last executing test programs: 3m3.707367009s ago: executing program 3 (id=1047): r0 = memfd_create(&(0x7f00000006c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6\xcf\xcc\xe0\x04\x93>\xb8\x88\xc0\xad\x97\xd3.\x04\xc4n\x83Sb\x83\xf6L\xb7$\xb4\xeb\x91\x88\xcfn\xccwN\x9c\x8a\xb7\xfd\x83G\x18[\x00\xee\xfe\x9e\xab\xc4\xb3\x1d-q]\vep\xee\x18\xa9\x86\xa5\x1a\xd5\x92\n,\x14\x96~\x0fW\xbb\x8a:\xf5\xa3\x9b\x004\xd8\xf8_\x0e\xee\xbe>\xd7\x90\x95\xcb^\xe2a\xf4\xe5Z5\x92~@ \x00\x9b\xca\xea\xa8\xc0,\xcc\xe9s\xca\xd3\"\x14\xf3\x11\xe5\x0e\x93\x9aY\xb6\xa2|\xe8\xfe0\x9e\xc2\x99b\xd7\xd9\xa6\x15oO\xe2\xfe\xd0F\xcc\xeb\x1a\x84\x06E\xec\xf5\x9e\xea\xccB\xdd\xd84f\xb2O\r\x12\x1a\x1d\xb8\x92Q)=\xaa?\x13T\x82\xdf-E\xa4>c\xcd\xf57\xde\x17_\xfa\x9dd]-\xdd3.\x91\xd9/r\xc6>\xe4]\x8b', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000680)=[{&(0x7f0000001800)='\x00', 0x1}, {&(0x7f0000000580)="d18a9a05", 0x4}, {&(0x7f0000000440)="a703648b07", 0x5}], 0x3, 0x2) splice(r1, 0x0, r0, 0x0, 0x25a5, 0x4) 3m3.662841491s ago: executing program 3 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206050000000000fffff0000004000005000100060000000900020073797a320000000005000400000000000c000780080012400e00000011000300686173683a69700000ffffffffffff000500050002"], 0x58}}, 0x0) 3m3.573139253s ago: executing program 3 (id=1053): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m3.148097217s ago: executing program 3 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 3m3.090795679s ago: executing program 3 (id=1071): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={r1, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) 3m2.834651048s ago: executing program 3 (id=1082): r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 3m2.790652779s ago: executing program 32 (id=1082): r0 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 2m31.853625807s ago: executing program 4 (id=1952): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @multicast2}}}, 0x118) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 2m31.835425127s ago: executing program 4 (id=1953): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) 2m31.789601809s ago: executing program 4 (id=1955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) 2m31.75960213s ago: executing program 4 (id=1956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@loopback, 0x42, r2}) 2m31.74072179s ago: executing program 4 (id=1959): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 2m31.686800362s ago: executing program 4 (id=1961): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) 2m16.197879901s ago: executing program 33 (id=1961): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) 2m7.070925952s ago: executing program 0 (id=2307): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m7.057367082s ago: executing program 0 (id=2308): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x0, 0x8, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x8000000000000001}, {0x0, 0x4000000000a00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x3, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m7.002998374s ago: executing program 0 (id=2309): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x1, {0x1, 0xff, 0x2}, 0x1fd}, 0x18) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3, {0x2, 0xff, 0x2}, 0xff}, 0x18) 2m7.002829334s ago: executing program 0 (id=2310): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x9, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 2m7.002710514s ago: executing program 0 (id=2311): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m6.996218584s ago: executing program 0 (id=2312): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x102260, 0x10000, 0x0, 0x0, 0x2b5, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 1m51.91931237s ago: executing program 34 (id=2312): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x102260, 0x10000, 0x0, 0x0, 0x2b5, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 1m36.160004948s ago: executing program 1 (id=3123): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0x2, 0x81, 0x0, 0x6080, 0x40000ef3, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x440c0) 1m36.08538665s ago: executing program 1 (id=3124): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x6, 0x0, 0x0, 0x0, 0xb, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x7e75, 0x5, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) 1m36.019978093s ago: executing program 1 (id=3129): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1m35.955010725s ago: executing program 1 (id=3131): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000"], 0x57) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m35.828522279s ago: executing program 1 (id=3138): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m35.754082601s ago: executing program 1 (id=3142): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m20.629568249s ago: executing program 35 (id=3142): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.319938597s ago: executing program 6 (id=5627): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x15, 0x80005, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.268702469s ago: executing program 8 (id=5630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 1.235784129s ago: executing program 6 (id=5631): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 1.22018732s ago: executing program 8 (id=5634): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f0000000c40)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x78) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.079173075s ago: executing program 6 (id=5638): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000980)="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", 0x659}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 1.072507845s ago: executing program 5 (id=5639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.021188436s ago: executing program 6 (id=5640): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1.020460596s ago: executing program 5 (id=5641): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x4454, 0x1000, 0xfffffffd, 0x2, 0x0, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0x1) 997.265837ms ago: executing program 5 (id=5643): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000004c0)=0x959, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x39) 914.63513ms ago: executing program 5 (id=5646): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 886.919061ms ago: executing program 7 (id=5648): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 869.558701ms ago: executing program 6 (id=5649): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x3, 0x7}, 0x8) 808.311214ms ago: executing program 7 (id=5650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 807.777634ms ago: executing program 5 (id=5651): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x2200400, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1207, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r0, &(0x7f00000001c0)="8a", 0x1, 0x8280c59) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r1, &(0x7f0000000040)="10", 0xffffffb7, 0x8081000) 794.641704ms ago: executing program 2 (id=5652): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x402}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 760.646785ms ago: executing program 6 (id=5653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000054) sendmmsg$inet6(r0, &(0x7f0000005f40)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaa93}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000180)='o', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4) 744.371405ms ago: executing program 7 (id=5654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=' ', 0x1}], 0x1) 677.977758ms ago: executing program 2 (id=5655): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r0, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r1) 677.317108ms ago: executing program 8 (id=5656): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80, 0x0, 0x10, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0xfffff800}, 0x8) 603.07724ms ago: executing program 2 (id=5657): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xea1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) 602.58141ms ago: executing program 7 (id=5658): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818850, &(0x7f0000000140)=ANY=[@ANYBLOB='mixed,shortname=lower,utf8=0,\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x374, &(0x7f0000000600)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzrw+WzbBO1pvOpxvNzUrxldItmukFndwtZ55vnMnGVsL0hMV/Z8HExXbk/eX6lUs//LLb85S+SdioAwAAAAAAAAAAAAAAAAAA7orSe8ULxZt9p3dq9dhTRTC3t6MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLtj+P//S8HWWGY3wZ/tGC+aXd1oRhy+19MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/7u8AAAD//ydhaOA=") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 396.405987ms ago: executing program 7 (id=5659): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000, 0xffffffffffffffff}, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 368.630538ms ago: executing program 7 (id=5660): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) shutdown(r0, 0x0) 368.392378ms ago: executing program 8 (id=5661): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 311.98387ms ago: executing program 2 (id=5662): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$eJzs3c9rG8ceAPDv6kd+58WBEN57PB4uPTQljRzb/ZFCD+m5DQ2091TYigmWo2DJIXYDTQ7NuYReSgOl99Jzj6H/QA/9GwJtIJRg2kMvLiuvFDmWbDlRbKX6fGDNzO5Ks6PZ73hGI6EARtZ4+icX8Z+I+DKJOBYRSXasENnB8fXzVh/fnEm3JNbWPv49aZ6X5lvP1Xrc4Szz74j46YuI07nN5daXV+bL1WplMctPNBauTdSXV85cWSjPVeYqV6emp8+9NT317jtvD6yur1/88+uP7uez3PG7SZyPI1musx7P4VZnZjzGs9ekGOefOnFyAIUNk6Tr3h92/TrYmXwW58VI+4Bjkc+iHvjn+zwi1oARlew4/n8pvpgrAXZXaxzQmtsPaB780nj0/voEaHP9C+vvjcSB5tzo0GqyYWaUznfHBlB+WsaPv927m24xuPchALZ163ZEnC0UNvd/Sdb/PbNXjvZx0tNl6P9g99xPxz9vtMY/hY74z7XHP9Fl/HO4S+w+i+3jP/dwAMX0lI7/3us6/m0vWo3ls9zR5pivmFy+Uq2cjYh/RcSpKO5P81ut55xbfbDW61jn+C/d0vJbY8HsOh4W9m98zGy5UX6eOnd6dDviv13Hv0m7/ZMu7Z++Hhf7LONk5d7/ex3bvv4v1tp3Ea91bf8nK1rJ1uuTE837YaJ1V2z2x52TP/cqf6/rn7b/oa3rP5Z0rtfWd17Gtwf+qkR7PXmjDfWP/u//fcknzfS+bN+NcqOxOBmxL/mwvT/X2j/15LGtfOv8tP6nXu0e/1vd/wcj4tM+63/nxPf/63VsGNp/tmv7t2e3T7X/zhMPPvjsm17l99f/vdlMncr29NP/9XuBz/PaAQAAAAAAwLDJRcSRSHKldjqXK5XWP99xIg7lqrV64/Tl2tLV2Wh+V3YsirnWSvexjs9DTGYrhq38VDOdb+enI+J4RHyVP9jMl2Zq1dm9rjwAAAAAAAAAAAAAAAAAAAAMicM9vv+f+jW/11cHvHB+8htG17bxP4hfegKGkv//MLrEP4wu8Q+jS/zD6BL/MLrEP4wu8Q+jS/wDAAAAAAAAAAAAAAAAAAAAAAAAAADAQF28cCHd1lYf35xJ87PXl5fma9fPzFbq86WFpZnSTG3xWmmuVpurVkoztYXtnq9aq12bnIqlGxONSr0xUV9eubRQW7rauHRloTxXuVQp7kqtAAAAAAAAAAAAAAAAAAAA4OVSX16ZL1erlUWJamWxOByX8VIlCsNxGRIDTux1zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT/wdAAD//4a/Mhw=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 266.696022ms ago: executing program 8 (id=5672): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 265.696371ms ago: executing program 2 (id=5673): socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1.04463ms ago: executing program 5 (id=5663): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@usrquota}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4}) 291.49µs ago: executing program 8 (id=5675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 0s ago: executing program 2 (id=5664): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'security\x00', 0x0, [0x5, 0x8, 0x20000003, 0x3, 0x4]}, &(0x7f0000000040)=0x54) kernel console output (not intermixed with test programs): loop6: detected capacity change from 0 to 164 [ 187.616824][T13603] loop7: detected capacity change from 0 to 764 [ 187.642538][ T28] audit: type=1400 audit(2000000660.627:877): avc: denied { remount } for pid=13601 comm="syz.7.4011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.642837][T13605] loop5: detected capacity change from 0 to 512 [ 187.705920][T13602] Unable to read rock-ridge attributes [ 187.707966][T13602] Unable to read rock-ridge attributes [ 187.714562][T13605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.733595][T13605] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4013: invalid indirect mapped block 4294967295 (level 1) [ 187.733749][T13605] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.733844][T13605] EXT4-fs (loop5): Remounting filesystem read-only [ 187.733968][T13605] EXT4-fs (loop5): 2 truncates cleaned up [ 187.734501][T13605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.815128][T13598] loop8: detected capacity change from 0 to 256 [ 187.819899][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.035668][T13598] FAT-fs (loop8): Directory bread(block 64) failed [ 188.044751][T13598] FAT-fs (loop8): Directory bread(block 65) failed [ 188.054812][T13598] FAT-fs (loop8): Directory bread(block 66) failed [ 188.073224][T13598] FAT-fs (loop8): Directory bread(block 67) failed [ 188.091376][T13598] FAT-fs (loop8): Directory bread(block 68) failed [ 188.113212][T13598] FAT-fs (loop8): Directory bread(block 69) failed [ 188.124479][T13598] FAT-fs (loop8): Directory bread(block 70) failed [ 188.142099][T13598] FAT-fs (loop8): Directory bread(block 71) failed [ 188.161284][T13598] FAT-fs (loop8): Directory bread(block 72) failed [ 188.177638][T13598] FAT-fs (loop8): Directory bread(block 73) failed [ 188.865905][T13646] loop8: detected capacity change from 0 to 2048 [ 188.926991][T13646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.955423][T13646] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.975806][T13646] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4028: bg 0: block 345: padding at end of block bitmap is not set [ 189.010421][T13646] EXT4-fs (loop8): Remounting filesystem read-only [ 189.022048][T13646] EXT4-fs warning (device loop8): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 189.027086][T13654] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 189.055220][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.209800][ T3400] kernel read not supported for file /674/net/snmp6 (pid: 3400 comm: kworker/1:3) [ 189.263759][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.421335][ T28] audit: type=1400 audit(2000000662.407:878): avc: denied { connect } for pid=13698 comm="syz.2.