last executing test programs: 4m11.872994322s ago: executing program 32 (id=25): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)={0x1c, r1, 0x301, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) 3m3.159789944s ago: executing program 33 (id=2589): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xd) 2m57.108026783s ago: executing program 34 (id=2741): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0xad05725454c62502, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x5b, 0xffff000000000000}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 2m37.754066248s ago: executing program 35 (id=2827): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000040)=0x18) 2m37.406749235s ago: executing program 36 (id=2839): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) write$cgroup_int(r0, &(0x7f0000000000)=0x2, 0x12) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) 2m23.638994557s ago: executing program 5 (id=3261): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x240401) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x80085502, &(0x7f0000000100)=0xb) 2m22.852679246s ago: executing program 5 (id=3267): r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e22, 0xfffe, 0xa, 0x0, 0x0, 0x6c}, {0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x10000010, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2m22.596893689s ago: executing program 5 (id=3272): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(0x3) 2m22.235782897s ago: executing program 5 (id=3281): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) setreuid(0xee01, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 2m22.109445933s ago: executing program 5 (id=3288): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m22.029288668s ago: executing program 5 (id=3291): unshare(0x2c020400) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) 2m11.220066928s ago: executing program 37 (id=3178): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x80}], 0x1, 0x10022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 2m8.18961091s ago: executing program 0 (id=3340): openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 2m8.130791402s ago: executing program 0 (id=3341): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 2m8.113474563s ago: executing program 0 (id=3342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m8.088002725s ago: executing program 0 (id=3343): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000280)) 2m8.059415956s ago: executing program 0 (id=3344): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x17d) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x201) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 2m7.998252999s ago: executing program 0 (id=3346): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'gretap0\x00', @random="000000001300"}) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 2m6.961488611s ago: executing program 38 (id=3291): unshare(0x2c020400) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) 1m52.710975883s ago: executing program 39 (id=3346): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'gretap0\x00', @random="000000001300"}) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 1m49.052438517s ago: executing program 3 (id=3660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) close(0x3) 1m48.794737189s ago: executing program 3 (id=3671): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) personality(0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 1m48.719570513s ago: executing program 3 (id=3675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m48.635729827s ago: executing program 3 (id=3679): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 1m48.547995992s ago: executing program 3 (id=3681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x2e73) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 1m48.327988183s ago: executing program 3 (id=3685): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001000030428bd70020000000000100000", @ANYRES32=0x0, @ANYBLOB="00000000010000008800128009000100766c616e0000000078000280640004800c000100008000007f0000000c000100f5000000020000000c00010001040000030000000c00010000000000800000000c000100b1a4ffff010000000c0001001ef0ffff070000000c00010006090000000000000c000100001000000700000006000100fc0f00000600050088a800000800", @ANYRES32=r2], 0xb8}}, 0x40488c4) 1m48.321973323s ago: executing program 40 (id=3685): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001000030428bd70020000000000100000", @ANYRES32=0x0, @ANYBLOB="00000000010000008800128009000100766c616e0000000078000280640004800c000100008000007f0000000c000100f5000000020000000c00010001040000030000000c00010000000000800000000c000100b1a4ffff010000000c0001001ef0ffff070000000c00010006090000000000000c000100001000000700000006000100fc0f00000600050088a800000800", @ANYRES32=r2], 0xb8}}, 0x40488c4) 1m33.555897421s ago: executing program 1 (id=4077): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xfffffffd, 0x2000000b, 0xf, 0x3, 0x14, "43db4c9554938a92b052134851317440023bd9"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) 1m33.476133475s ago: executing program 1 (id=4080): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1m33.404130409s ago: executing program 1 (id=4082): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)) 1m33.395255899s ago: executing program 1 (id=4084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0xb1d, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x48850) 1m33.359978731s ago: executing program 1 (id=4085): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m33.324163163s ago: executing program 1 (id=4086): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 1m17.668925196s ago: executing program 41 (id=4086): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 7.127523123s ago: executing program 6 (id=6033): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 7.036004878s ago: executing program 6 (id=6037): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 6.152156392s ago: executing program 6 (id=6066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x8864}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 5.978668811s ago: executing program 6 (id=6060): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 5.822615678s ago: executing program 6 (id=6063): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) rmdir(&(0x7f0000000080)='./bus\x00') 5.599940629s ago: executing program 6 (id=6076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newqdisc={0x64, 0x24, 0xf0b, 0x60bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0x0, 0x4, 0xd6da9e249b3a893}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x6, 0x6c, 0xf, 0xba}, {0x6, 0x1, 0xb, 0x4, 0x5619, 0x2999}, 0x6, 0x1, 0x168b}}]}}]}, 0x64}}, 0x4000010) 5.57936123s ago: executing program 42 (id=6076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newqdisc={0x64, 0x24, 0xf0b, 0x60bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0x0, 0x4, 0xd6da9e249b3a893}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x6, 0x6c, 0xf, 0xba}, {0x6, 0x1, 0xb, 0x4, 0x5619, 0x2999}, 0x6, 0x1, 0x168b}}]}}]}, 0x64}}, 0x4000010) 1.679869016s ago: executing program 4 (id=6161): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x81, 0x4, 0x7ffe, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) 1.673783236s ago: executing program 4 (id=6163): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x64, 0x183000, 0x12345, {0x0, r3}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.618559549s ago: executing program 4 (id=6164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x7, "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", 0x0, 0x6, 0x7, 0x8, 0xb9, 0x8, 0x4}}}, 0x120) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.59955979s ago: executing program 4 (id=6165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.505485314s ago: executing program 4 (id=6166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 1.489324065s ago: executing program 4 (id=6168): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)) 988.81622ms ago: executing program 8 (id=6177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4040810) 960.348961ms ago: executing program 8 (id=6179): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 942.806542ms ago: executing program 8 (id=6180): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c1c99, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 928.621583ms ago: executing program 8 (id=6181): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000000)=[{r1}, {r1, 0xc312}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 848.434257ms ago: executing program 8 (id=6185): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x120c042, &(0x7f0000000180)={[{@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@grpquota}, {@debug}, {}, {@nodiscard}, {@noauto_da_alloc}]}, 0x1, 0x5fd, &(0x7f00000005c0)="$eJzs3c9vVNUeAPDvnf6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oLIAA2t0aIJJcGNiboxxsSlEf8LJbJlpSsXblwZEqKGpQlj7vROO23vDHT64zbczyeZ9t5z5s45t9PvnDNnzrkTQGkNpz8qEfsjYiaJGEwWlvK6I8scXrzfg78+OpvekqjVXvsjiSRLa9w/yX4PZAf3RcRPPyaxr2ttubPz1y5OVqvTV7P90blLM6Oz89cOX7g0eX76/PTl8RfGTxw/dvzE2MGOzut6Ttrpm+++P/jJxJvffv13MvbdrxNJnIyXszs2n8dmGY7h+t8kWZs1cGKzCytIV/Z/0vwUJ90FVoh1aTx/PRHxvxiMrlh+8gbj41cKrRywpWpJRA0oqUT8Q0k1+gGN9/ar3wdXCumVANvh/qnFAYC18d+9ODYYffWxgd0Pkmge1kki4sgmlL8nIu7embh57s7EzdiicTgg38KNiPh/Xvwn9fgfir4Yqsd/ZUX8p/2CM9nvNP3VDstfPVQs/mH7LMZ/X9v4jxbx/1ZT/L/dYfnDy5vv9K+I//5OTwkAAAAAAABK6/apiHg+7/P/ytL8n8iZ/zMQESc3ofzhVftrP/+v3NuEYoAc909FvNQ8/zcqS/Gfzf4d6sq2/lWfD9CTnLtQnT4SEf+OiEPRsyvdH2tTxuFP933VKm84m//XuKV1uJvNBczqca9718pjpibnJjd63kDE/RsRT+XO/02W2v8kp/1PXw9m2jxu83rwfc/eOtPqfo+O/1TvN52dHdBOLVmIg7nrf5avWpG0vT7HkdF6f2C00StY6+kPP/++VfmPF/9rucQEbFza/u9uH/9DSfP1embXX8bR+e5aq7xO+/+9yev1LkZvlvbB5Nzc1bGI3uR0V5q6In18/XWGJ07Pcjw04iWN/0PPtB//y+v/90fEwqqHT/5cuaa44b8PB35rVaVO239g49L4n1pX+7/+jfFbQz+0Kv/x2v9j9bb+UJZi/A8WfdkI096V6Tnh2J2Xtd31BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQSUi9kRSGVnarlRGRiIGIuI/sbtSvTI799y5K+9dnkrz6t//X2l80+/g4n7S+P7/oab98VX7RyNib0R80dVf3x85e6U6VfTJAwAAAAAAAAAAAAAAAAAAwA4x0GL9f+r3rqJrB2y57qIrABQmJ/5/LqIewPbT/kN5iX8oL/EP5SX+obzEP5SX+IfyEv9QXp3Ev7mBAAAAAACwY+09cPuXJCIWXuyv31K9WV5PoTUDtlql6AoAhfExPpSXqX9QXt7jA8kj8vtaHvSoI9uZObuBgwEAAAAAAAAAAACgdA7ut/4fysr6fygv6/+hvBrr/w8UXA9g+3mPD0TOSv7m14bc9f+5RwEAAAAAAAAAAAAAW2V2/trFyWp1+qqNN3ZGNbZzo1arXU//C4qqRs8mPc5nD2u1wv+Y1enGVPid8eSu2Wis9Xu8o4p7TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFb6JwAA//+3OCUv") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 762.228452ms ago: executing program 8 (id=6187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xffff, 0x992f}, 0x90) 578.678981ms ago: executing program 9 (id=6195): pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000700)=0xe) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000740)={0x800001, 0xffffffff, 0x4e8, 0x3, 0x1, "f4951600"}) 505.243584ms ago: executing program 9 (id=6197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0xffffffff, 0x80003}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x4}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf27036ee63460ac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0xc000) 499.696155ms ago: executing program 2 (id=6198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0xf5}, @val={0x0, 0x0, 0x6, 0xffff, 0x18}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) 478.966836ms ago: executing program 9 (id=6199): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x1b, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast, @broadcast, @multicast1, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0xc, 0x38, 0x0, 0x3, [0x80000000, 0xffffffff]}]}}}], 0x40}}], 0x1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 453.616887ms ago: executing program 2 (id=6200): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 439.321328ms ago: executing program 2 (id=6201): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x2, 0xd3f, 0x2, 0x6}, 0x8}) close(0x3) 418.838578ms ago: executing program 2 (id=6202): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000140)="0b49bb61261591141b8a68729c718e3c28856e8a59042d1c070d25a131c4a21b88c10f7a3fd4ce896f", 0x29}], 0x1}}], 0x1, 0x0) 387.65215ms ago: executing program 2 (id=6203): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/95, 0x5f}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 387.37976ms ago: executing program 9 (id=6204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNATTACHFILTER(r0, 0x541b, 0x0) 306.444164ms ago: executing program 2 (id=6206): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 306.173784ms ago: executing program 9 (id=6208): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xe) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4}) 306.102934ms ago: executing program 9 (id=6209): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x88) ftruncate(r0, 0x2007ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) 265.125326ms ago: executing program 7 (id=6211): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 187.187771ms ago: executing program 7 (id=6212): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 186.788401ms ago: executing program 7 (id=6213): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 149.643462ms ago: executing program 7 (id=6214): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8091}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 40.052047ms ago: executing program 7 (id=6215): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 0s ago: executing program 7 (id=6216): r0 = syz_io_uring_setup(0x1852, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4000, @fd, 0x1, 0x8001, 0x6, 0x4, 0x1, {0x3, r3}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 229.191878][T15821] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4273: couldn't read orphan inode 17 (err -117) [ 229.201109][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 229.201143][ C0] EXT4-fs (loop7): initial error at time 2000000689: ext4_orphan_get:1391: inode 17 [ 229.201173][ C0] EXT4-fs (loop7): last error at time 2000000689: ext4_orphan_get:1391: inode 17 [ 229.212690][T15656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.213156][T15821] loop7: lost filesystem error report for type 5 error -117 [ 229.234408][ T167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.263291][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4275'. [ 229.263579][T15821] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.273902][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4275'. [ 229.300067][ T167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.341933][ T167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.355617][ T167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.422520][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.593171][T15856] syz.2.4287 (15856) used greatest stack depth: 8616 bytes left [ 229.684159][T15868] sctp: [Deprecated]: syz.7.4292 (pid 15868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.684159][T15868] Use struct sctp_sack_info instead [ 229.705939][T15870] loop4: detected capacity change from 0 to 512 [ 229.724100][T15870] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.760887][T15876] loop7: detected capacity change from 0 to 2048 [ 229.768821][T15870] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.4294: inode has both inline data and extents flags [ 229.788249][T15870] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 229.788419][T15870] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4294: couldn't read orphan inode 17 (err -117) [ 229.797573][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 229.797592][ C0] EXT4-fs (loop4): initial error at time 2000000690: ext4_orphan_get:1391: inode 17 [ 229.797637][ C0] EXT4-fs (loop4): last error at time 2000000690: ext4_orphan_get:1391: inode 17 [ 229.835039][T15870] loop4: lost filesystem error report for type 5 error -117 [ 229.835919][T15870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.849644][T15171] loop7: p3 < > p4 < > [ 229.860784][T15171] loop7: partition table partially beyond EOD, truncated [ 229.868371][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.870511][T15171] loop7: p3 start 4284289 is beyond EOD, truncated [ 229.885682][T15876] loop7: p3 < > p4 < > [ 229.889916][T15876] loop7: partition table partially beyond EOD, truncated [ 229.906343][T15876] loop7: p3 start 4284289 is beyond EOD, truncated [ 229.956982][T15132] udevd[15132]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 230.001969][T15892] loop4: detected capacity change from 0 to 1764 [ 230.107539][T15904] vcan0: tx drop: invalid sa for name 0x0000000007fffffe [ 230.156765][T15909] sctp: [Deprecated]: syz.8.4311 (pid 15909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.156765][T15909] Use struct sctp_sack_info instead [ 230.177127][T15913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.199601][T15909] loop8: detected capacity change from 0 to 2048 [ 230.261722][T15909] loop8: p3 < > p4 < > [ 230.279328][T15909] loop8: partition table partially beyond EOD, truncated [ 230.293100][T15909] loop8: p3 start 4284289 is beyond EOD, truncated [ 230.356530][T15132] udevd[15132]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 