ 226.380163][T18579] veth0_macvtap: entered promiscuous mode [ 226.411493][T18579] veth1_macvtap: entered promiscuous mode [ 226.424534][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.472228][ T9206] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.477207][T18579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.491838][T18579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.539536][ T1600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.572045][T18931] loop3: detected capacity change from 0 to 512 [ 226.605740][ T1600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.607452][T18931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.641490][ T1600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.678569][ T1600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.728436][T18952] loop4: detected capacity change from 0 to 1024 [ 226.737058][T18952] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 226.747150][T18952] EXT4-fs (loop4): group descriptors corrupted! [ 226.779715][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.875508][T18972] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5795'. [ 227.196672][T19030] loop3: detected capacity change from 0 to 256 [ 227.681081][T19107] loop3: detected capacity change from 0 to 1024 [ 227.709228][T19107] EXT4-fs: Ignoring removed orlov option [ 227.749228][T19107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.842034][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.890983][T19132] EXT4-fs: Ignoring removed orlov option [ 227.896918][T19132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.987690][T19132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.031704][ C0] blk_print_req_error: 10 callbacks suppressed [ 228.031725][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 228.047979][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 228.058643][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 228.068889][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 228.142259][T19146] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 228.151906][ T3314] loop2: p1 p2 p3 [ 228.153939][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.170990][T19158] loop2: p1 p2 p3 [ 228.212781][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 228.214461][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 228.224047][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 228.306791][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 228.310368][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5838'. [ 228.347278][T19180] EXT4-fs: inline encryption not supported [ 228.363094][T19180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.366244][T19178] EXT4-fs: inline encryption not supported [ 228.385185][T19180] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.392312][T19180] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 228.407611][T19180] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 228.416098][T19180] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.5843: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 228.482337][T19180] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5843: couldn't read orphan inode 13 (err -117) [ 228.498913][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 228.498931][ T29] audit: type=1400 audit(484.474:2307): avc: denied { read } for pid=19184 comm="syz.8.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.535955][T19180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.554713][T19178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.610852][T19191] EXT4-fs: Ignoring removed oldalloc option [ 228.627474][T19191] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.5846: Parent and EA inode have the same ino 15 [ 228.652563][T19191] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.5846: Parent and EA inode have the same ino 15 [ 228.665838][ T29] audit: type=1400 audit(484.644:2308): avc: denied { read } for pid=19177 comm="syz.4.5843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 228.666303][T19191] EXT4-fs (loop6): 1 orphan inode deleted [ 228.694944][T19191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.709291][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.787832][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.810048][ T29] audit: type=1400 audit(484.784:2309): avc: denied { ioctl } for pid=19207 comm="syz.4.5852" path="socket:[54517]" dev="sockfs" ino=54517 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 228.842801][ T29] audit: type=1400 audit(484.814:2310): avc: denied { ioctl } for pid=19207 comm="syz.4.5852" path="socket:[54519]" dev="sockfs" ino=54519 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 228.879513][T18579] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.934920][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5857'. [ 229.119935][T19233] netlink: 'syz.6.5864': attribute type 10 has an invalid length. [ 229.128041][T19233] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5864'. [ 229.137516][T19233] dummy0: entered promiscuous mode [ 229.142678][T19233] dummy0: entered allmulticast mode [ 229.148890][T19233] bridge0: port 3(dummy0) entered blocking state [ 229.155319][T19233] bridge0: port 3(dummy0) entered disabled state [ 229.164895][T19233] bridge0: port 3(dummy0) entered blocking state [ 229.171426][T19233] bridge0: port 3(dummy0) entered forwarding state [ 229.553971][ T29] audit: type=1400 audit(485.524:2311): avc: denied { write } for pid=19261 comm="syz.3.5876" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.555873][T19262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.578067][ T29] audit: type=1400 audit(485.524:2312): avc: denied { ioctl } for pid=19261 comm="syz.3.5876" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.587706][T19262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.751163][ T29] audit: type=1326 audit(485.724:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19267 comm="syz.2.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 229.774465][ T29] audit: type=1326 audit(485.724:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19267 comm="syz.2.