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.474778][T13710] tipc: Started in network mode [ 189.480081][T13710] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 189.490249][T13710] tipc: Enabling of bearer rejected, failed to enable media [ 189.581086][T13720] set_capacity_and_notify: 1 callbacks suppressed [ 189.581173][T13720] loop2: detected capacity change from 0 to 128 [ 189.621425][T13726] loop5: detected capacity change from 0 to 4096 [ 189.632158][T13720] EXT4-fs: Ignoring removed i_version option [ 189.655106][T13720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 189.665334][T13720] System zones: 1-3, 19-19, 35-36 [ 189.672493][T13720] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.686039][T13726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.709544][T13729] team_slave_0: entered promiscuous mode [ 189.715332][T13729] team_slave_1: entered promiscuous mode [ 189.724049][T13720] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.735695][T13726] EXT4-fs (loop5): shut down requested (1) [ 189.742712][T13729] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 189.750477][T13726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 189.759579][T13722] loop6: detected capacity change from 0 to 32768 [ 189.773708][T13726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 189.783549][T13726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 189.785418][T10442] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.792566][T13726] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 189.856001][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4069'. [ 189.870133][T13736] netlink: 'syz.6.4069': attribute type 1 has an invalid length. [ 189.882574][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.928352][T13736] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4069'. [ 190.005924][T13748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=13748 comm=syz.7.4074 [ 190.097502][T13758] loop6: detected capacity change from 0 to 512 [ 190.127023][T13760] loop7: detected capacity change from 0 to 1024 [ 190.142211][T13758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.173717][T13760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.190564][T13758] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.247283][T10038] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.257308][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.472324][T13794] loop6: detected capacity change from 0 to 8192 [ 190.608738][ T28] audit: type=1400 audit(2000000663.597:879): avc: denied { recv } for pid=8290 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.249 dest=42762 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 190.651865][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b4c8000: rx timeout, send abort [ 190.671249][T13814] loop6: detected capacity change from 0 to 2048 [ 190.698586][T13814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.713864][T13814] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.745950][T13814] EXT4-fs: Ignoring removed i_version option [ 190.757754][T13814] EXT4-fs (loop6): stripe (253) is not aligned with cluster size (16), stripe is disabled [ 190.769237][T13814] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 190.788634][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.972243][ T310] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.038257][ T310] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.083909][T13837] loop6: detected capacity change from 0 to 512 [ 191.093089][ T310] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.160168][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b4c8000: abort rx timeout. Force session deactivation [ 191.192921][ T310] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.293403][T13858] C: renamed from team_slave_0 (while UP) [ 191.379146][T13858] netlink: 'syz.8.4122': attribute type 3 has an invalid length. [ 191.393817][T13858] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4122'. [ 191.413743][T13858] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 191.564514][T13868] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=13868 comm=syz.8.4126 [ 191.579799][ T310] bridge_slave_1: left allmulticast mode [ 191.593418][ T310] bridge_slave_1: left promiscuous mode [ 191.599413][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.607578][ T310] bridge_slave_0: left allmulticast mode [ 191.613282][ T310] bridge_slave_0: left promiscuous mode [ 191.619351][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.906947][T13877] loop5: detected capacity change from 0 to 512 [ 191.945958][T13877] EXT4-fs (loop5): 1 truncate cleaned up [ 191.952365][T13877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.088201][ T28] audit: type=1400 audit(2000000665.067:880): avc: denied { unmount } for pid=12079 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.120368][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.166354][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.186200][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.201722][ T310] bond0 (unregistering): Released all slaves [ 192.214399][T13904] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4141'. [ 192.233851][T13830] chnl_net:caif_netlink_parms(): no params data found [ 192.254142][T13904] netlink: 'syz.6.4141': attribute type 12 has an invalid length. [ 192.272736][T13904] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4141'. [ 192.283204][ T310] tipc: Left network mode [ 192.302633][ T310] hsr_slave_0: left promiscuous mode [ 192.318758][ T310] hsr_slave_1: left promiscuous mode [ 192.340415][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.350405][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.358638][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.366138][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.374036][ T310] batman_adv: batadv0: Removing interface: ipvlan2 [ 192.385359][ T310] team_slave_0: left promiscuous mode [ 192.391183][ T310] team_slave_1: left promiscuous mode [ 192.397212][ T310] veth1_macvtap: left promiscuous mode [ 192.402898][ T310] veth0_macvtap: left promiscuous mode [ 192.408774][ T310] veth1_vlan: left promiscuous mode [ 192.414106][ T310] veth0_vlan: left promiscuous mode [ 192.527322][ T310] team0 (unregistering): Port device team_slave_1 removed [ 192.538962][ T310] team0 (unregistering): Port device team_slave_0 removed [ 192.684271][T13930] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4151'. [ 192.693567][T13930] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4151'. [ 192.812697][T13830] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.857660][T13830] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.875469][T13941] loop8: detected capacity change from 0 to 2048 [ 192.890494][T13830] bridge_slave_0: entered allmulticast mode [ 192.905278][T13830] bridge_slave_0: entered promiscuous mode [ 192.931320][T13830] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.949051][T13830] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.957160][T13941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.059411][T13830] bridge_slave_1: entered allmulticast mode [ 193.068760][T13941] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.084111][T13830] bridge_slave_1: entered promiscuous mode [ 193.161012][T13830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.161729][T13941] EXT4-fs: Ignoring removed i_version option [ 193.211221][T13941] EXT4-fs (loop8): stripe (253) is not aligned with cluster size (16), stripe is disabled [ 193.212276][T13830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.265430][T13941] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 193.302379][T13830] team0: Port device team_slave_0 added [ 193.321702][T13830] team0: Port device team_slave_1 added [ 193.376056][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.379708][T13830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.475292][T13830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.537140][ T28] audit: type=1326 audit(2000000666.507:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.598260][T13830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.611892][ T28] audit: type=1326 audit(2000000666.517:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.636761][T13830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.649871][T13830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.683709][ T28] audit: type=1326 audit(2000000666.517:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.707850][T13830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.726574][ T28] audit: type=1326 audit(2000000666.517:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.756790][ T28] audit: type=1326 audit(2000000666.517:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.787636][ T28] audit: type=1326 audit(2000000666.517:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.824226][T14015] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.847060][T14017] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 193.848600][ T28] audit: type=1326 audit(2000000666.517:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.879298][ T28] audit: type=1326 audit(2000000666.517:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.892059][T14015] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 193.911264][T14017] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 193.917905][ T28] audit: type=1326 audit(2000000666.517:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.6.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ff884ebc819 code=0x7ffc0000 [ 193.929249][T14015] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4175: invalid indirect mapped block 33554432 (level 0) [ 193.957391][T14015] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 193.958829][T14015] EXT4-fs (loop2): Remounting filesystem read-only [ 193.968005][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 193.968028][ C1] EXT4-fs (loop2): initial error at time 2000000666: ext4_free_branches:1023: inode 13 [ 193.968056][ C1] EXT4-fs (loop2): last error at time 2000000666: ext4_free_branches:1023: inode 13 [ 193.989120][T13830] hsr_slave_0: entered promiscuous mode [ 193.991721][T14015] EXT4-fs (loop2): 1 truncate cleaned up [ 194.012787][T14015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.031729][T13830] hsr_slave_1: entered promiscuous mode [ 194.038186][T13830] debugfs: 'hsr0' already exists in 'hsr' [ 194.044537][T13830] Cannot create hsr debugfs directory [ 194.056933][T14023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.134006][T10442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.274472][T14058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.295781][T14058] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 194.313625][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 194.320194][ C1] EXT4-fs (loop5): initial error at time 2000000667: ext4_mb_generate_buddy:1317 [ 194.329366][ C1] EXT4-fs (loop5): last error at time 2000000667: ext4_mb_generate_buddy:1317 [ 194.343291][T14058] EXT4-fs (loop5): 1 orphan inode deleted [ 194.370003][T14064] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.372237][T14054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.390899][T14064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.394009][T14058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.423574][T14064] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.637776][T13830] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 194.646792][T14082] set_capacity_and_notify: 4 callbacks suppressed [ 194.646808][T14082] loop6: detected capacity change from 0 to 1024 [ 194.671651][T14082] EXT4-fs: Ignoring removed nobh option [ 194.682873][T13830] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 194.700404][T13830] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.727380][T14082] EXT4-fs: Ignoring removed bh option [ 194.733299][T13830] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.744795][T14082] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 194.744795][T14082] [ 194.809267][T14118] loop2: detected capacity change from 0 to 512 [ 194.863957][T14118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.929143][T14118] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 194.956092][T14118] EXT4-fs (loop2): 1 orphan inode deleted [ 195.130757][T13830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.159850][T13830] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.186600][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.193803][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.236652][T14157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4212'. [ 195.262871][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.270143][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.360324][T13830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.437616][T13830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.791628][T14202] loop8: detected capacity change from 0 to 512 [ 195.800766][T14198] loop6: detected capacity change from 0 to 512 [ 195.807312][T14201] hub 9-0:1.0: USB hub found [ 195.813629][T13830] veth0_vlan: entered promiscuous mode [ 195.819631][T14201] hub 9-0:1.0: 8 ports detected [ 195.828785][T13830] veth1_vlan: entered promiscuous mode [ 195.835641][T14198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.843053][T14202] EXT4-fs: Ignoring removed bh option [ 195.870662][T14202] EXT4-fs: Ignoring removed oldalloc option [ 195.890993][T13830] veth0_macvtap: entered promiscuous mode [ 195.897761][T14202] journal_path: Non-blockdev passed as './file1' [ 195.898569][T14198] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.906179][T13830] veth1_macvtap: entered promiscuous mode [ 195.920985][T14202] EXT4-fs: error: could not find journal device path [ 195.943142][T13830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.952690][T13830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.962749][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.004041][T14198] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.4221: Failed to acquire dquot type 1 [ 196.031495][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.044512][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.062699][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.177879][T14219] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4112'. [ 196.245522][T14224] program syz.8.4232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.278396][T14226] loop6: detected capacity change from 0 to 512 [ 196.319318][T14226] EXT4-fs: Ignoring removed oldalloc option [ 196.374009][T14226] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.4231: corrupted in-inode xattr: invalid ea_ino [ 196.398377][T14226] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.402054][T14226] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4231: couldn't read orphan inode 15 (err -117) [ 196.411323][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 196.411347][ C1] EXT4-fs (loop6): initial error at time 2000000669: ext4_iget_extra_inode:5040: inode 15 [ 196.411381][ C1] EXT4-fs (loop6): last error at time 2000000669: ext4_iget_extra_inode:5040: inode 15 [ 196.450545][T14226] loop6: lost filesystem error report for type 5 error -117 [ 196.689871][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4249'. [ 196.715541][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4249'. [ 196.773949][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 196.819729][T14273] loop5: detected capacity change from 0 to 512 [ 196.898808][T14273] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.943719][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 196.966824][T14273] EXT4-fs warning (device loop5): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 197.113410][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 197.113428][ T28] audit: type=1400 audit(2000000670.097:938): avc: denied { create } for pid=14292 comm="syz.7.