230.462908][T15927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.496164][T15927] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.564488][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.749762][T13128] kernel write not supported for file bpf-prog (pid: 13128 comm: kworker/1:7) [ 230.819059][T15960] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4333'. [ 230.834379][T15962] netlink: 'syz.6.4334': attribute type 4 has an invalid length. [ 230.865435][T15965] rock: directory entry would overflow storage [ 230.872387][T15965] rock: sig=0x4654, size=5, remaining=4 [ 230.897425][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4339'. [ 230.933462][T15974] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.046584][T15990] unsupported nla_type 210 [ 231.119019][T15997] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4350: invalid indirect mapped block 256 (level 2) [ 231.142774][T15997] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.146372][T15997] EXT4-fs (loop4): 2 truncates cleaned up [ 231.155533][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 231.155553][ C0] EXT4-fs (loop4): initial error at time 2000000691: ext4_free_branches:1023: inode 11 [ 231.155578][ C0] EXT4-fs (loop4): last error at time 2000000691: ext4_free_branches:1023: inode 11 [ 231.201738][T15997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.207382][T16004] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4353'. [ 231.251073][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.309995][T16012] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 231.333278][ T167] kworker/u8:5: attempt to access beyond end of device [ 231.333278][ T167] loop8: rw=1, sector=2504, nr_sectors = 2072 limit=512 [ 231.351285][ T167] kworker/u8:5: attempt to access beyond end of device [ 231.351285][ T167] loop8: rw=1, sector=4576, nr_sectors = 2048 limit=512 [ 231.367675][ T167] kworker/u8:5: attempt to access beyond end of device [ 231.367675][ T167] loop8: rw=1, sector=6624, nr_sectors = 2112 limit=512 [ 231.384806][ T167] kworker/u8:5: attempt to access beyond end of device [ 231.384806][ T167] loop8: rw=1, sector=8736, nr_sectors = 2112 limit=512 [ 231.402982][ T167] kworker/u8:5: attempt to access beyond end of device [ 231.402982][ T167] loop8: rw=1, sector=10848, nr_sectors = 2168 limit=512 [ 231.420703][ T167] kworker/u8:5: attempt to access beyond end of device [ 231.420703][ T167] loop8: rw=1, sector=13016, nr_sectors = 3448 limit=512 [ 231.533034][T16025] vcan0: tx drop: invalid sa for name 0x0000000007fffffe [ 231.807424][T16042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.822382][T16042] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.870053][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.903726][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 231.903763][ T28] audit: type=1400 audit(2000000692.703:1568): avc: denied { listen } for pid=16049 comm="syz.6.4373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.942114][T16050] set_capacity_and_notify: 8 callbacks suppressed [ 231.942129][T16050] loop7: detected capacity change from 0 to 512 [ 232.002554][T16058] netlink: 'syz.4.4377': attribute type 4 has an invalid length. [ 232.030042][ T28] audit: type=1400 audit(2000000692.823:1569): avc: denied { create } for pid=16061 comm="syz.8.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 232.057348][ T28] audit: type=1400 audit(2000000692.853:1570): avc: denied { setopt } for pid=16061 comm="syz.8.4379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 232.173788][ T7999] kworker/u8:12: attempt to access beyond end of device [ 232.173788][ T7999] loop7: rw=1, sector=2384, nr_sectors = 4200 limit=512 [ 232.193941][ T7999] kworker/u8:12: attempt to access beyond end of device [ 232.193941][ T7999] loop7: rw=1, sector=6584, nr_sectors = 2808 limit=512 [ 232.208232][ T28] audit: type=1400 audit(2000000692.993:1571): avc: denied { mount } for pid=16072 comm="syz.8.4385" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 232.247961][ T7999] kworker/u8:12: attempt to access beyond end of device [ 232.247961][ T7999] loop7: rw=1, sector=9392, nr_sectors = 2192 limit=512 [ 232.258822][T16077] loop4: detected capacity change from 0 to 2048 [ 232.262172][ T28] audit: type=1400 audit(2000000692.993:1572): avc: denied { create } for pid=16074 comm="syz.2.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 232.291251][ T7999] kworker/u8:12: attempt to access beyond end of device [ 232.291251][ T7999] loop7: rw=1, sector=11584, nr_sectors = 2048 limit=512 [ 232.307697][ T28] audit: type=1400 audit(2000000693.033:1573): avc: denied { ioctl } for pid=16074 comm="syz.2.4386" path="socket:[48240]" dev="sockfs" ino=48240 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 232.344921][ T28] audit: type=1400 audit(2000000693.143:1574): avc: denied { accept } for pid=16078 comm="syz.2.4388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.386987][T16077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.399178][T16077] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.425643][T16088] loop7: detected capacity change from 0 to 512 [ 232.444320][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.470332][T16088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 232.483373][T16088] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.521803][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 232.573008][T16101] netlink: 'syz.7.4393': attribute type 4 has an invalid length. [ 232.786365][T16115] loop4: detected capacity change from 0 to 512 [ 232.822193][T16115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.862611][T16115] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.972446][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.109961][T16134] loop4: detected capacity change from 0 to 128 [ 233.166724][T16136] netlink: 'syz.8.4409': attribute type 4 has an invalid length. [ 233.566815][ T28] audit: type=1400 audit(2000000694.323:1575): avc: denied { ioctl } for pid=16149 comm="syz.2.4413" path="socket:[48381]" dev="sockfs" ino=48381 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.671134][T16154] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4414'. [ 233.703545][T16158] loop6: detected capacity change from 0 to 764 [ 233.718313][T16158] rock: directory entry would overflow storage [ 233.724625][T16158] rock: sig=0x4654, size=5, remaining=4 [ 233.731248][ T28] audit: type=1400 audit(2000000694.513:1576): avc: denied { read } for pid=16159 comm="syz.4.4427" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.891357][T16169] loop6: detected capacity change from 0 to 2048 [ 233.952524][T15132] Alternate GPT is invalid, using primary GPT. [ 233.971090][T15132] loop6: p1 p2 p3 [ 233.997488][T16180] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4425'. [ 234.304456][T16169] Alternate GPT is invalid, using primary GPT. [ 234.311336][T16169] loop6: p1 p2 p3 [ 234.348509][ T2999] Alternate GPT is invalid, using primary GPT. [ 234.374308][ T2999] loop6: p1 p2 p3 [ 234.421759][T15132] udevd[15132]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 234.434715][T15133] udevd[15133]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 234.446149][T15171] udevd[15171]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 234.470118][T15133] udevd[15133]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 234.483926][T15132] udevd[15132]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 234.493697][T16195] udevd[16195]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 234.533276][T15171] udevd[15171]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 234.545475][T15133] udevd[15133]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 234.884925][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.931612][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.942170][T16223] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 235.436438][T16248] loop4: detected capacity change from 0 to 512 [ 235.449193][T16248] EXT4-fs: Ignoring removed i_version option [ 235.460072][T16250] loop8: detected capacity change from 0 to 128 [ 235.466649][T16248] EXT4-fs: Ignoring removed bh option [ 235.531076][T16248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.554826][T16248] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.705787][ T28] audit: type=1400 audit(2000000696.503:1577): avc: denied { map } for pid=16247 comm="syz.4.4460" path="/39/bus/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 235.779594][T16278] loop6: detected capacity change from 0 to 512 [ 235.812174][T16278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.837957][T16278] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.922592][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.013049][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.229512][T16321] EXT4-fs: Ignoring removed i_version option [ 236.245516][T16321] EXT4-fs: Ignoring removed bh option [ 236.275916][T16321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.309314][T16321] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.541892][T16340] bio_check_eod: 10 callbacks suppressed [ 236.541909][T16340] syz.7.4488: attempt to access beyond end of device [ 236.541909][T16340] loop7: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 236.587605][T16340] syz.7.4488: attempt to access beyond end of device [ 236.587605][T16340] loop7: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 236.613059][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.632679][T16340] syz.7.4488: attempt to access beyond end of device [ 236.632679][T16340] loop7: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 236.673247][ T8005] kworker/u8:13: attempt to access beyond end of device [ 236.673247][ T8005] loop7: rw=1, sector=138, nr_sectors = 2 limit=128 [ 237.403058][T16394] set_capacity_and_notify: 2 callbacks suppressed [ 237.403075][T16394] loop7: detected capacity change from 0 to 512 [ 237.481420][T16394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.494210][T16394] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.528869][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.594732][T16409] loop6: detected capacity change from 0 to 2048 [ 237.603320][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 237.603335][ T28] audit: type=1400 audit(2000000698.403:1587): avc: denied { bind } for pid=16414 comm="syz.8.4520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.617938][T16409] EXT4-fs: Ignoring removed i_version option [ 237.659783][ T28] audit: type=1400 audit(2000000698.453:1588): avc: denied { setopt } for pid=16414 comm="syz.8.4520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.692957][T16423] loop7: detected capacity change from 0 to 512 [ 237.725129][T16423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.746232][T16423] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.762728][T16409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.777979][T16409] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.879538][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.911312][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.951297][ T28] audit: type=1400 audit(2000000698.723:1589): avc: denied { write } for pid=16447 comm="syz.4.4535" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 237.979071][T16460] loop6: detected capacity change from 0 to 128 [ 238.003072][T16460] syz.6.4525: attempt to access beyond end of device [ 