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 229.808520][ T29] audit: type=1326 audit(485.724:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19267 comm="syz.2.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 229.831795][ T29] audit: type=1326 audit(485.724:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19267 comm="syz.2.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 230.379922][T19314] set_capacity_and_notify: 6 callbacks suppressed [ 230.379936][T19314] loop3: detected capacity change from 0 to 2048 [ 230.426287][T19314] loop3: p4 < > [ 230.508488][ T3487] kernel write not supported for file /ppp (pid: 3487 comm: kworker/1:7) [ 230.534320][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 230.552858][T19324] loop3: detected capacity change from 0 to 512 [ 230.561937][T19324] EXT4-fs (loop3): 1 truncate cleaned up [ 230.569066][T19324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.583116][T19324] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.5903: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 230.624279][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.749236][T19347] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5913'. [ 230.761825][T19347] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 230.970682][T19371] loop8: detected capacity change from 0 to 256 [ 230.987617][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5924'. [ 231.011391][T19373] netlink: 'syz.6.5924': attribute type 1 has an invalid length. [ 231.019776][T19373] netlink: 'syz.6.5924': attribute type 2 has an invalid length. [ 231.039408][ T9206] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 231.047634][ T9206] FAT-fs (loop8): Filesystem has been set read-only [ 231.065651][ T9206] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 231.150085][T14952] bridge0: port 3(syz_tun) entered disabled state [ 231.168277][T14952] syz_tun (unregistering): left allmulticast mode [ 231.174854][T14952] syz_tun (unregistering): left promiscuous mode [ 231.181336][T14952] bridge0: port 3(syz_tun) entered disabled state [ 231.337375][ T12] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.417495][ T12] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.467340][ T12] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.517305][ T12] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.610472][ T12] bridge_slave_1: left allmulticast mode [ 231.616226][ T12] bridge_slave_1: left promiscuous mode [ 231.621907][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.639732][ T12] bridge_slave_0: left allmulticast mode [ 231.645725][ T12] bridge_slave_0: left promiscuous mode [ 231.651720][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.811104][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.822888][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.837725][ T12] bond0 (unregistering): Released all slaves [ 231.888940][T19420] netlink: 'syz.2.5942': attribute type 3 has an invalid length. [ 231.896786][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5942'. [ 231.910998][ T12] IPVS: stopping backup sync thread 12808 ... [ 231.919685][ T12] hsr_slave_0: left promiscuous mode [ 231.925480][ T12] hsr_slave_1: left promiscuous mode [ 231.931302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.938947][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.981244][ T12] veth1_macvtap: left promiscuous mode [ 231.989358][ T12] veth0_macvtap: left promiscuous mode [ 231.999463][ T12] veth1_vlan: left promiscuous mode [ 232.008557][ T12] veth0_vlan: left promiscuous mode [ 232.123926][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.145090][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.288958][T19394] chnl_net:caif_netlink_parms(): no params data found [ 232.390327][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.397637][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.427418][T19394] bridge_slave_0: entered allmulticast mode [ 232.434001][T19394] bridge_slave_0: entered promiscuous mode [ 232.445184][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.452472][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.460098][T19394] bridge_slave_1: entered allmulticast mode [ 232.466659][T19394] bridge_slave_1: entered promiscuous mode [ 232.485244][T19394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.501414][T19394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.530434][T19394] team0: Port device team_slave_0 added [ 232.557387][T19394] team0: Port device team_slave_1 added [ 232.596755][T19473] loop6: detected capacity change from 0 to 1764 [ 232.599359][T19394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.610743][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.637648][T19394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.661566][T19473] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 232.755326][T19394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.762901][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.789698][T19394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.934346][T19394] hsr_slave_0: entered promiscuous mode [ 232.948959][T19495] loop3: detected capacity change from 0 to 128 [ 232.952278][T19394] hsr_slave_1: entered promiscuous mode [ 232.972265][T19394] debugfs: 'hsr0' already exists in 'hsr' [ 232.978098][T19394] Cannot create hsr debugfs directory [ 233.017381][T19495] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.177449][T17283] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.282164][T19518] loop3: detected capacity change from 0 to 512 [ 233.433021][T19518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.477429][T19394] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 233.521286][T19394] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 233.560909][T19394] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 233.583895][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.599455][T19394] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 233.701967][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 233.702019][ T29] audit: type=1400 audit(489.674:2341): avc: denied { bind } for pid=19551 comm="syz.4.5974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.734207][T19552] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.758874][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.781954][T19394] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.802339][ T2624] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.809565][ T2624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.827886][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.835072][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.853310][T19552] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.908599][T19552] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.932305][ T29] audit: type=1400 audit(489.904:2342): avc: denied { write } for pid=19570 comm="syz.6.5977" name="vlan0" dev="proc" ino=4026532737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 233.975466][T19394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.986196][T19394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.020123][T19552] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.100563][ T2624] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.141494][ T2624] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.196075][ T2624] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.213794][T19394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.243199][ T2624] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.324248][ T29] audit: type=1326 audit(490.294:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.347403][ T29] audit: type=1326 audit(490.294:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.370889][ T29] audit: type=1326 audit(490.294:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.394471][ T29] audit: type=1326 audit(490.294:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.425070][T19597] loop6: detected capacity change from 0 to 4096 [ 234.444557][ T29] audit: type=1326 audit(490.394:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.468094][ T29] audit: type=1326 audit(490.394:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.491694][ T29] audit: type=1326 audit(490.394:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.514879][ T29] audit: type=1326 audit(490.414:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.4.5981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd136c7acb9 code=0x7ffc0000 [ 234.554463][T19394] veth0_vlan: entered promiscuous mode [ 234.555079][T19597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.587426][T19394] veth1_vlan: entered promiscuous mode [ 234.595497][T18579] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.644538][T19394] veth0_macvtap: entered promiscuous mode [ 234.659436][T19621] SELinux: failed to load policy [ 234.677010][T19394] veth1_macvtap: entered promiscuous mode [ 234.729593][T19394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.750799][T19394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.788646][ T1600] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.828358][ T1600] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.883597][ T1600] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.921529][ T1600] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.395840][T19724] loop6: detected capacity change from 0 to 256 [ 235.411485][T19726] loop9: detected capacity change from 0 to 512 [ 235.444713][T19726] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 235.484829][T19726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 235.506284][T19726] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.6009: corrupted in-inode xattr: e_value size too large [ 235.535926][T19726] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6009: couldn't read orphan inode 15 (err -117) [ 235.569634][T19726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.604864][T19743] xt_hashlimit: size too large, truncated to 1048576 [ 235.804317][T19763] loop6: detected capacity change from 0 to 512 [ 235.825116][T19763] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.853565][T19763] EXT4-fs (loop6): 1 truncate cleaned up [ 235.860221][T19763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.983105][T19763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.093640][T19797] loop6: detected capacity change from 0 to 128 [ 236.118096][T19394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.142577][T19797] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 236.150568][T19797] FAT-fs (loop6): Filesystem has been set read-only [ 236.160781][T19797] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 236.194676][T19797] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 236.287138][T19818] macvlan2: entered promiscuous mode [ 236.292644][T19815] loop2: detected capacity change from 0 to 512 [ 236.312349][T19815] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 236.326370][T19818] macvlan3: entered promiscuous mode [ 236.508915][T19850] loop3: detected capacity change from 0 to 128 [ 236.541033][T19850] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 236.589065][T19861] netlink: 'syz.2.6041': attribute type 83 has an invalid length. [ 236.627551][T17283] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.819548][T19863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.829155][T19863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.880406][T19908] netlink: 'syz.3.6051': attribute type 29 has an invalid length. [ 236.895946][T19908] netlink: 'syz.3.6051': attribute type 29 has an invalid length. [ 236.905029][T19908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6051'. [ 236.971667][T19918] loop2: detected capacity change from 0 to 1024 [ 236.988589][T19918] EXT4-fs: Ignoring removed oldalloc option [ 237.021017][T19930] loop3: detected capacity change from 0 to 1024 [ 237.030515][T19930] EXT4-fs: inline encryption not supported [ 237.039268][T19918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.053597][T19930] EXT4-fs (loop3): orphan cleanup on readonly fs [ 237.061971][T19930] EXT4-fs (loop3): 1 truncate cleaned up [ 