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.213866][ T28] audit: type=1400 audit(2000000670.137:939): avc: denied { setopt } for pid=14292 comm="syz.7.4262" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.272437][ T28] audit: type=1400 audit(2000000670.157:940): avc: denied { open } for pid=14297 comm="syz.2.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.337573][ T28] audit: type=1400 audit(2000000670.157:941): avc: denied { kernel } for pid=14297 comm="syz.2.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.359674][T14310] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4269'. [ 197.408773][ T28] audit: type=1400 audit(2000000670.177:942): avc: denied { create } for pid=14299 comm="syz.7.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.471202][ T28] audit: type=1400 audit(2000000670.177:943): avc: denied { create } for pid=14301 comm="syz.5.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.496493][T14298] loop2: detected capacity change from 0 to 256 [ 197.563715][ T28] audit: type=1400 audit(2000000670.177:944): avc: denied { tracepoint } for pid=14301 comm="syz.5.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.571132][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4278'. [ 197.607559][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4278'. [ 197.630143][T14330] netlink: 'syz.7.4278': attribute type 20 has an invalid length. [ 197.640174][ T28] audit: type=1400 audit(2000000670.177:945): avc: denied { setopt } for pid=14301 comm="syz.5.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.735654][ T28] audit: type=1400 audit(2000000670.187:946): avc: denied { read } for pid=14299 comm="syz.7.4265" path="socket:[40210]" dev="sockfs" ino=40210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.746871][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4280'. [ 197.810229][ T28] audit: type=1400 audit(2000000670.237:947): avc: denied { setopt } for pid=14303 comm="syz.7.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.877946][T14298] FAT-fs (loop2): Directory bread(block 64) failed [ 197.894094][T14298] FAT-fs (loop2): Directory bread(block 65) failed [ 197.902086][T14298] FAT-fs (loop2): Directory bread(block 66) failed [ 197.932542][T14298] FAT-fs (loop2): Directory bread(block 67) failed [ 197.961721][T14298] FAT-fs (loop2): Directory bread(block 68) failed [ 197.973985][T14341] loop7: detected capacity change from 0 to 1764 [ 197.974002][T14343] macvlan0: entered promiscuous mode [ 197.981132][T14298] FAT-fs (loop2): Directory bread(block 69) failed [ 198.005349][T14298] FAT-fs (loop2): Directory bread(block 70) failed [ 198.012829][T14298] FAT-fs (loop2): Directory bread(block 71) failed [ 198.035374][T14341] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 198.044056][T14343] netlink: 'syz.8.4284': attribute type 1 has an invalid length. [ 198.044989][T14298] FAT-fs (loop2): Directory bread(block 72) failed [ 198.066318][T14341] isofs_fill_super: get root inode failed [ 198.070069][T14343] netlink: 'syz.8.4284': attribute type 2 has an invalid length. [ 198.083177][T14298] FAT-fs (loop2): Directory bread(block 73) failed [ 198.370349][T14363] loop7: detected capacity change from 0 to 512 [ 198.383447][T14367] loop8: detected capacity change from 0 to 512 [ 198.400721][T14367] EXT4-fs: Ignoring removed nobh option [ 198.428252][T14363] EXT4-fs: Ignoring removed bh option [ 198.443737][T14363] EXT4-fs: Ignoring removed oldalloc option [ 198.449791][T14363] journal_path: Non-blockdev passed as './file1' [ 198.458920][T14367] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.541498][T14363] EXT4-fs: error: could not find journal device path [ 198.705077][T14376] syz.6.4295: attempt to access beyond end of device [ 198.705077][T14376] loop6: rw=0, sector=432, nr_sectors = 128 limit=512 [ 198.824063][T14381] Process accounting resumed [ 198.864760][ T30] kworker/u8:1: attempt to access beyond end of device [ 198.864760][ T30] loop6: rw=1, sector=560, nr_sectors = 2592 limit=512 [ 198.919837][T14404] pimreg: entered allmulticast mode [ 198.937921][ T30] kworker/u8:1: attempt to access beyond end of device [ 198.937921][ T30] loop6: rw=1, sector=3152, nr_sectors = 2696 limit=512 [ 198.941233][T14404] pimreg: left allmulticast mode [ 198.987014][ T30] kworker/u8:1: attempt to access beyond end of device [ 198.987014][ T30] loop6: rw=1, sector=5848, nr_sectors = 2168 limit=512 [ 199.039474][T14413] program syz.5.4312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.045742][ T30] kworker/u8:1: attempt to access beyond end of device [ 199.045742][ T30] loop6: rw=1, sector=8016, nr_sectors = 2072 limit=512 [ 199.073105][ T30] kworker/u8:1: attempt to access beyond end of device [ 199.073105][ T30] loop6: rw=1, sector=10088, nr_sectors = 2088 limit=512 [ 199.093198][T14415] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.109627][ T30] kworker/u8:1: attempt to access beyond end of device [ 199.109627][ T30] loop6: rw=1, sector=12176, nr_sectors = 2080 limit=512 [ 199.127141][T14415] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 199.138966][ T30] kworker/u8:1: attempt to access beyond end of device [ 199.138966][ T30] loop6: rw=1, sector=14256, nr_sectors = 2080 limit=512 [ 199.141228][T14415] EXT4-fs (loop8): orphan cleanup on readonly fs [ 199.155132][ T30] kworker/u8:1: attempt to access beyond end of device [ 199.155132][ T30] loop6: rw=1, sector=16336, nr_sectors = 128 limit=512 [ 199.160516][T14415] EXT4-fs error (device loop8): __ext4_get_inode_loc:4797: comm syz.8.4313: Invalid inode table block 0 in block_group 0 [ 199.208853][T14415] loop8: lost filesystem error report for type 5 error -117 [ 199.213767][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 199.227758][ C1] EXT4-fs (loop8): initial error at time 2000000672: __ext4_get_inode_loc:4797 [ 199.234002][T14415] EXT4-fs (loop8): Remounting filesystem read-only [ 199.236741][ C1] EXT4-fs (loop8): last error at time 2000000672: __ext4_get_inode_loc:4797 [ 199.323768][T14415] EXT4-fs (loop8): 1 truncate cleaned up [ 199.446420][T14450] EXT4-fs: inline encryption not supported [ 199.480033][T14450] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.498300][T14450] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: block 3: comm syz.8.4328: lblock 3 mapped to illegal pblock 3 (length 3) [ 199.514917][T14450] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 199.528200][T14450] EXT4-fs (loop8): This should not happen!! Data will be lost [ 199.528200][T14450] [ 199.560790][ T30] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 199.575992][ T30] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 199.589620][ T30] EXT4-fs (loop8): This should not happen!! Data will be lost [ 199.589620][ T30] [ 199.600881][T12079] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 200.016278][T14492] set_capacity_and_notify: 4 callbacks suppressed [ 200.016298][T14492] loop7: detected capacity change from 0 to 1024 [ 200.084440][T14492] EXT4-fs: Ignoring removed bh option [ 200.581741][T14523] loop6: detected capacity change from 0 to 8192 [ 200.878137][T14544] loop7: detected capacity change from 0 to 256 [ 200.894726][T14544] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.010361][T14552] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4371'. [ 201.046211][T14556] loop7: detected capacity change from 0 to 512 [ 201.064537][T14556] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 201.443182][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4378'. [ 201.620786][T14582] loop5: detected capacity change from 0 to 512 [ 201.636650][T14584] option changes via remount are deprecated (pid=14583 comm=syz.2.4384) [ 201.645344][T14584] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 201.679550][T14580] loop6: detected capacity change from 0 to 4096 [ 201.691943][T14582] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.539493][T14594] loop2: detected capacity change from 0 to 1024 [ 202.564545][T14594] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.587027][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 202.587046][ T28] audit: type=1400 audit(2000000675.577:1017): avc: denied { read write } for pid=14599 comm="syz.8.4392" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 202.622486][T14594] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 202.643851][T14594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 202.673037][T14594] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.4388: Invalid inode table block 0 in block_group 0 [ 202.713490][ T28] audit: type=1400 audit(2000000675.577:1018): avc: denied { open } for pid=14599 comm="syz.8.4392" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 202.756085][T14609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4395'. [ 202.765394][T14594] loop2: lost filesystem error report for type 5 error -117 [ 202.765494][T14594] EXT4-fs (loop2): Remounting filesystem read-only [ 202.780254][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 202.780271][ C0] EXT4-fs (loop2): initial error at time 2000000675: __ext4_get_inode_loc:4797 [ 202.780292][ C0] EXT4-fs (loop2): last error at time 2000000675: __ext4_get_inode_loc:4797 [ 202.823438][ T28] audit: type=1400 audit(2000000675.747:1019): avc: denied { ioctl } for pid=14607 comm="syz.6.4395" path="socket:[41267]" dev="sockfs" ino=41267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.832507][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4396'. [ 202.850447][T14594] Quota error (device loop2): write_blk: dquota write failed [ 202.881875][T14594] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 202.895161][T14617] loop6: detected capacity change from 0 to 512 [ 202.901828][T14594] EXT4-fs (loop2): 1 truncate cleaned up [ 202.943480][T14617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.006082][T14617] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4397: invalid indirect mapped block 256 (level 2) [ 203.024802][T14617] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.029064][T14617] EXT4-fs (loop6): 2 truncates cleaned up [ 203.038529][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 203.038556][ C0] EXT4-fs (loop6): initial error at time 2000000676: ext4_free_branches:1023: inode 11 [ 203.038599][ C0] EXT4-fs (loop6): last error at time 2000000676: ext4_free_branches:1023: inode 11 [ 203.091273][T10442] EXT4-fs unmount: 27 callbacks suppressed [ 203.091294][T10442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.142927][ T28] audit: type=1400 audit(2000000676.097:1020): avc: denied { name_bind } for pid=14623 comm="syz.8.4400" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 203.144205][T14617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.415479][T14628] loop2: detected capacity change from 0 to 512 [ 203.464473][T14628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.515789][T14628] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.540468][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.624546][T14637] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.4406'. [ 203.663946][ T28] audit: type=1400 audit(2000000676.647:1021): avc: denied { setattr } for pid=14626 comm="syz.2.4401" path="/368/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.710478][T14646] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4410'. [ 203.742249][ T28] audit: type=1400 audit(2000000676.707:1022): avc: denied { create } for pid=14643 comm="syz.8.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.769461][ T28] audit: type=1400 audit(2000000676.707:1023): avc: denied { write } for pid=14643 comm="syz.8.