238.003072][T16460] loop6: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 238.040417][T16460] syz.6.4525: attempt to access beyond end of device [ 238.040417][T16460] loop6: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 238.095598][T16474] loop4: detected capacity change from 0 to 256 [ 238.110844][T16460] syz.6.4525: attempt to access beyond end of device [ 238.110844][T16460] loop6: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 238.161240][ T28] audit: type=1400 audit(2000000698.933:1590): avc: denied { name_connect } for pid=16476 comm="syz.7.4532" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 238.321898][T16481] SELinux: Context Y is not valid (left unmapped). [ 238.328753][ T8011] kworker/u8:15: attempt to access beyond end of device [ 238.328753][ T8011] loop6: rw=1, sector=138, nr_sectors = 2 limit=128 [ 238.342188][ T28] audit: type=1400 audit(2000000699.123:1591): avc: denied { mac_admin } for pid=16480 comm="syz.7.4534" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.733632][T16517] loop4: detected capacity change from 0 to 512 [ 238.765089][T16517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.790451][ T28] audit: type=1400 audit(2000000699.583:1592): avc: denied { setopt } for pid=16519 comm="syz.6.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.811609][T16517] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.911449][T16526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16526 comm=syz.7.4556 [ 238.942333][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.219979][T16564] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.258806][ T28] audit: type=1326 audit(2000000700.053:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16563 comm="syz.6.4568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa40640c799 code=0x0 [ 239.361706][ T28] audit: type=1400 audit(2000000700.093:1594): avc: denied { create } for pid=16567 comm="syz.2.4570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.389524][T16572] loop8: detected capacity change from 0 to 1024 [ 239.434759][ T28] audit: type=1400 audit(2000000700.103:1595): avc: denied { write } for pid=16567 comm="syz.2.4570" path="socket:[49767]" dev="sockfs" ino=49767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.455347][T16572] EXT4-fs: Ignoring removed oldalloc option [ 239.524653][T16572] EXT4-fs: Ignoring removed bh option [ 239.565904][T16572] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.593758][ T28] audit: type=1400 audit(2000000700.393:1596): avc: denied { map } for pid=16571 comm="syz.8.4571" path="/355/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.624227][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.800104][T16607] loop7: detected capacity change from 0 to 1024 [ 239.841164][T16607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.875791][T16612] netlink: 'syz.8.4585': attribute type 1 has an invalid length. [ 239.897843][T16607] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.4584: inode #167772160: comm syz.7.4584: iget: illegal inode # [ 239.913802][T16607] EXT4-fs (loop7): Remounting filesystem read-only [ 239.940519][T16607] EXT4-fs warning (device loop7): ext4_xattr_block_set:2200: inode #19: comm syz.7.4584: dec ref error=-30 [ 239.986426][T16616] loop8: detected capacity change from 0 to 512 [ 239.989288][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.025905][T16616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.049078][T16616] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.154027][T16630] loop6: detected capacity change from 0 to 4096 [ 240.181764][T16630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.227180][T16630] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4592: corrupted inode contents [ 240.302782][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 240.306040][T16640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.329975][T16630] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.4592: mark_inode_dirty error [ 240.352134][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.353223][T16640] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4597: Invalid block bitmap block 0 in block_group 0 [ 240.383650][T16649] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4599'. [ 240.385922][T16630] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4592: corrupted inode contents [ 240.407816][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.407949][T16640] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 240.410363][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 240.416625][T16630] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4592: mark_inode_dirty error [ 240.423966][ C1] EXT4-fs (loop4): initial error at time 2000000701: ext4_read_block_bitmap_nowait:483 [ 240.433698][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.441566][ C1] [ 240.441574][ C1] EXT4-fs (loop4): last error at time 2000000701: ext4_read_block_bitmap_nowait:483 [ 240.452623][T16630] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4592: corrupted inode contents [ 240.458457][ C1] [ 240.487306][T16640] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.4597: attempt to clear invalid blocks 983261 len 1 [ 240.504214][T16640] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.504612][T16640] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.4597: Invalid inode table block 0 in block_group 0 [ 240.529051][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.529240][T16640] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 240.552541][T16630] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.4592: mark_inode_dirty error [ 240.553632][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.564108][T16640] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 