237.068510][T19930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.086582][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.097132][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.175443][T19949] loop3: detected capacity change from 0 to 2048 [ 237.215611][T19949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.274401][T19967] loop9: detected capacity change from 0 to 128 [ 237.284425][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.301631][T19967] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.368676][T19972] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.378801][T19394] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.381056][T19972] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.159426][T20026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.185987][T20026] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 238.234706][T20026] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 238.247278][T20026] EXT4-fs (loop9): This should not happen!! Data will be lost [ 238.247278][T20026] [ 238.256975][T20026] EXT4-fs (loop9): Total free blocks count 0 [ 238.263182][T20026] EXT4-fs (loop9): Free/Dirty block details [ 238.269237][T20026] EXT4-fs (loop9): free_blocks=2415919504 [ 238.275143][T20026] EXT4-fs (loop9): dirty_blocks=16 [ 238.280318][T20026] EXT4-fs (loop9): Block reservation details [ 238.286403][T20026] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 238.294561][T20035] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.310453][T20035] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 238.320357][T20035] EXT4-fs (loop3): group descriptors corrupted! [ 238.353832][T20040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6089'. [ 238.363030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.371269][T20040] netlink: 'syz.3.6089': attribute type 1 has an invalid length. [ 238.379020][T20040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6089'. [ 238.449454][T20045] EXT4-fs: Ignoring removed orlov option [ 239.259672][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 239.259691][ T29] audit: type=1400 audit(495.234:2408): avc: denied { read } for pid=20083 comm="syz.9.6100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.331190][T20088] EXT4-fs: Ignoring removed oldalloc option [ 239.348182][T20088] EXT4-fs (loop4): 1 truncate cleaned up [ 239.395073][T20088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6103'. [ 240.037901][T20095] Set syz1 is full, maxelem 65536 reached [ 240.130388][T20115] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6114: iget: bad i_size value: 38620345925642 [ 240.181050][T20111] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.6113: lblock 0 mapped to illegal pblock 0 (length 6) [ 240.196379][T20115] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6114: couldn't read orphan inode 15 (err -117) [ 240.216933][T20111] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.6113: lblock 3 mapped to illegal pblock 3 (length 3) [ 240.252241][ T29] audit: type=1400 audit(496.214:2409): avc: denied { mount } for pid=20119 comm="syz.9.6116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 240.274125][ T29] audit: type=1400 audit(496.214:2410): avc: denied { search } for pid=20119 comm="syz.9.6116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.295793][ T29] audit: type=1400 audit(496.214:2411): avc: denied { search } for pid=20119 comm="syz.9.6116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.317061][ T29] audit: type=1400 audit(496.214:2412): avc: denied { search } for pid=20119 comm="syz.9.6116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.338504][ T29] audit: type=1400 audit(496.214:2413): avc: denied { search } for pid=20119 comm="syz.9.6116" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.360114][ T29] audit: type=1400 audit(496.214:2414): avc: denied { add_name } for pid=20119 comm="syz.9.6116" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 240.380547][ T29] audit: type=1400 audit(496.214:2415): avc: denied { create } for pid=20119 comm="syz.9.6116" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 240.412439][T20115] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.6114: bg 0: block 5: invalid block bitmap [ 240.433186][T20111] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 240.445950][T20111] EXT4-fs (loop6): This should not happen!! Data will be lost [ 240.445950][T20111] [ 240.495956][T15912] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 240.513692][T20115] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 240.526211][T20115] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.526211][T20115] [ 240.536113][T20115] EXT4-fs (loop4): Total free blocks count 0 [ 240.542762][T20115] EXT4-fs (loop4): Free/Dirty block details [ 240.548714][T20115] EXT4-fs (loop4): free_blocks=0 [ 240.553766][T20115] EXT4-fs (loop4): dirty_blocks=65 [ 240.559106][T20115] EXT4-fs (loop4): Block reservation details [ 240.565289][T20115] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 240.578113][T15912] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 240.590924][T15912] EXT4-fs (loop6): This should not happen!! Data will be lost [ 240.590924][T15912] [ 240.616398][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 240.629371][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.629371][ T12] [ 240.702040][T20144] set_capacity_and_notify: 11 callbacks suppressed [ 240.702058][T20144] loop4: detected capacity change from 0 to 128 [ 240.759204][T20144] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 240.836632][T20144] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 240.880910][T20144] EXT4-fs: Ignoring sb option on remount [ 240.886748][T20144] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 240.937554][ T29] audit: type=1326 audit(496.914:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.9.