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.823727][T10442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.891343][ T28] audit: type=1400 audit(2000000676.877:1024): avc: denied { mount } for pid=14653 comm="syz.5.4415" name="/" dev="ramfs" ino=41356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 204.050396][T14671] program syz.7.4421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.126856][T14680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4426'. [ 204.164284][T14680] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 204.206932][T14680] bond1 (unregistering): Released all slaves [ 204.557879][T14662] loop6: detected capacity change from 0 to 256 [ 205.031795][T14736] loop8: detected capacity change from 0 to 512 [ 205.058213][T14736] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.086684][T14736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.102681][T14662] FAT-fs (loop6): Directory bread(block 64) failed [ 205.124850][T14662] FAT-fs (loop6): Directory bread(block 65) failed [ 205.155042][T14736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.185120][T14662] FAT-fs (loop6): Directory bread(block 66) failed [ 205.196866][T14736] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.216649][T14662] FAT-fs (loop6): Directory bread(block 67) failed [ 205.227903][T14745] loop5: detected capacity change from 0 to 512 [ 205.237771][T14662] FAT-fs (loop6): Directory bread(block 68) failed [ 205.273722][T14745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.283074][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.299341][T14662] FAT-fs (loop6): Directory bread(block 69) failed [ 205.319566][T14745] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.4455: iget: bad i_size value: 38620345925642 [ 205.333991][T14662] FAT-fs (loop6): Directory bread(block 70) failed [ 205.336987][T14745] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.341536][T14745] EXT4-fs (loop5): Remounting filesystem read-only [ 205.341889][T14662] FAT-fs (loop6): Directory bread(block 71) failed [ 205.353614][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 205.353644][ C0] EXT4-fs (loop5): initial error at time 2000000678: ext4_orphan_get:1397: inode 15 [ 205.353676][ C0] EXT4-fs (loop5): last error at time 2000000678: ext4_orphan_get:1397: inode 15 [ 205.374717][T14745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.379933][T14662] FAT-fs (loop6): Directory bread(block 72) failed [ 205.430190][T14662] FAT-fs (loop6): Directory bread(block 73) failed [ 205.471701][T14754] loop8: detected capacity change from 0 to 512 [ 205.537070][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.560690][T14754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.640400][T14754] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.746410][T14762] loop5: detected capacity change from 0 to 2048 [ 205.761481][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.794289][T14762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.869672][T14762] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.941710][T14778] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4470'. [ 205.968622][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4470'. [ 205.985135][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.016373][T14782] loop8: detected capacity change from 0 to 512 [ 206.074303][T14782] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 206.092233][T14782] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 206.113649][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 206.120219][ C1] EXT4-fs (loop8): initial error at time 2000000679: mb_free_blocks:2049: inode 11: block 64 [ 206.130567][ C1] EXT4-fs (loop8): last error at time 2000000679: mb_free_blocks:2049: inode 11: block 64 [ 206.138690][T14782] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #11: comm syz.8.4473: corrupted inode contents [ 206.174338][T14791] loop7: detected capacity change from 0 to 512 [ 206.194664][T14782] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.198706][T14782] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #11: comm syz.8.4473: mark_inode_dirty error [ 206.198890][T14791] EXT4-fs: Ignoring removed i_version option [ 206.230436][T14782] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.233816][T14782] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4473: invalid indirect mapped block 1 (level 1) [ 206.274324][T14791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.308224][T14782] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.308759][T14782] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #11: comm syz.8.4473: corrupted inode contents [ 206.333467][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.353919][T14782] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.372116][T14782] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 206.412763][T14790] loop5: detected capacity change from 0 to 256 [ 206.439578][T14782] loop8: lost filesystem error report for type 5 error -117 [ 206.439733][T14782] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #11: comm syz.8.4473: corrupted inode contents [ 206.473838][T14782] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.474064][T14782] EXT4-fs error (device loop8): ext4_truncate:4602: inode #11: comm syz.8.4473: mark_inode_dirty error [ 206.531461][T14782] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.531669][T14782] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 206.576669][T14782] loop8: lost filesystem error report for type 5 error -117 [ 206.587084][T14782] EXT4-fs (loop8): 1 truncate cleaned up [ 206.613478][T14790] FAT-fs (loop5): Directory bread(block 64) failed [ 206.622233][T14782] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.634797][T14790] FAT-fs (loop5): Directory bread(block 65) failed [ 206.643516][T14790] FAT-fs (loop5): Directory bread(block 66) failed [ 206.651864][T14790] FAT-fs (loop5): Directory bread(block 67) failed [ 206.663921][T14782] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.4473: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 206.691114][T14790] FAT-fs (loop5): Directory bread(block 68) failed [ 206.700501][T14790] FAT-fs (loop5): Directory bread(block 69) failed [ 206.710148][T14790] FAT-fs (loop5): Directory bread(block 70) failed [ 206.718158][T14790] FAT-fs (loop5): Directory bread(block 71) failed [ 206.743432][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.743878][T14790] FAT-fs (loop5): Directory bread(block 72) failed [ 206.771908][T14790] FAT-fs (loop5): Directory bread(block 73) failed [ 207.646750][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4504'. [ 207.657821][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4504'. [ 207.668375][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4504'. [ 207.678120][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4504'. [ 207.687620][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4504'. [ 207.696974][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4504'. [ 207.743998][T14867] loop6: detected capacity change from 0 to 512 [ 207.752791][T14867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.768316][T14867] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4506: iget: bad i_size value: 38620345925642 [ 207.781974][T14867] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.782228][T14867] EXT4-fs (loop6): Remounting filesystem read-only [ 207.791482][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 207.791506][ C1] EXT4-fs (loop6): initial error at time 2000000680: ext4_orphan_get:1397: inode 15 [ 207.791536][ C1] EXT4-fs (loop6): last error at time 2000000680: ext4_orphan_get:1397: inode 15 [ 207.825233][T14867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.858572][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.892017][T14871] loop6: detected capacity change from 0 to 512 [ 207.911966][T14871] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.935140][T14871] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 207.949878][T14871] __quota_error: 24 callbacks suppressed [ 207.949896][T14871] Quota error (device loop6): write_blk: dquota write failed [ 207.955711][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 207.955731][ C1] EXT4-fs (loop6): initial error at time 2000000680: ext4_mb_generate_buddy:1317 [ 207.955752][ C1] EXT4-fs (loop6): last error at time 2000000680: ext4_mb_generate_buddy:1317 [ 207.988964][T14871] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 207.998202][T14871] Quota error (device loop6): write_blk: dquota write failed [ 208.006313][T14871] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 208.016462][T14871] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.4508: Failed to acquire dquot type 1 [ 208.028121][T14871] loop6: lost filesystem error report for type 5 error -28 [ 208.028396][T14871] EXT4-fs (loop6): 1 truncate cleaned up [ 208.043914][T14871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.061857][T14881] loop8: detected capacity change from 0 to 512 [ 208.075669][ T28] audit: type=1400 audit(2000000681.067:1049): avc: denied { remount } for pid=14870 comm="syz.6.4508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 208.075778][T14871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.143239][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.165333][T14883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.178222][T14883] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.215960][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.217972][T14887] sg_write: data in/out 138/120 bytes for SCSI command 0x0-- guessing data in; [ 208.217972][T14887] program syz.6.4514 not setting count and/or reply_len properly [ 208.278252][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4516'. [ 208.298737][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4516'. [ 208.315810][T14892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4517'. [ 208.327735][T14892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4517'. [ 208.390914][T14901] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.442770][T14905] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 208.451819][T14897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.478284][T14912] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.490264][T14905] FAT-fs (loop2): Filesystem has been set read-only [ 208.558880][ T28] audit: type=1400 audit(2000000681.547:1050): avc: denied { read append open } for pid=14896 comm="syz.8.4519" path="/200/file0/file0/blkio.bfq.io_service_bytes_recursive" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 208.596849][T14922] netlink: 'syz.5.4530': attribute type 34 has an invalid length. [ 208.614582][T14912] FAT-fs (loop6): Directory bread(block 64) failed [ 208.621355][T14912] FAT-fs (loop6): Directory bread(block 65) failed [ 208.635274][T14912] FAT-fs (loop6): Directory bread(block 66) failed [ 208.641907][T14912] FAT-fs (loop6): Directory bread(block 67) failed [ 208.663798][ T28] audit: type=1400 audit(2000000681.647:1051): avc: denied { write } for pid=14926 comm="syz.7.4534" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 208.687917][T14912] FAT-fs (loop6): Directory bread(block 68) failed [ 208.694162][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.694791][T14912] FAT-fs (loop6): Directory bread(block 69) failed [ 208.710280][T14912] FAT-fs (loop6): Directory bread(block 70) failed [ 208.717035][T14912] FAT-fs (loop6): Directory bread(block 71) failed [ 208.740220][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.743659][T14912] FAT-fs (loop6): Directory bread(block 72) failed [ 208.757263][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.757525][T14912] FAT-fs (loop6): Directory bread(block 73) failed [ 208.807877][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.818878][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.831310][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.850464][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.863238][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.872125][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.880466][T14932] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 208.896398][T14942] veth1_to_batadv: entered promiscuous mode [ 208.968202][T14952] EXT4-fs: Ignoring removed oldalloc option [ 209.012416][T14952] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.028849][T14952] EXT4-fs (loop6): 1 truncate cleaned up [ 209.036720][T14952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.051082][ T28] audit: type=1400 audit(2000000682.027:1052): avc: denied { write } for pid=14959 comm="syz.2.4549" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.094067][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.098855][ T28] audit: type=1400 audit(2000000682.027:1053): avc: denied { open } for pid=14959 comm="syz.2.4549" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.191201][ T28] audit: type=1400 audit(2000000682.167:1054): avc: denied { create } for pid=14964 comm="syz.2.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 209.444329][T15000] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.483808][T15000] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #3: block 5: comm syz.8.4568: lblock 5 mapped to illegal pblock 5 (length 1) [ 209.513871][T15000] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 209.514095][T15000] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4568: Failed to acquire dquot type 0 [ 209.524261][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 209.524279][ C1] EXT4-fs (loop8): initial error at time 2000000682: ext4_map_blocks:828: inode 3: block 5 [ 209.524325][ C1] EXT4-fs (loop8): last error at time 2000000682: ext4_map_blocks:828: inode 3: block 5 [ 209.598859][T15000] loop8: lost filesystem error report for type 5 error -117 [ 209.609730][T15000] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 5: comm syz.8.4568: lblock 5 mapped to illegal pblock 5 (length 1) [ 209.631869][T15000] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 209.636946][T15000] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4568: Failed to acquire dquot type 0 [ 209.692712][T15000] loop8: lost filesystem error report for type 5 error -117 [ 209.697971][T15000] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.4568: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.752881][T15000] loop8: lost filesystem error report for type 5 error -117 [ 209.753181][T15000] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #3: block 5: comm syz.8.4568: lblock 5 mapped to illegal pblock 5 (length 1) [ 209.803669][T15000] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 209.812255][T15000] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.4568: Failed to acquire dquot type 0 [ 209.842550][T15000] loop8: lost filesystem error report for type 5 error -117 [ 209.842686][T15000] EXT4-fs (loop8): 1 orphan inode deleted [ 209.880626][T15000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.962900][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.080003][T15056] set_capacity_and_notify: 8 callbacks suppressed [ 210.080020][T15056] loop5: detected capacity change from 0 to 512 [ 210.549777][T15081] loop7: detected capacity change from 0 to 512 [ 210.579752][T15081] EXT4-fs: Ignoring removed nobh option [ 210.619325][T15081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.664615][T15081] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.4605: iget: bad i_size value: 38620345925642 [ 210.697828][T15081] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.703651][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 210.719519][ C0] EXT4-fs (loop7): initial error at time 2000000683: ext4_orphan_get:1397: inode 15 [ 210.729039][ C0] EXT4-fs (loop7): last error at time 2000000683: ext4_orphan_get:1397: inode 15 [ 210.738825][T15081] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4605: couldn't read orphan inode 15 (err -117) [ 210.751299][T15081] loop7: lost filesystem error report for type 5 error -117 [ 210.753316][T15081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.837906][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.120714][T15099] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 211.139958][T15099] pim6reg1: group set to 0 [ 212.303717][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 212.357128][T15179] loop7: detected capacity change from 0 to 4096 [ 