240.565043][T16630] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4592: corrupted inode contents [ 240.571714][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.580534][T16630] EXT4-fs error (device loop6): ext4_truncate:4587: inode #15: comm syz.6.4592: mark_inode_dirty error [ 240.611624][T16640] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.4597: Invalid inode table block 0 in block_group 0 [ 240.615019][T16630] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem [ 240.624957][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.633938][T16640] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 240.650777][T16642] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.4592: corrupted inode contents [ 240.661236][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.663350][T16640] EXT4-fs error (device loop4): ext4_truncate:4587: inode #11: comm syz.4.4597: mark_inode_dirty error [ 240.663434][T16642] EXT4-fs warning (device loop6): swap_inode_boot_loader:481: couldn't mark inode #15 dirty (err -117) [ 240.671297][T16640] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.693253][T16640] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 240.711482][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.711621][T16640] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.4597: Invalid inode table block 0 in block_group 0 [ 240.732977][T16640] loop4: lost filesystem error report for type 5 error -117 [ 240.733196][T16640] EXT4-fs (loop4): 1 truncate cleaned up [ 240.733889][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.740943][T16640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.802433][T16640] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 240.821716][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.962780][T16677] EXT4-fs: Ignoring removed oldalloc option [ 240.968883][T16677] EXT4-fs: Ignoring removed bh option [ 240.982098][T16677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.012435][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.042661][T16681] netlink: 'syz.4.4611': attribute type 1 has an invalid length. [ 241.299968][T16692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4614'. [ 241.361968][T16698] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4617: iget: bad i_size value: 38620345925642 [ 241.381184][T16698] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.381347][T16698] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4617: couldn't read orphan inode 15 (err -117) [ 241.390542][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 241.390563][ C0] EXT4-fs (loop4): initial error at time 2000000702: ext4_orphan_get:1391: inode 15 [ 241.390589][ C0] EXT4-fs (loop4): last error at time 2000000702: ext4_orphan_get:1391: inode 15 [ 241.451715][T16698] loop4: lost filesystem error report for type 5 error -117 [ 241.459232][T16698] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.518485][T16698] EXT4-fs (loop4): shut down requested (2) [ 241.538706][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 241.540680][T16713] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.590955][T16713] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4635: corrupted inode contents [ 241.632913][T16713] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.4635: mark_inode_dirty error [ 241.650057][T16713] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4635: corrupted inode contents [ 241.690057][T16713] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.4635: mark_inode_dirty error [ 241.704049][T16713] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4635: corrupted inode contents [ 241.754063][T16713] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.4635: mark_inode_dirty error [ 241.776869][T16713] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4635: corrupted inode contents [ 241.817368][T16713] EXT4-fs error (device loop8): ext4_truncate:4587: inode #15: comm syz.8.4635: mark_inode_dirty error [ 241.896299][T16713] EXT4-fs error (device loop8) in ext4_setattr:5983: Corrupt filesystem [ 241.914657][T16734] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4635: corrupted inode contents [ 241.991653][T16734] EXT4-fs warning (device loop8): swap_inode_boot_loader:481: couldn't mark inode #15 dirty (err -117) [ 242.012373][T16769] EXT4-fs (loop7): 1 truncate cleaned up [ 242.028154][T16773] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4638: iget: bad i_size value: 38620345925642 [ 242.041248][T16769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.057477][T16769] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4637: bg 0: block 465: padding at end of block bitmap is not set [ 242.082570][T16773] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.090362][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 242.105917][ C0] EXT4-fs (loop6): initial error at time 2000000702: ext4_orphan_get:1391: inode 15 [ 242.115320][ C0] EXT4-fs (loop6): last error at time 2000000702: ext4_orphan_get:1391: inode 15 [ 242.127333][T16773] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4638: couldn't read orphan inode 15 (err -117) [ 242.151628][T16773] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.169833][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.179477][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.198021][T16773] EXT4-fs (loop6): shut down requested (2) [ 242.281398][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 242.624566][T16823] set_capacity_and_notify: 6 callbacks suppressed [ 242.624639][T16823] loop6: detected capacity change from 0 to 164 [ 242.652534][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 242.652549][ T28] audit: type=1400 audit(2000000703.453:1626): avc: denied { watch watch_reads } for pid=16822 