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af3f8acb9 code=0x7ffc0000 [ 241.017073][ T29] audit: type=1326 audit(496.914:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20166 comm="syz.9.6130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af3f8acb9 code=0x7ffc0000 [ 241.075959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.084130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.472469][T20204] netlink: 'syz.6.6137': attribute type 4 has an invalid length. [ 241.549881][T20212] loop2: detected capacity change from 0 to 512 [ 241.566406][T20212] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.592508][T20212] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 241.658852][T20216] 9p: Bad value for 'rfdno' [ 241.696973][T20222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6146'. [ 241.746768][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6157'. [ 241.755996][T20225] netlink: 'syz.3.6157': attribute type 20 has an invalid length. [ 241.759034][T20226] loop2: detected capacity change from 0 to 512 [ 241.763824][T20225] netlink: 'syz.3.6157': attribute type 21 has an invalid length. [ 241.908487][T20239] loop6: detected capacity change from 0 to 128 [ 242.305696][T20248] 9p: Unknown uid 00000000004294967295 [ 242.511879][T20279] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 242.551290][T20284] loop4: detected capacity change from 0 to 1024 [ 242.748228][T20312] loop3: detected capacity change from 0 to 256 [ 242.800242][T20316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6187'. [ 242.809689][T20316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6187'. [ 242.844583][T20320] loop4: detected capacity change from 0 to 128 [ 242.865403][T20320] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 242.875910][T20320] FAT-fs (loop4): Filesystem has been set read-only [ 243.168330][T20340] loop3: detected capacity change from 0 to 4096 [ 243.193174][T20346] loop2: detected capacity change from 0 to 256 [ 243.432559][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6209'. [ 243.494948][T20367] loop2: detected capacity change from 0 to 512 [ 243.512170][T20367] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 243.531812][T20367] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 243.544111][T20367] EXT4-fs (loop2): 1 truncate cleaned up [ 243.560450][T10247] hid_parser_main: 2 callbacks suppressed [ 243.560469][T10247] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 243.561947][T20373] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.568387][T10247] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.627300][T20373] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.115696][T20414] EXT4-fs (loop4): re-mounted 00000005-0000-0000-0000-000000000000. [ 244.163896][T20414] EXT4-fs (loop4): re-mounted 00000005-0000-0000-0000-000000000000. [ 244.180141][T20424] SELinux: failed to load policy [ 244.266808][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 244.266825][ T29] audit: type=1326 audit(500.244:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.327715][T20436] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.353503][T20436] vhci_hcd vhci_hcd.2: invalid port number 96 [ 244.359756][T20436] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 244.362110][ T29] audit: type=1326 audit(500.244:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.390740][ T29] audit: type=1326 audit(500.244:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.413856][ T29] audit: type=1326 audit(500.244:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.437023][ T29] audit: type=1326 audit(500.244:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.459929][ T29] audit: type=1326 audit(500.244:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.483139][ T29] audit: type=1326 audit(500.244:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.506311][ T29] audit: type=1326 audit(500.244:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.529201][ T29] audit: type=1326 audit(500.244:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.552239][ T29] audit: type=1326 audit(500.244:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 244.589234][T20450] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.837921][T20482] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 245.052499][T20502] netlink: 'syz.2.6269': attribute type 29 has an invalid length. [ 245.085847][T20502] netlink: 'syz.2.6269': attribute type 29 has an invalid length. [ 245.094570][T20502] netlink: 508 bytes leftover after parsing attributes in process `syz.2.6269'. [ 245.243108][T20522] netlink: 'syz.3.6277': attribute type 21 has an invalid length. [ 245.251025][T20522] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6277'. [ 245.283331][T20522] netlink: 'syz.3.6277': attribute type 4 has an invalid length. [ 245.291259][T20522] netlink: 'syz.3.6277': attribute type 3 has an invalid length. [ 245.299236][T20522] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6277'. [ 245.312594][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6279'. [ 245.313739][T20522] netlink: 'syz.3.6277': attribute type 21 has an invalid length. [ 245.330345][T20522] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6277'. [ 245.340576][T20522] netlink: 'syz.3.6277': attribute type 4 has an invalid length. [ 245.348526][T20522] netlink: 'syz.3.6277': attribute type 3 has an invalid length. [ 245.356477][T20522] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6277'. [ 245.929092][T20553] set_capacity_and_notify: 5 callbacks suppressed [ 245.929111][T20553] loop4: detected capacity change from 0 to 512 [ 246.099275][T20553] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 4294967295 (only 1 groups) [ 246.470294][T20604] loop3: detected capacity change from 0 to 1024 [ 246.483276][T20604] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6305: Failed to acquire dquot type 0 [ 246.483726][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6306'. [ 246.500973][T20604] EXT4-fs (loop3): 1 truncate cleaned up [ 246.507097][T20608] geneve2: entered promiscuous mode [ 246.514721][T20608] geneve2: entered allmulticast mode [ 246.550854][T20610] loop2: detected capacity change from 0 to 1024 [ 246.557824][T20610] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.565982][T20610] EXT4-fs: Ignoring removed nobh option [ 246.571704][T20610] EXT4-fs: inline encryption not supported [ 246.980593][T20644] loop6: detected capacity change from 0 to 256 [ 247.060509][T20638] loop3: detected capacity change from 0 to 8192 [ 247.091273][T20651] loop2: detected capacity change from 0 to 1024 [ 247.226998][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.234544][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.242150][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.249686][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.257192][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.264676][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.272133][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.279662][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.287222][ T3409] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 247.304474][T20672] loop3: detected capacity change from 0 to 1024 [ 247.318820][ T3409] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 247.368284][T20681] sctp: [Deprecated]: syz.6.6328 (pid 20681) Use of int in maxseg socket option. [ 247.368284][T20681] Use struct sctp_assoc_value instead [ 247.449634][T10247] kernel write not supported for file /vcs (pid: 10247 comm: kworker/0:11) [ 247.533428][T20696] loop9: detected capacity change from 0 to 2048 [ 247.570160][T20696] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 247.614930][T20706] loop4: detected capacity change from 0 to 512 [ 247.622157][T20696] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 247.634533][T20696] EXT4-fs (loop9): This should not happen!! Data will be lost [ 247.634533][T20696] [ 247.644279][T20696] EXT4-fs (loop9): Total free blocks count 0 [ 247.647514][T20708] loop3: detected capacity change from 0 to 512 [ 247.650352][T20696] EXT4-fs (loop9): Free/Dirty block details [ 247.662947][T20696] EXT4-fs (loop9): free_blocks=2415919104 [ 247.668730][T20696] EXT4-fs (loop9): dirty_blocks=16 [ 247.673980][T20696] EXT4-fs (loop9): Block reservation details [ 247.680126][T20696] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 247.696995][T20708] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 247.720660][T20708] EXT4-fs (loop3): invalid journal inode [ 247.762467][T20708] EXT4-fs (loop3): can't get journal size [ 247.783333][T20708] EXT4-fs (loop3): 1 truncate cleaned up [ 247.852360][T20721] smc: net device hsr0 applied user defined pnetid SYZ2 [ 247.873312][T20721] smc: net device hsr0 erased user defined pnetid SYZ2 [ 247.900232][T20723] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.6347: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.954492][T20723] EXT4-fs (loop6): Remounting filesystem read-only [ 247.975694][T20732] __nla_validate_parse: 1 callbacks suppressed [ 247.975713][T20732] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6350'. [ 248.008152][T20732] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6350'. [ 248.176506][T20743] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 248.534271][T20763] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #16: comm syz.9.6364: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 248.553729][T20763] EXT4-fs (loop9): Remounting filesystem read-only [ 248.633109][T20775] EXT4-fs: Ignoring removed orlov option [ 248.638923][T20775] EXT4-fs: inline encryption not supported [ 248.643067][T20773] debugfs: 'ttyS3' already exists in 'caif_serial' [ 248.700822][T20775] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 248.716875][T20775] EXT4-fs (loop9): Remounting filesystem read-only [ 248.877781][T20797] pimreg: entered allmulticast mode [ 249.100589][T20819] syz.4.6386: attempt to access beyond end of device [ 249.100589][T20819] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 249.222307][T20828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.307934][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 249.307951][ T29] audit: type=1326 audit(505.284:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af3f8acb9 code=0x7ffc0000 [ 249.388423][ T29] audit: type=1326 audit(505.314:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af3f8acb9 code=0x7ffc0000 [ 249.412456][ T29] audit: type=1326 audit(505.314:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af3f8acb9 code=0x7ffc0000 [ 249.438245][ T29] audit: type=1326 audit(505.314:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1af3f8acb9 code=0x7ffc0000 [ 249.461242][ T29] audit: type=1326 audit(505.314:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1af3f8aa22 code=0x7ffc0000 [ 249.484083][ T29] audit: type=1326 audit(505.344:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1af3f4b58e code=0x7ffc0000 [ 249.523249][ T29] audit: type=1326 audit(505.444:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1af3f8aae7 code=0x7ffc0000 [ 249.546218][ T29] audit: type=1326 audit(505.464:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1af3f4b58e code=0x7ffc0000 [ 249.569582][ T29] audit: type=1326 audit(505.464:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1af3f8a94b code=0x7ffc0000 [ 249.592727][ T29] audit: type=1326 audit(505.464:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.9.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1af3f4b58e code=0x7ffc0000 [ 249.633282][T20846] loop9: p1 p3 p4 [ 249.645709][T20846] loop9: p1 size 477167616 extends beyond EOD, truncated [ 249.709297][T20846] loop9: p3 start 4294901760 is beyond EOD, truncated [ 249.716385][T20846] loop9: p4 size 32768 extends beyond EOD, truncated [ 249.729670][ T2516] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.092212][T20905] netlink: 'syz.9.6410': attribute type 1 has an invalid length. [ 250.100243][T20905] netlink: 'syz.9.6410': attribute type 2 has an invalid length. [ 250.836440][T20940] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.843722][T20940] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.860533][T20942] netlink: 'syz.3.6427': attribute type 11 has an invalid length. [ 250.868574][T20942] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6427'. [ 250.885445][T20944] veth0: entered promiscuous mode [ 250.892165][T20943] veth0: left promiscuous mode [ 250.900319][T20946] netlink: 'syz.9.6423': attribute type 39 has an invalid length. [ 