212.383442][T15179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.481204][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.595344][T15188] loop7: detected capacity change from 0 to 512 [ 212.631010][T15188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.688985][T15188] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.751469][T15205] loop8: detected capacity change from 0 to 512 [ 212.765864][T15205] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 212.774794][T15205] EXT4-fs (loop8): orphan cleanup on readonly fs [ 212.785903][T15205] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4660: bg 0: block 305: padding at end of block bitmap is not set [ 212.800608][T15205] loop8: lost filesystem error report for type 5 error -117 [ 212.802635][T15205] EXT4-fs (loop8): Remounting filesystem read-only [ 212.813622][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 212.822011][T15205] EXT4-fs (loop8): 1 truncate cleaned up [ 212.823934][ C0] EXT4-fs (loop8): initial error at time 2000000685: ext4_validate_block_bitmap:441 [ 212.823962][ C0] EXT4-fs (loop8): last error at time 2000000685: ext4_validate_block_bitmap:441 [ 212.849653][ T57] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.869098][ T57] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.881616][ T57] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.892294][T15205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.944934][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.980834][T15223] loop5: detected capacity change from 0 to 512 [ 212.990496][T15225] loop8: detected capacity change from 0 to 128 [ 213.001709][T15225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 213.017873][T15225] System zones: 1-3, 19-19, 35-36 [ 213.027660][T15223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.028618][T15225] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 213.041261][T15223] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.058588][T15225] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.110291][T15223] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4670: corrupted xattr block 33: e_value size too large [ 213.112124][T15225] EXT4-fs warning (device loop8): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 213.143511][T15223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 213.154353][T12079] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.164112][T15223] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4670: corrupted xattr block 33: e_value size too large [ 213.215541][T15223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 213.225526][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 213.225542][ T28] audit: type=1400 audit(2000000686.217:1076): avc: denied { mounton } for pid=15222 comm="syz.5.4670" path="/438/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.269893][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.288110][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.309702][T15239] __nla_validate_parse: 11 callbacks suppressed [ 213.309719][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4675'. [ 213.330131][T15246] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4677'. [ 213.357365][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4675'. [ 213.411332][ T28] audit: type=1400 audit(2000000686.397:1077): avc: denied { connect } for pid=15251 comm="syz.8.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.437425][T15254] wireguard0: entered promiscuous mode [ 213.444381][T15254] wireguard0: entered allmulticast mode [ 213.564689][T15266] sctp: [Deprecated]: syz.6.4684 (pid 15266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.564689][T15266] Use struct sctp_sack_info instead [ 213.591507][T15267] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4687'. [ 213.608832][T15267] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.616187][T15267] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.618404][ T28] audit: type=1400 audit(2000000686.597:1078): avc: denied { create } for pid=15270 comm="syz.5.4689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.651812][ T28] audit: type=1400 audit(2000000686.597:1079): avc: denied { listen } for pid=15270 comm="syz.5.4689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.689988][ T28] audit: type=1400 audit(2000000686.667:1080): avc: denied { mount } for pid=15272 comm="syz.6.4690" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 213.751216][T15282] loop5: detected capacity change from 0 to 128 [ 213.780460][ T28] audit: type=1400 audit(2000000686.767:1081): avc: denied { remount } for pid=15281 comm="syz.5.4694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 213.858192][ T28] audit: type=1400 audit(2000000686.847:1082): avc: denied { create } for pid=15294 comm="syz.7.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 213.884824][T15294] delete_channel: no stack [ 213.902580][ T28] audit: type=1400 audit(2000000686.877:1083): avc: denied { ioctl } for pid=15294 comm="syz.7.4701" path="socket:[42767]" dev="sockfs" ino=42767 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 213.943573][ T28] audit: type=1400 audit(2000000686.927:1084): avc: denied { create } for pid=15299 comm="syz.5.4703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.000130][ T28] audit: type=1400 audit(2000000686.967:1085): avc: denied { setopt } for pid=15299 comm="syz.5.4703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 214.132182][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4717'. [ 214.200492][T15338] loop5: detected capacity change from 0 to 512 [ 214.230438][T15338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.249390][T15338] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.283242][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.347724][T15344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4724'. [ 214.367020][T15344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4724'. [ 214.380509][T15344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4724'. [ 214.389914][T15356] loop8: detected capacity change from 0 to 1024 [ 214.406379][T15356] EXT4-fs: Ignoring removed nobh option [ 214.420095][T15356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.458227][T15356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.472519][T15370] delete_channel: no stack [ 214.498691][T15356] EXT4-fs (loop8): shut down requested (2) [ 214.562825][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.776343][T15402] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.893419][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.593124][T15481] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4786'. [ 215.821733][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4793'. [ 215.848321][T15504] set_capacity_and_notify: 1 callbacks suppressed [ 215.848340][T15504] loop7: detected capacity change from 0 to 164 [ 215.868859][T15504] Unable to read rock-ridge attributes [ 215.944222][T15512] delete_channel: no stack [ 216.006701][T15521] validate_nla: 47 callbacks suppressed [ 216.006720][T15521] netlink: 'syz.5.4805': attribute type 1 has an invalid length. [ 216.104974][T15528] netlink: 'syz.5.4809': attribute type 10 has an invalid length. [ 216.252655][T15543] program syz.5.4815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.340126][T15554] netlink: 'syz.6.4819': attribute type 3 has an invalid length. [ 216.352700][T15557] ªªªªªª: renamed from vlan0 (while UP) [ 216.365492][T15550] loop7: detected capacity change from 0 to 4096 [ 216.384758][T15550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.547413][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.833895][T15591] netlink: 'syz.5.4830': attribute type 14 has an invalid length. [ 216.999598][T15603] loop2: detected capacity change from 0 to 256 [ 217.116980][T15610] loop2: detected capacity change from 0 to 764 [ 217.131983][T15610] Symlink component flag not implemented [ 217.139747][T15610] Symlink component flag not implemented (7) [ 217.610761][T15661] loop2: detected capacity change from 0 to 256 [ 217.639652][T15661] FAT-fs (loop2): codepage cp850 not found [ 217.694458][T15666] loop5: detected capacity change from 0 to 512 [ 217.714631][T15666] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4863: invalid indirect mapped block 256 (level 2) [ 217.749425][T15666] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.751336][T15666] EXT4-fs (loop5): 2 truncates cleaned up [ 217.760989][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 217.761019][ C1] EXT4-fs (loop5): initial error at time 2000000690: ext4_free_branches:1023: inode 11 [ 217.761050][ C1] EXT4-fs (loop5): last error at time 2000000690: ext4_free_branches:1023: inode 11 [ 217.799518][T15666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.855401][T15677] bond0: entered promiscuous mode [ 217.860517][T15677] bond_slave_0: entered promiscuous mode [ 217.881474][T15677] bond_slave_1: entered promiscuous mode [ 217.893836][T15677] batadv0: entered promiscuous mode [ 217.918010][T15677] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 217.941812][T15677] bond0: left promiscuous mode [ 217.947165][T15677] bond_slave_0: left promiscuous mode [ 217.952894][T15677] bond_slave_1: left promiscuous mode [ 217.959549][T15677] batadv0: left promiscuous mode [ 218.120126][T15700] loop7: detected capacity change from 0 to 128 [ 218.130108][T15700] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.152944][T15700] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.212469][T13830] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.309678][T15711] netlink: 'syz.7.4883': attribute type 25 has an invalid length. [ 218.318843][T15711] netlink: 'syz.7.4883': attribute type 1 has an invalid length. [ 218.356343][T15716] program syz.2.4885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.403437][ T9] IPVS: starting estimator thread 0... [ 218.450423][ T310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 218.465002][ T310] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 218.480701][ T310] EXT4-fs (loop5): This should not happen!! Data will be lost [ 218.480701][ T310] [ 218.502385][ T310] EXT4-fs (loop5): Total free blocks count 0 [ 218.509142][ T310] EXT4-fs (loop5): Free/Dirty block details [ 218.515533][T15721] IPVS: using max 2688 ests per chain, 134400 per kthread [ 218.531770][ T310] EXT4-fs (loop5): free_blocks=0 [ 218.536853][ T310] EXT4-fs (loop5): dirty_blocks=16008 [ 218.542396][ T310] EXT4-fs (loop5): Block reservation details [ 218.548965][ T310] EXT4-fs (loop5): i_reserved_data_blocks=16008 [ 218.590811][ T310] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 218.631854][ T9384] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 218.756746][T15742] team_slave_1: entered promiscuous mode [ 218.773220][T15742] macvtap1: entered promiscuous mode [ 218.793267][T15742] team0: entered promiscuous mode [ 218.824841][T15742] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 218.843750][T15742] team0: Device macvtap1 is already an upper device of the team interface [ 218.862720][T15742] team0: left promiscuous mode [ 218.869503][T15742] team_slave_1: left promiscuous mode [ 218.974042][T15751] tun0: tun_chr_ioctl cmd 1074812117 [ 219.176173][T15768] No such timeout policy "syz0" [ 219.383380][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 219.383397][ T28] audit: type=1400 audit(2000000692.367:1137): avc: denied { bind } for pid=15790 comm="syz.7.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.440823][ T28] audit: type=1400 audit(2000000692.397:1138): avc: denied { write } for pid=15790 comm="syz.7.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.131542][ T28] audit: type=1400 audit(2000000693.117:1139): avc: denied { mount } for pid=15811 comm="syz.7.4927" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 220.196256][ T28] audit: type=1400 audit(2000000693.187:1140): avc: denied { read } for pid=15818 comm="syz.6.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.499901][T15836] __nla_validate_parse: 5 callbacks suppressed [ 220.499921][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4937'. [ 220.534843][T15840] macvlan0: entered allmulticast mode [ 220.540337][T15840] veth1_vlan: entered allmulticast mode [ 220.554626][T15840] veth1_vlan: left allmulticast mode [ 220.564374][T15840] macvlan0 (unregistering): left allmulticast mode [ 220.602858][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4941'. [ 220.674680][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4945'. [ 220.715022][T15856] loop5: detected capacity change from 0 to 128 [ 220.743657][ T28] audit: type=1400 audit(2000000693.727:1141): avc: denied { bind } for pid=15857 comm="syz.7.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.785458][T15856] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.787431][ T28] audit: type=1326 audit(2000000693.767:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b86c819 code=0x7ffc0000 [ 220.821580][ T28] audit: type=1326 audit(2000000693.767:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b86c819 code=0x7ffc0000 [ 220.845251][ T28] audit: type=1326 audit(2000000693.767:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b86c819 code=0x7ffc0000 [ 220.869149][ T28] audit: type=1326 audit(2000000693.797:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f127b86c819 code=0x7ffc0000 [ 220.893207][ T28] audit: type=1326 audit(2000000693.827:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127b86c819 code=0x7ffc0000 [ 220.896288][T15856] ext4 filesystem being mounted at /486/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.964237][T15872] batadv_slave_1: entered promiscuous mode [ 220.978786][T15871] batadv_slave_1: left promiscuous mode [ 220.996495][T15874] netlink: 'syz.7.4954': attribute type 13 has an invalid length. [ 221.016703][T15874] gretap0: refused to change device tx_queue_len [ 221.024492][T15874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 221.067527][ T9384] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.227808][T15886] loop7: detected capacity change from 0 to 1024 [ 221.261847][T15886] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 221.261847][T15886] [ 221.886003][T15931] netlink: 'syz.2.4979': attribute type 4 has an invalid length. [ 222.289078][T15966] loop7: detected capacity change from 0 to 2048 [ 222.338629][T15966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.369441][T15966] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 222.424311][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.699898][T16009] xt_hashlimit: size too large, truncated to 1048576 [ 223.054665][T16027] loop2: detected capacity change from 0 to 512 [ 223.071120][T16027] EXT4-fs: Ignoring removed nobh option [ 223.083897][T16027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.101331][T16027] EXT4-fs (loop2): 1 truncate cleaned up [ 223.128944][T16027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.165210][T10442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.185426][T16035] loop5: detected capacity change from 0 to 2048 [ 223.216695][T16035] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 223.236321][T16035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.266747][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.668840][T16064] loop2: detected capacity change from 0 to 4096 [ 223.686569][T16064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.734039][T10442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.841728][T16072] netlink: 'syz.2.5037': attribute type 1 has an invalid length. [ 223.906617][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5038'. [ 223.946146][T16076] bond_slave_0: entered promiscuous mode [ 223.952175][T16076] bond_slave_1: entered promiscuous mode [ 223.980123][T16076] macvlan0: entered promiscuous mode [ 223.985506][T16076] bond0: entered promiscuous mode [ 223.991973][T16076] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 224.219826][ T43] Bluetooth: hci0: sending frame failed (-49) [ 224.226916][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 224.428495][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 224.428512][ T28] audit: type=1400 audit(2000000697.417:1225): avc: denied { remove_name } for pid=16123 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=23513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.473818][ T28] audit: type=1400 audit(2000000697.457:1226): avc: denied { unlink } for pid=16123 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=23513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.643779][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5069'. [ 225.089420][ T28] audit: type=1400 audit(2000000698.077:1227): avc: denied { sys_module } for pid=16163 comm="syz.7.5073" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 225.312109][T16165] syzkaller1: entered promiscuous mode [ 225.320039][T16165] syzkaller1: entered allmulticast mode [ 225.420336][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5080'. [ 225.528691][T16200] Set syz1 is full, maxelem 1038 reached [ 225.583375][T16206] Invalid argument reading file caps for ./file0 [ 225.678258][ T28] audit: type=1400 audit(2000000698.667:1228): avc: denied { setopt } for pid=16211 comm="syz.7.5095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 225.736791][ T28] audit: type=1400 audit(2000000698.707:1229): avc: denied { getopt } for pid=16215 comm="syz.8.5097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.800677][T16219] netlink: 'syz.2.5098': attribute type 6 has an invalid length. [ 225.818392][ T28] audit: type=1400 audit(2000000698.797:1230): avc: denied { ioctl } for pid=16226 comm="syz.6.5102" path="socket:[46091]" dev="sockfs" ino=46091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.889648][T16233] netlink: 'syz.6.5105': attribute type 6 has an invalid length. [ 225.913159][T16233] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5105'. [ 225.975248][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5110'. [ 226.243926][ T28] audit: type=1400 audit(2000000699.227:1231): avc: denied { getopt } for pid=16269 comm="syz.7.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.270073][T16271] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 226.393222][T16285] loop2: detected capacity change from 0 to 512 [ 226.425965][T16285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.5128: bg 0: block 5: invalid block bitmap [ 226.493868][T16285] loop2: lost filesystem error report for type 5 error -117 [ 226.494134][T16285] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 226.510518][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 226.510541][ C1] EXT4-fs (loop2): initial error at time 2000000699: ext4_validate_block_bitmap:432 [ 226.510572][ C1] EXT4-fs (loop2): last error at time 2000000699: ext4_validate_block_bitmap:432 [ 226.567291][T16285] loop2: lost filesystem error report for type 5 error -117 [ 226.570939][T16285] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5128: invalid indirect mapped block 3 (level 2) [ 226.592827][T16285] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 226.601727][T16285] EXT4-fs (loop2): 1 orphan inode deleted [ 226.611197][T16275] loop7: detected capacity change from 0 to 32768 [ 226.619066][T16285] EXT4-fs (loop2): 1 truncate cleaned up [ 226.654043][T16285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.665495][ T8320] loop7: p1 p3 < > [ 226.676970][T16275] loop7: p1 p3 < > [ 226.844493][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5137'. [ 226.857736][ T8319] udevd[8319]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 226.869157][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 226.905260][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 226.924296][ T8319] udevd[8319]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 226.946231][T16321] loop7: detected capacity change from 0 to 512 [ 226.979305][T16321] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.993923][ T28] audit: type=1326 audit(2000000699.987:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.2.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa8e1c819 code=0x7ffc0000 [ 227.018006][ T28] audit: type=1326 audit(2000000699.987:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.2.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7faaa8e1c819 code=0x7ffc0000 [ 227.209327][T16332] sctp: [Deprecated]: syz.5.5146 (pid 16332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.209327][T16332] Use struct sctp_sack_info instead [ 227.271099][T16332] loop5: detected capacity change from 0 to 2048 [ 227.302609][T16338] loop7: detected capacity change from 0 to 128 [ 227.314285][T16332] loop5: p3 < > p4 < > [ 227.318894][T16332] loop5: partition table partially beyond EOD, truncated [ 227.336498][T16332] loop5: p3 start 4284289 is beyond EOD, truncated [ 227.346716][ T2999] loop5: p3 < > p4 < > [ 227.352908][ T28] audit: type=1400 audit(2000000700.327:1234): avc: denied { read } for pid=16339 comm="syz.8.5149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.372816][ T2999] loop5: partition table partially beyond EOD, truncated [ 227.390044][ T2999] loop5: p3 start 4284289 is beyond EOD, truncated [ 227.413389][T16343] bpf: Bad value for 'gid' [ 227.439286][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 227.499444][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 227.509464][T16352] loop5: detected capacity change from 0 to 2048 [ 227.555647][ T8320] loop5: p1 p2 p3 [ 227.560625][ T8320] loop5: p2 size 458752 extends beyond EOD, truncated [ 227.578300][ T8320] loop5: p3 start 65280 is beyond EOD, truncated [ 227.591824][T16352] loop5: p1 p2 p3 [ 227.607418][T16352] loop5: p2 size 458752 extends beyond EOD, truncated [ 227.615765][T16352] loop5: p3 start 65280 is beyond EOD, truncated [ 227.687716][ T8319] udevd[8319]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 227.687761][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 227.749305][ T8319] udevd[8319]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 227.760827][ T8320] udevd[8320]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 227.783887][T16372] bridge2: entered promiscuous mode [ 227.789208][T16372] bridge2: entered allmulticast mode [ 227.796458][T16372] team0: Port device bridge2 added [ 227.806884][T16372] bridge0: port 3(team0) entered blocking state [ 227.813519][T16372] bridge0: port 3(team0) entered disabled state [ 227.821377][T16372] team0: entered allmulticast mode [ 227.827201][T16372] team_slave_0: entered allmulticast mode [ 227.833066][T16372] team_slave_1: entered allmulticast mode [ 227.840566][T16372] team0: left allmulticast mode [ 227.846168][T16372] team_slave_0: left allmulticast mode [ 227.851929][T16372] team_slave_1: left allmulticast mode [ 227.997538][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5171'. [ 228.413473][T16421] openvswitch: netlink: Missing key (keys=40, expected=100) [ 228.497136][T16428] loop7: detected capacity change from 0 to 1024 [ 228.511963][T16428] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 228.539188][T16428] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 2: comm syz.7.5187: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.554268][T16428] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.554376][T16428] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 48: comm syz.7.5187: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.577620][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 228.577640][ C0] EXT4-fs (loop7): initial error at time 2000000701: ext4_map_blocks:786: inode 3: block 2 [ 228.577679][ C0] EXT4-fs (loop7): last error at time 2000000701: ext4_map_blocks:786: inode 3: block 2 [ 228.604936][T16428] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.605056][T16428] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.5187: Failed to acquire dquot type 0 [ 228.628203][T16428] loop7: lost filesystem error report for type 5 error -117 [ 228.629071][T16428] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 228.646396][T16428] loop7: lost filesystem error report for type 5 error -117 [ 228.646574][T16428] EXT4-fs error (device loop7): ext4_evict_inode:265: inode #11: comm syz.7.5187: mark_inode_dirty error [ 228.666553][T16428] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 228.666845][T16428] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 228.686679][T16428] EXT4-fs (loop7): 1 orphan inode deleted [ 228.703807][ T310] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.733382][ T310] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 0 [ 228.760238][T16437] IPv6: NLM_F_REPLACE set, but no existing node found! [ 228.838533][T13830] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 228.852735][T13830] loop7: lost filesystem error report for type 5 error -117 [ 228.852933][T13830] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 228.870871][T13830] loop7: lost filesystem error report for type 5 error -117 [ 228.871013][T13830] EXT4-fs error (device loop7): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 228.890677][T13830] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.902880][T16452] loop7: detected capacity change from 0 to 512 [ 228.940777][T16452] EXT4-fs: Ignoring removed orlov option [ 228.986163][T16452] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.014366][T16452] EXT4-fs: inline encryption not supported [ 229.037190][T16452] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.5197: corrupted in-inode xattr: e_value size too large [ 229.052200][T16452] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.063613][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 229.075032][T16452] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5197: couldn't read orphan inode 15 (err -117) [ 229.079316][ C0] EXT4-fs (loop7): initial error at time 2000000702: ext4_iget_extra_inode:5040: inode 15 [ 229.091828][T16452] loop7: lost filesystem error report for type 5 error -117 [ 229.101161][ C0] EXT4-fs (loop7): last error at time 2000000702: ext4_iget_extra_inode:5040: inode 15 [ 229.121137][T16471] loop8: detected capacity change from 0 to 512 [ 229.130785][T16471] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.147248][T16471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.167632][T16471] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.179581][T16479] loop5: detected capacity change from 0 to 1024 [ 229.228379][T16479] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.266020][T16479] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5216: bg 0: block 112: padding at end of block bitmap is not set [ 229.322950][T16479] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 229.361153][T16479] EXT4-fs (loop5): This should not happen!! Data will be lost [ 229.361153][T16479] [ 229.375370][T16479] EXT4-fs (loop5): Total free blocks count 0 [ 229.402403][T16479] EXT4-fs (loop5): Free/Dirty block details [ 229.431124][T16479] EXT4-fs (loop5): free_blocks=0 [ 229.436918][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 229.436934][ T28] audit: type=1400 audit(2000000702.427:1311): avc: denied { read } for pid=16495 comm="syz.8.5213" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.437800][T16479] EXT4-fs (loop5): dirty_blocks=64 [ 229.502649][ T28] audit: type=1400 audit(2000000702.487:1312): avc: denied { read write } for pid=16497 comm="syz.8.5214" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.526587][T16479] EXT4-fs (loop5): Block reservation details [ 229.532649][T16479] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 229.551283][ T28] audit: type=1400 audit(2000000702.487:1313): avc: denied { open } for pid=16497 comm="syz.8.5214" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.575657][ T9384] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 229.603784][ T28] audit: type=1400 audit(2000000702.487:1314): avc: denied { ioctl } for pid=16497 comm="syz.8.5214" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 229.663863][T16500] ISOFS: Unable to identify CD-ROM format. [ 229.782063][ T28] audit: type=1400 audit(2000000702.767:1315): avc: denied { setattr } for pid=16506 comm="syz.8.5220" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.859979][T16507] IPVS: You probably need to specify IP address on multicast interface. [ 229.868926][T16507] IPVS: Error connecting to the multicast addr [ 229.885559][T16516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=16516 comm=syz.2.5222 [ 229.926321][ T28] audit: type=1400 audit(2000000702.907:1316): avc: denied { write } for pid=16517 comm="syz.8.