250.991066][T20956] set_capacity_and_notify: 7 callbacks suppressed [ 250.991108][T20956] loop4: detected capacity change from 0 to 512 [ 251.234520][T20980] loop9: detected capacity change from 0 to 512 [ 251.259831][T20980] EXT4-fs mount: 53 callbacks suppressed [ 251.259852][T20980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.281673][T20980] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 251.296513][T20980] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 251.308872][T20980] EXT4-fs (loop9): This should not happen!! Data will be lost [ 251.308872][T20980] [ 251.318645][T20980] EXT4-fs (loop9): Total free blocks count 0 [ 251.324798][T20980] EXT4-fs (loop9): Free/Dirty block details [ 251.330828][T20980] EXT4-fs (loop9): free_blocks=65280 [ 251.336266][T20980] EXT4-fs (loop9): dirty_blocks=1 [ 251.341361][T20980] EXT4-fs (loop9): Block reservation details [ 251.347446][T20980] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 251.367815][T19394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.396652][T20987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.796339][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.093974][T21035] loop4: detected capacity change from 0 to 4096 [ 252.103293][T21035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.133699][T21038] loop3: detected capacity change from 0 to 128 [ 252.159520][T21038] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 252.174698][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.242931][T17283] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.294247][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6468'. [ 252.544851][T21070] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6481'. [ 252.659392][T21080] loop4: detected capacity change from 0 to 1024 [ 252.666383][T21080] EXT4-fs: Ignoring removed bh option [ 252.680242][T21080] EXT4-fs: inline encryption not supported [ 252.688113][T21080] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 252.700941][T21080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 252.710171][T21080] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.6484: lblock 2 mapped to illegal pblock 2 (length 1) [ 252.728139][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6486'. [ 252.742178][T21085] team0: Port device team_slave_1 removed [ 252.748385][T21080] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.6484: lblock 0 mapped to illegal pblock 48 (length 1) [ 252.762963][T21080] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6484: Failed to acquire dquot type 0 [ 252.774551][T21080] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 252.784283][T21080] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.6484: mark_inode_dirty error [ 252.796827][T21080] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 252.807816][T21080] EXT4-fs (loop4): 1 orphan inode deleted [ 252.814327][T21080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.834779][ T1771] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.854006][ T1771] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 252.867030][T21080] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 252.884469][T21080] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 252.894231][T21080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce118, mo2=0000] [ 252.914088][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.938942][T21096] loop6: detected capacity change from 0 to 512 [ 252.961082][T21096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.976717][T21096] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 3: comm syz.6.6492: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 252.996449][T21098] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 253.021282][T18579] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.685014][T21133] loop3: detected capacity change from 0 to 128 [ 253.696115][T21133] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 253.704616][T21133] FAT-fs (loop3): Filesystem has been set read-only [ 253.711452][T21133] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 253.719830][T21133] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 253.874760][T10249] hid_parser_main: 3 callbacks suppressed [ 253.874783][T10249] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 253.901708][T10249] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.029941][T21148] 9pnet: p9_errstr2errno: server reported unknown error  [ 254.119252][T21162] loop6: detected capacity change from 0 to 128 [ 254.195473][T21170] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.421189][T21182] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6527'. [ 254.501371][T21188] loop2: detected capacity change from 0 to 2048 [ 254.545757][T21188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.610578][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.652876][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6536'. [ 254.661943][T21199] netlink: 'syz.3.6536': attribute type 30 has an invalid length. [ 254.704721][ T56] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.738473][T21205] loop3: detected capacity change from 0 to 512 [ 254.753665][ T56] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.771979][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6539'. [ 254.777055][T21205] EXT4-fs: Ignoring removed oldalloc option [ 254.788035][ T56] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.798111][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.810056][T21205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.6537: Parent and EA inode have the same ino 15 [ 254.823693][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 254.823710][ T29] audit: type=1326 audit(510.804:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21206 comm="syz.2.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 254.856448][T21205] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.6537: Parent and EA inode have the same ino 15 [ 254.870434][T21205] EXT4-fs (loop3): 1 orphan inode deleted [ 254.876938][T21205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.895386][ T29] audit: type=1326 audit(510.804:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21206 comm="syz.2.