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.016816][ T28] audit: type=1400 audit(2000000703.007:1317): avc: denied { mounton } for pid=16519 comm="syz.8.5224" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 230.056716][ T28] audit: type=1400 audit(2000000703.007:1318): avc: denied { mount } for pid=16519 comm="syz.8.5224" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 230.104709][T16524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 230.112774][T16524] System zones: 1-3, 19-19, 35-36 [ 230.183868][T16524] ext4 filesystem being mounted at /542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.334960][ T28] audit: type=1400 audit(2000000703.317:1319): avc: denied { map } for pid=16528 comm="syz.6.5227" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 230.380302][T16523] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 230.416202][ T28] audit: type=1400 audit(2000000703.317:1320): avc: denied { read write } for pid=16528 comm="syz.6.5227" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 230.495813][T16541] EXT4-fs: Ignoring removed orlov option [ 230.511001][T16541] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.523120][T16541] EXT4-fs: inline encryption not supported [ 230.564585][T16541] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.5232: corrupted in-inode xattr: e_value size too large [ 230.592389][T16541] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 230.593612][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 230.601529][T16541] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5232: couldn't read orphan inode 15 (err -117) [ 230.602776][ C1] EXT4-fs (loop2): initial error at time 2000000703: ext4_iget_extra_inode:5040: inode 15 [ 230.631217][ C1] EXT4-fs (loop2): last error at time 2000000703: ext4_iget_extra_inode:5040: inode 15 [ 230.639091][T16541] loop2: lost filesystem error report for type 5 error -117 [ 230.691497][T16554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.748961][T16561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.771557][T16565] IPv6: Can't replace route, no match found [ 230.787661][T16554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.898348][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 230.956022][T16582] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.097007][T16589] syzkaller1: entered promiscuous mode [ 231.102885][T16589] syzkaller1: entered allmulticast mode [ 231.206103][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5256'. [ 231.219211][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5256'. [ 231.262847][T16605] IPv6: NLM_F_REPLACE set, but no existing node found! [ 231.328009][T16612] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5263'. [ 231.363557][T16615] EXT4-fs: Ignoring removed oldalloc option [ 231.375255][T16615] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5264: invalid indirect mapped block 4294967295 (level 1) [ 231.389644][T16615] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.391812][T16615] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5264: invalid indirect mapped block 4294967295 (level 1) [ 231.393645][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 231.401158][T16615] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.415266][ C1] EXT4-fs (loop8): initial error at time 2000000704: ext4_free_branches:1023: inode 11 [ 231.437968][T16615] EXT4-fs (loop8): 2 truncates cleaned up [ 231.440895][ C1] EXT4-fs (loop8): last error at time 2000000704: ext4_free_branches:1023: inode 11 [ 231.469372][T16615] EXT4-fs error (device loop8): ext4_check_dx_root:2201: inode #2: comm syz.8.5264: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 231.903409][T16648] set_capacity_and_notify: 6 callbacks suppressed [ 231.903462][T16648] loop8: detected capacity change from 0 to 512 [ 231.929244][T16648] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 231.960219][T16648] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 231.975282][T16648] EXT4-fs (loop8): 1 truncate cleaned up [ 231.983606][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 231.990046][ C0] EXT4-fs (loop8): initial error at time 2000000704: ext4_mb_generate_buddy:1317 [ 231.999313][ C0] EXT4-fs (loop8): last error at time 2000000704: ext4_mb_generate_buddy:1317 [ 232.233255][T16667] loop8: detected capacity change from 0 to 1024 [ 232.502968][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5292'. [ 232.572744][T16688] ip6gretap0: entered promiscuous mode [ 232.581704][T16688] macvtap1: entered promiscuous mode [ 232.587676][T16688] macvtap1: entered allmulticast mode [ 232.593476][T16688] ip6gretap0: entered allmulticast mode [ 232.601434][T16688] ip6gretap0: left allmulticast mode [ 232.607295][T16688] ip6gretap0: left promiscuous mode [ 232.617217][T16690] netem: incorrect gi model size [ 232.622699][T16690] netem: change failed [ 232.661579][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5296'. [ 232.676150][T16695] ip6erspan0: entered allmulticast mode [ 232.706378][T16694] gtp0: entered promiscuous mode [ 232.731989][T16694] gtp0: entered allmulticast mode [ 232.856675][T16710] loop8: detected capacity change from 0 to 256 [ 232.912210][T16710] FAT-fs (loop8): Directory bread(block 64) failed [ 232.924889][T16710] FAT-fs (loop8): Directory bread(block 65) failed [ 232.943705][ T3700] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 232.949943][T16103] Bluetooth: hci0: command 0x1003 tx timeout [ 232.956202][T16710] FAT-fs (loop8): Directory bread(block 66) failed [ 232.962986][T16579] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.979360][T16710] FAT-fs (loop8): Directory bread(block 67) failed [ 232.996305][T16710] FAT-fs (loop8): Directory bread(block 68) failed [ 233.006268][T16710] FAT-fs (loop8): Directory bread(block 69) failed [ 233.024086][T16710] FAT-fs (loop8): Directory bread(block 70) failed [ 233.030709][T16710] FAT-fs (loop8): Directory bread(block 71) failed [ 233.030877][T16714] loop7: detected capacity change from 0 to 512 [ 233.040200][T16710] FAT-fs (loop8): Directory bread(block 72) failed [ 233.050587][T16710] FAT-fs (loop8): Directory bread(block 73) failed [ 233.201969][T16722] xt_hashlimit: size too large, truncated to 1048576 [ 233.244680][T13830] EXT4-fs unmount: 26 callbacks suppressed [ 233.244701][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.576793][ T3400] IPVS: starting estimator thread 0... [ 233.693702][T16742] IPVS: using max 2592 ests per chain, 129600 per kthread [ 234.465319][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 234.465335][ T28] audit: type=1400 audit(2000000707.457:1398): avc: denied { name_bind } for pid=16791 comm="syz.6.5338" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 234.578969][ T28] audit: type=1400 audit(2000000707.567:1399): avc: denied { read } for pid=16799 comm="syz.8.5342" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 234.605719][ T28] audit: type=1400 audit(2000000707.567:1400): avc: denied { open } for pid=16799 comm="syz.8.5342" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 234.632336][ T28] audit: type=1400 audit(2000000707.567:1401): avc: denied { ioctl } for pid=16799 comm="syz.8.5342" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 234.707284][T16806] loop8: detected capacity change from 0 to 2048 [ 234.768635][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5350'. [ 234.782287][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5350'. [ 234.800274][ T28] audit: type=1400 audit(2000000707.787:1402): avc: denied { getopt } for pid=16819 comm="syz.6.5351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.802538][T16806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.833839][T16806] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.866740][T16828] Invalid argument reading file caps for ./file0 [ 234.878245][ T28] audit: type=1400 audit(2000000707.857:1403): avc: denied { execute } for pid=16827 comm="syz.2.5354" name="file0" dev="tmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.951132][ T28] audit: type=1400 audit(2000000707.857:1404): avc: denied { execute_no_trans } for pid=16827 comm="syz.2.5354" path="/562/file0" dev="tmpfs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.229024][T16860] netlink: 'syz.6.5365': attribute type 1 has an invalid length. [ 235.364299][T16868] serio: Serial port ttyS3 [ 235.373309][T16871] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5373'. [ 235.438189][T16876] loop7: detected capacity change from 0 to 1024 [ 235.456924][T16878] loop5: detected capacity change from 0 to 512 [ 235.461437][T16876] EXT4-fs: Ignoring removed orlov option [ 235.479731][T16878] EXT4-fs: Mount option(s) incompatible with ext2 [ 235.501201][ T28] audit: type=1400 audit(2000000708.487:1405): avc: denied { create } for pid=16881 comm="syz.6.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.544887][T16876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.552822][ T28] audit: type=1400 audit(2000000708.527:1406): avc: denied { write } for pid=16881 comm="syz.6.5377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.657933][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.711115][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.756979][ T28] audit: type=1400 audit(2000000708.727:1407): avc: denied { ioctl } for pid=16894 comm="syz.7.5379" path="socket:[46976]" dev="sockfs" ino=46976 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.875358][T16907] loop5: detected capacity change from 0 to 164 [ 236.273600][T16934] ip6gretap0: entered promiscuous mode [ 236.279461][T16934] macvtap1: entered promiscuous mode [ 236.285124][T16934] macvtap1: entered allmulticast mode [ 236.290819][T16934] ip6gretap0: entered allmulticast mode [ 236.299165][T16934] ip6gretap0: left allmulticast mode [ 236.304960][T16934] ip6gretap0: left promiscuous mode [ 236.330184][T16926] Process accounting resumed [ 237.249785][T16985] bridge0: entered promiscuous mode [ 237.379215][T16999] loop5: detected capacity change from 0 to 1024 [ 237.398304][T16999] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 237.398304][T16999] [ 237.482154][T17004] loop5: detected capacity change from 0 to 2048 [ 237.511603][T17004] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 237.541243][T17004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.563281][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5427'. [ 237.586132][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'. [ 237.731773][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.074659][T17031] loop5: detected capacity change from 0 to 512 [ 238.105262][T17031] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.5437: corrupted in-inode xattr: invalid size in ea xattr [ 238.133697][T17031] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.143646][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 238.160337][ C0] EXT4-fs (loop5): initial error at time 2000000711: ext4_iget_extra_inode:5040: inode 15 [ 238.170436][ C0] EXT4-fs (loop5): last error at time 2000000711: ext4_iget_extra_inode:5040: inode 15 [ 238.170925][T17036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5439'. [ 238.181407][T17031] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5437: couldn't read orphan inode 15 (err -117) [ 238.202220][T17031] loop5: lost filesystem error report for type 5 error -117 [ 238.214104][T17031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.271110][T17031] EXT4-fs (loop5): shut down requested (1) [ 238.325736][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.418426][T17043] loop2: detected capacity change from 0 to 2048 [ 238.435846][T17043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.456370][T17043] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.709523][T10442] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.838266][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5455'. [ 238.847587][T17074] tipc: Cannot configure node identity twice [ 239.348361][ T3387] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 239.356411][ T3387] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.475910][ T28] kauditd_printk_skb: 520 callbacks suppressed [ 239.475929][ T28] audit: type=1400 audit(2000000712.467:1928): avc: denied { write } for pid=17091 comm="syz.5.5463" name="hidraw0" dev="devtmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 239.535518][T17102] loop8: detected capacity change from 0 to 1024 [ 239.543897][T17102] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 239.543897][T17102] [ 239.617446][ T28] audit: type=1400 audit(2000000712.607:1929): avc: denied { create } for pid=17107 comm="syz.8.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.653350][T17110] loop5: detected capacity change from 0 to 512 [ 239.662667][T17110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.676229][ T28] audit: type=1400 audit(2000000712.607:1930): avc: denied { bind } for pid=17107 comm="syz.8.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.700527][T17110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 239.709411][T17110] EXT4-fs (loop5): orphan cleanup on readonly fs [ 239.718545][T17110] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 239.736480][T17110] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 239.745810][T17110] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.5470: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 239.764554][T17117] loop7: detected capacity change from 0 to 1024 [ 239.771673][T17110] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 239.772140][T17110] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5470: couldn't read orphan inode 13 (err -117) [ 239.781726][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 239.781750][ C0] EXT4-fs (loop5): last error at time 2000000712: ext4_ext_check_inode:521: inode 13 [ 239.809838][T17110] loop5: lost filesystem error report for type 5 error -117 [ 239.812720][T17110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.834095][T17117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.847431][T17110] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 239.867172][T17110] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 239.884916][T13830] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.904878][T17110] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 239.950653][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.077369][T17138] loop5: detected capacity change from 0 to 2048 [ 240.098305][T17140] loop8: detected capacity change from 0 to 512 [ 240.132029][T17138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.154689][T17140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.178813][T17140] ext4 filesystem being mounted at /378/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.235528][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.251280][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.454675][ T28] audit: type=1400 audit(2000000713.447:1931): avc: denied { read write } for pid=17167 comm="syz.2.5492" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.525462][ T28] audit: type=1400 audit(2000000713.447:1932): avc: denied { open } for pid=17167 comm="syz.2.5492" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.550247][ T28] audit: type=1400 audit(2000000713.467:1933): avc: denied { create } for pid=17167 comm="syz.2.