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 254.919382][ T29] audit: type=1326 audit(510.804:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21206 comm="syz.2.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 254.942984][ T29] audit: type=1326 audit(510.804:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21206 comm="syz.2.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1591cacb9 code=0x7ffc0000 [ 255.000310][T21205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6537'. [ 255.010296][ T29] audit: type=1400 audit(510.984:2674): avc: denied { listen } for pid=21211 comm="syz.4.6540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 255.077701][T17283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.157073][T21220] netlink: 'syz.2.6544': attribute type 21 has an invalid length. [ 255.186998][T21225] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 255.197543][T21225] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 255.207008][T21225] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.6546: Failed to acquire dquot type 0 [ 255.226091][T21225] EXT4-fs (loop9): 1 truncate cleaned up [ 255.234716][T21225] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.305839][T21225] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 255.316662][T21225] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 255.326222][T21225] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.6546: Failed to acquire dquot type 0 [ 255.352036][T19394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.395732][T21237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.396082][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6551'. [ 255.407403][T21237] EXT4-fs (loop2): 1 truncate cleaned up [ 255.429571][T21237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.442349][T21235] hsr_slave_1 (unregistering): left promiscuous mode [ 255.506855][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6552'. [ 255.535602][T17104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.567434][T21244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 255.688833][T21244] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.6554: lblock 0 mapped to illegal pblock 0 (length 6) [ 255.736498][T21244] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 255.749184][T21244] EXT4-fs (loop9): This should not happen!! Data will be lost [ 255.749184][T21244] [ 255.786070][T21259] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: comm syz.9.6554: lblock 0 mapped to illegal pblock 0 (length 1) [ 255.850385][T21259] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.6554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 255.906095][T21269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6563'. [ 255.920592][T21269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6563'. [ 255.935909][T21259] EXT4-fs error (device loop9) in ext4_setattr:6035: Corrupt filesystem [ 255.988205][T19394] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 256.006311][ T29] audit: type=1400 audit(511.984:2675): avc: denied { map } for pid=21264 comm="syz.6.6562" path="socket:[60966]" dev="sockfs" ino=60966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.164556][T21287] set_capacity_and_notify: 5 callbacks suppressed [ 256.164653][T21287] loop4: detected capacity change from 0 to 512 [ 256.222287][T21287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.281591][T21287] ================================================================== [ 256.290348][T21287] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 256.297845][T21287] [ 256.300184][T21287] read-write to 0xffff88811a43b6b8 of 8 bytes by interrupt on cpu 1: [ 256.308356][T21287] __xa_clear_mark+0xf5/0x1e0 [ 256.313247][T21287] __folio_end_writeback+0xf4/0x360 [ 256.318479][T21287] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 256.324998][T21287] folio_end_writeback+0x1c/0x70 [ 256.330093][T21287] ext4_finish_bio+0x459/0x8b0 [ 256.334968][T21287] ext4_end_bio+0x27b/0x380 [ 256.339501][T21287] bio_endio+0x37a/0x410 [ 256.343848][T21287] blk_update_request+0x338/0x730 [ 256.348922][T21287] blk_mq_end_request+0x26/0x50 [ 256.353788][T21287] lo_complete_rq+0x98/0x140 [ 256.358394][T21287] blk_done_softirq+0x77/0xb0 [ 256.363171][T21287] handle_softirqs+0xb9/0x280 [ 256.367871][T21287] run_ksoftirqd+0x1c/0x30 [ 256.372295][T21287] smpboot_thread_fn+0x32a/0x510 [ 256.377353][T21287] kthread+0x488/0x510 [ 256.381435][T21287] ret_from_fork+0x148/0x280 [ 256.386038][T21287] ret_from_fork_asm+0x1a/0x30 [ 256.390814][T21287] [ 256.393166][T21287] read to 0xffff88811a43b6b8 of 8 bytes by task 21287 on cpu 0: [ 256.400804][T21287] xas_find_marked+0x213/0x620 [ 256.405757][T21287] find_get_entry+0x5d/0x380 [ 256.410365][T21287] filemap_get_folios_tag+0x15f/0x230 [ 256.415832][T21287] file_write_and_wait_range+0x20c/0x2f0 [ 256.421487][T21287] generic_buffers_fsync_noflush+0x45/0x130 [ 256.427392][T21287] ext4_sync_file+0x1aa/0x680 [ 256.432072][T21287] vfs_fsync_range+0x10d/0x130 [ 256.436938][T21287] ext4_buffered_write_iter+0x34f/0x3c0 [ 256.442509][T21287] ext4_file_write_iter+0xe1c/0xf70 [ 256.447727][T21287] do_iter_readv_writev+0x4fd/0x5a0 [ 256.452927][T21287] vfs_writev+0x2e1/0x900 [ 256.457362][T21287] __se_sys_pwritev2+0xfc/0x1c0 [ 256.462874][T21287] __x64_sys_pwritev2+0x67/0x80 [ 256.467729][T21287] x64_sys_call+0x2c9e/0x3000 [ 256.472417][T21287] do_syscall_64+0xc0/0x2a0 [ 256.476935][T21287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.483015][T21287] [ 256.485337][T21287] value changed: 0x00fffffffe000000 -> 0x00fffffff8000000 [ 256.492538][T21287] [ 256.494863][T21287] Reported by Kernel Concurrency Sanitizer on: [ 256.501104][T21287] CPU: 0 UID: 0 PID: 21287 Comm: syz.4.6569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.512496][T21287] Tainted: [W]=WARN [ 256.516400][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.526468][T21287] ================================================================== [ 256.581169][T15364] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.