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 240.689150][T17181] loop7: detected capacity change from 0 to 512 [ 240.931003][T17189] EXT4-fs: Ignoring removed oldalloc option [ 240.942297][T17189] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5502: invalid indirect mapped block 4294967295 (level 1) [ 240.961025][T17189] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.963661][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 240.979241][ C0] EXT4-fs (loop8): initial error at time 2000000713: ext4_free_branches:1023: inode 11 [ 240.989021][ C0] EXT4-fs (loop8): last error at time 2000000713: ext4_free_branches:1023: inode 11 [ 240.995446][T17189] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5502: invalid indirect mapped block 4294967295 (level 1) [ 241.031433][T17195] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5504'. [ 241.040591][T17189] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.040922][T17189] EXT4-fs (loop8): 2 truncates cleaned up [ 241.050739][ T28] audit: type=1400 audit(2000000714.017:1934): avc: denied { create } for pid=17192 comm="syz.6.5503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 241.059497][T17189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.101426][ T28] audit: type=1400 audit(2000000714.037:1935): avc: denied { write } for pid=17192 comm="syz.6.5503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 241.152251][ T28] audit: type=1400 audit(2000000714.137:1936): avc: denied { create } for pid=17188 comm="syz.8.5502" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.198374][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.199187][ T28] audit: type=1400 audit(2000000714.187:1937): avc: denied { accept } for pid=17197 comm="syz.7.5515" lport=44830 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.356544][T17209] syz.5.5511: attempt to access beyond end of device [ 241.356544][T17209] loop5: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 241.405471][T17223] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5518'. [ 241.408004][T17209] syz.5.5511: attempt to access beyond end of device [ 241.408004][T17209] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 241.539708][ T57] kworker/u8:4: attempt to access beyond end of device [ 241.539708][ T57] loop5: rw=1, sector=138, nr_sectors = 2 limit=128 [ 241.569330][T17239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.596624][T17239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.743676][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.153252][T17285] netlink: 35284 bytes leftover after parsing attributes in process `syz.7.5545'. [ 242.170532][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5545'. [ 242.201902][T17287] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5546'. [ 242.363746][T17293] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.408358][T17298] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5550'. [ 242.688746][T17318] xt_HMARK: proto mask must be zero with L3 mode [ 242.794683][T17275] syz.5.5541 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 242.807401][T17275] CPU: 0 UID: 0 PID: 17275 Comm: syz.5.5541 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.807436][T17275] Tainted: [W]=WARN [ 242.807444][T17275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.807458][T17275] Call Trace: [ 242.807519][T17275] [ 242.807529][T17275] __dump_stack+0x1d/0x30 [ 242.807558][T17275] dump_stack_lvl+0x95/0xd0 [ 242.807583][T17275] dump_stack+0x15/0x1b [ 242.807725][T17275] dump_header+0x80/0x240 [ 242.807801][T17275] oom_kill_process+0x295/0x350 [ 242.807826][T17275] out_of_memory+0x97d/0xb80 [ 242.807885][T17275] try_charge_memcg+0x62e/0xa10 [ 242.807991][T17275] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 242.808025][T17275] __swap_cache_prepare_and_add+0x67/0x460 [ 242.808057][T17275] ? alloc_pages_mpol+0x217/0x260 [ 242.808136][T17275] swap_cache_alloc_folio+0xa2/0x120 [ 242.808167][T17275] swap_cluster_readahead+0x36b/0x3d0 [ 242.808231][T17275] swapin_readahead+0xde/0x840 [ 242.808261][T17275] ? _raw_spin_unlock+0x9/0x30 [ 242.808300][T17275] ? swap_put_entries_cluster+0x385/0x3a0 [ 242.808358][T17275] ? swap_put_entries_cluster+0x71/0x3a0 [ 242.808389][T17275] ? __rcu_read_unlock+0x4e/0x70 [ 242.808412][T17275] ? swap_cache_get_folio+0x26f/0x280 [ 242.808442][T17275] do_swap_page+0x2fe/0x21e0 [ 242.808481][T17275] ? css_rstat_updated+0xbb/0x280 [ 242.808525][T17275] ? __rcu_read_lock+0x36/0x50 [ 242.808544][T17275] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 242.808570][T17275] handle_mm_fault+0xb46/0x3020 [ 242.808668][T17275] ? vma_start_read+0x1c7/0x2c0 [ 242.808696][T17275] do_user_addr_fault+0x62f/0x1050 [ 242.808810][T17275] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 242.808837][T17275] ? trace_page_fault_user+0x1f/0xe0 [ 242.808868][T17275] exc_page_fault+0x62/0xa0 [ 242.808891][T17275] asm_exc_page_fault+0x26/0x30 [ 242.808992][T17275] RIP: 0033:0x7fbdab64d336 [ 242.809012][T17275] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 242.809108][T17275] RSP: 002b:00007ffddfbc1120 EFLAGS: 00010246 [ 242.809125][T17275] RAX: 000000000003b3f4 RBX: 00007fbdab8c5fa0 RCX: 000000000003b150 [ 242.809149][T17275] RDX: 00000000000002a4 RSI: 0000000000000000 RDI: 00000000000003e8 [ 242.809161][T17275] RBP: 00007fbdab8c7da0 R08: 00000000284befbd R09: 7fffffffffffffff [ 242.809174][T17275] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000003b476 [ 242.809229][T17275] R13: 00007fbdab8c609c R14: 000000000003b19e R15: 00007ffddfbc1250 [ 242.809252][T17275] [ 242.809348][T17275] memory: usage 307200kB, limit 307200kB, failcnt 297 [ 242.971350][T17344] set_capacity_and_notify: 3 callbacks suppressed [ 242.971369][T17344] loop8: detected capacity change from 0 to 256 [ 242.975381][T17275] memory+swap: usage 307812kB, limit 9007199254740988kB, failcnt 0 [ 242.983215][T17344] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.984372][T17275] kmem: usage 298996kB, limit 9007199254740988kB, failcnt 0 [ 243.109806][T17275] Memory cgroup stats for /syz5: [ 243.110044][T17275] cache 0 [ 243.117985][T17275] rss 8388608 [ 243.121382][T17275] shmem 0 [ 243.124403][T17275] mapped_file 0 [ 243.128096][T17275] dirty 0 [ 243.131041][T17275] writeback 0 [ 243.143924][T17275] workingset_refault_anon 40 [ 243.148191][T17352] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5575'. [ 243.167933][T17275] workingset_refault_file 0 [ 243.172510][T17275] swap 626688 [ 243.180217][T17275] swapcached 17563648 [ 243.185408][T17275] pgpgin 156245 [ 243.188951][T17275] pgpgout 154194 [ 243.192634][T17275] pgfault 242660 [ 243.196689][T17275] pgmajfault 25 [ 243.200204][T17275] inactive_anon 0 [ 243.204197][T17275] active_anon 0 [ 243.207793][T17275] inactive_file 12288 [ 243.211896][T17275] active_file 0 [ 243.217640][T17275] unevictable 8388608 [ 243.221736][T17275] hierarchical_memory_limit 314572800 [ 243.227729][T17275] hierarchical_memsw_limit 9223372036854771712 [ 243.234812][T17275] total_cache 0 [ 243.238349][T17275] total_rss 8388608 [ 243.242213][T17275] total_shmem 0 [ 243.246080][T17275] total_mapped_file 0 [ 243.250233][T17275] total_dirty 0 [ 243.253935][T17275] total_writeback 0 [ 243.257935][T17275] total_workingset_refault_anon 40 [ 243.263166][T17275] total_workingset_refault_file 0 [ 243.270686][T17275] total_swap 626688 [ 243.288073][T17275] total_swapcached 17563648 [ 243.292866][T17275] total_pgpgin 156245 [ 243.297313][T17275] total_pgpgout 154194 [ 243.301419][T17275] total_pgfault 242660 [ 243.307067][T17275] total_pgmajfault 25 [ 243.312008][T17275] total_inactive_anon 0 [ 243.331668][T17275] total_active_anon 0 [ 243.343653][T17275] total_inactive_file 12288 [ 243.348498][T17275] total_active_file 0 [ 243.352646][T17275] total_unevictable 8388608 [ 243.363862][T17275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5541,pid=17275,uid=0 [ 243.385396][T17275] Memory cgroup out of memory: Killed process 17275 (syz.5.5541) total-vm:96212kB, anon-rss:9416kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 243.591823][T17372] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.5585'. [ 243.631813][T17376] Invalid argument reading file caps for ./file0 [ 243.921510][T17397] loop5: detected capacity change from 0 to 1024 [ 243.935903][T17397] EXT4-fs: Ignoring removed nobh option [ 243.944924][T17397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.983331][T17397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.052518][T17397] EXT4-fs (loop5): shut down requested (2) [ 244.129576][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.190504][T17412] loop7: detected capacity change from 0 to 512 [ 244.201221][T17412] EXT4-fs: Ignoring removed bh option [ 244.211515][T17412] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.240167][T17417] loop2: detected capacity change from 0 to 1764 [ 244.324369][T17412] EXT4-fs (loop7): can't mount with commit=, fs mounted w/o journal [ 244.478025][T17432] loop2: detected capacity change from 0 to 256 [ 244.598227][T17440] netlink: 'syz.7.5614': attribute type 3 has an invalid length. [ 244.681400][T17444] pimreg: entered allmulticast mode [ 244.722058][T17444] pimreg: left allmulticast mode [ 244.739003][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 244.739022][ T28] audit: type=1400 audit(2000000717.727:1959): avc: denied { shutdown } for pid=17452 comm="syz.8.5618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.782182][ T28] audit: type=1400 audit(2000000717.757:1960): avc: denied { bind } for pid=17453 comm="syz.6.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.854017][T17467] loop5: detected capacity change from 0 to 764 [ 244.864434][ T28] audit: type=1400 audit(2000000717.807:1961): avc: denied { bind } for pid=17460 comm="syz.5.5624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.949939][ T28] audit: type=1400 audit(2000000717.837:1962): avc: denied { create } for pid=17466 comm="syz.6.5627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.971765][T17482] loop7: detected capacity change from 0 to 7 [ 244.999005][ T28] audit: type=1400 audit(2000000717.847:1963): avc: denied { write } for pid=17464 comm="syz.5.5626" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.054929][ T28] audit: type=1400 audit(2000000717.937:1964): avc: denied { bind } for pid=17477 comm="syz.2.5632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.129141][T17486] loop8: detected capacity change from 0 to 1024 [ 245.175398][T17496] ip6erspan0: entered allmulticast mode [ 245.243384][T17486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 245.344345][T17486] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.359949][T17486] EXT4-fs error (device loop8): ext4_map_blocks:828: inode #15: comm syz.8.5634: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.374698][T17486] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 245.423712][T17486] EXT4-fs (loop8): This should not happen!! Data will be lost [ 245.423712][T17486] [ 245.472035][T17522] loop5: detected capacity change from 0 to 8192 [ 245.509282][T12079] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 245.542359][T12079] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.705706][T17536] loop7: detected capacity change from 0 to 256 [ 245.712432][T17536] vfat: Unknown parameter 'mixed' [ 245.853894][T17547] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 245.853894][T17547] [ 245.870111][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5662'. [ 245.896273][ T28] audit: type=1400 audit(2000000718.887:1965): avc: denied { create } for pid=17548 comm="syz.2.5673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.196539][ T9384] ================================================================== [ 246.204679][ T9384] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 246.212179][ T9384] [ 246.214538][ T9384] read-write to 0xffff8881004ae6c0 of 8 bytes by interrupt on cpu 1: [ 246.222651][ T9384] __xa_clear_mark+0xf5/0x1e0 [ 246.227370][ T9384] __folio_end_writeback+0xf4/0x360 [ 246.232856][ T9384] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 246.239216][ T9384] folio_end_writeback+0x1c/0x70 [ 246.244348][ T9384] mpage_write_end_io+0x270/0x630 [ 246.249425][ T9384] bio_endio+0x38a/0x420 [ 246.253684][ T9384] blk_update_request+0x338/0x740 [ 246.258757][ T9384] blk_mq_end_request+0x26/0x50 [ 246.263715][ T9384] lo_complete_rq+0x98/0x140 [ 246.268351][ T9384] blk_done_softirq+0x77/0xb0 [ 246.273068][ T9384] handle_softirqs+0xb9/0x2a0 [ 246.277868][ T9384] run_ksoftirqd+0x1c/0x30 [ 246.282749][ T9384] smpboot_thread_fn+0x32a/0x510 [ 246.287880][ T9384] kthread+0x22a/0x280 [ 246.292232][ T9384] ret_from_fork+0x150/0x360 [ 246.296862][ T9384] ret_from_fork_asm+0x1a/0x30 [ 246.301756][ T9384] [ 246.304184][ T9384] read to 0xffff8881004ae6c0 of 8 bytes by task 9384 on cpu 0: [ 246.311862][ T9384] xas_find_marked+0x213/0x620 [ 246.316657][ T9384] filemap_get_folios_tag+0xfa/0x510 [ 246.321959][ T9384] filemap_fdatawait_keep_errors+0x6c/0x190 [ 246.327958][ T9384] sync_inodes_sb+0x424/0x4d0 [ 246.332651][ T9384] sync_filesystem+0x102/0x190 [ 246.337432][ T9384] generic_shutdown_super+0x4c/0x220 [ 246.342733][ T9384] kill_block_super+0x2a/0x70 [ 246.347413][ T9384] deactivate_locked_super+0x75/0x1c0 [ 246.353094][ T9384] deactivate_super+0x97/0xa0 [ 246.358509][ T9384] cleanup_mnt+0x2bb/0x330 [ 246.363009][ T9384] __cleanup_mnt+0x19/0x20 [ 246.367465][ T9384] task_work_run+0x130/0x1a0 [ 246.372177][ T9384] exit_to_user_mode_loop+0x1f4/0x6f0 [ 246.377583][ T9384] do_syscall_64+0x249/0x370 [ 246.382224][ T9384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.388358][ T9384] [ 246.390701][ T9384] value changed: 0xffffffffff000000 -> 0xffffffffe0000000 [ 246.398178][ T9384] [ 246.400602][ T9384] Reported by Kernel Concurrency Sanitizer on: [ 246.406964][ T9384] CPU: 0 UID: 0 PID: 9384 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 246.418107][ T9384] Tainted: [W]=WARN [ 246.421921][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.432344][ T9384] ================================================================== [ 246.566019][T17559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.579774][T17559] ext4 filesystem being mounted at /606/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.776078][ T9384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.