comm="syz.6.4660" path="/79/file0" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 242.790391][T16841] loop7: detected capacity change from 0 to 256 [ 242.800357][T16841] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.814732][T16841] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.883447][T16844] 9pnet: p9_errstr2errno: server reported unknown error [ 242.905177][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4671'. [ 242.916267][T16847] netlink: 'syz.6.4671': attribute type 1 has an invalid length. [ 242.924079][T16847] netlink: 'syz.6.4671': attribute type 2 has an invalid length. [ 242.948651][T16849] netlink: 'syz.6.4673': attribute type 1 has an invalid length. [ 242.956499][T16849] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.4673'. [ 243.026482][T16861] loop7: detected capacity change from 0 to 164 [ 243.076166][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 243.129878][T16874] loop7: detected capacity change from 0 to 512 [ 243.136580][T16874] EXT4-fs: inline encryption not supported [ 243.145044][T16874] EXT4-fs: Ignoring removed i_version option [ 243.155076][T16874] EXT4-fs (loop7): 1 orphan inode deleted [ 243.162137][T16874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.191976][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.208721][ T28] audit: type=1400 audit(2000000704.003:1627): avc: denied { kexec_image_load } for pid=16882 comm="syz.7.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 243.253656][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4690'. [ 243.281151][T16889] loop7: detected capacity change from 0 to 2048 [ 243.302595][T16889] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.325850][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.403933][T16881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.412585][T16881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.511472][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 243.527687][T16899] loop7: detected capacity change from 0 to 4096 [ 243.549351][T16899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.596745][T16899] EXT4-fs (loop7): shut down requested (1) [ 243.620249][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.665374][ T28] audit: type=1400 audit(2000000704.463:1628): avc: denied { name_bind } for pid=16910 comm="syz.7.4698" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 243.667660][T16914] loop8: detected capacity change from 0 to 512 [ 243.779585][ T28] audit: type=1400 audit(2000000704.573:1629): avc: denied { setopt } for pid=16924 comm="syz.7.4705" lport=48536 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 243.903513][T16934] loop8: detected capacity change from 0 to 512 [ 243.920441][T16934] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.960055][T16934] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 243.988319][T16934] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4708: bg 0: block 248: padding at end of block bitmap is not set [ 244.030372][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 244.036861][ C0] EXT4-fs (loop8): last error at time 2000000704: ext4_validate_block_bitmap:441 [ 244.038287][T16934] Quota error (device loop8): write_blk: dquota write failed [ 244.056837][T16934] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 244.067738][T16934] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.4708: Failed to acquire dquot type 1 [ 244.122059][T16934] EXT4-fs (loop8): 1 truncate cleaned up [ 244.128619][T16934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 244.245902][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 244.269765][ T28] audit: type=1326 audit(2000000705.063:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16952 comm="syz.6.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40640c799 code=0x7ffc0000 [ 244.326534][ T28] audit: type=1326 audit(2000000705.063:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16952 comm="syz.6.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40640c799 code=0x7ffc0000 [ 244.377190][ T28] audit: type=1326 audit(2000000705.093:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16952 comm="syz.6.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fa40640c799 code=0x7ffc0000 [ 244.413475][T16959] loop6: detected capacity change from 0 to 512 [ 244.423716][T16959] EXT4-fs: inline encryption not supported [ 244.429679][T16959] EXT4-fs: Ignoring removed i_version option [ 244.455546][ T28] audit: type=1326 audit(2000000705.093:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16952 comm="syz.6.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40640c799 code=0x7ffc0000 [ 244.485771][T16959] EXT4-fs (loop6): 1 orphan inode deleted [ 244.492097][T16959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.520143][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.560390][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4722'. [ 244.602689][T16972] netlink: 'syz.7.4722': attribute type 1 has an invalid length. [ 244.611750][T16972] netlink: 'syz.7.4722': attribute type 2 has an invalid length. [ 244.691656][T16986] loop6: detected capacity change from 0 to 128 [ 244.709920][T16986] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.739386][T16990] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.771104][T16990] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 244.785896][T16990] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4727: bg 0: block 248: padding at end of block bitmap is not set [ 244.809822][T16990] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.4727: Failed to acquire dquot type 1 [ 244.821147][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 244.821182][ C1] EXT4-fs (loop7): last error at time 2000000705: ext4_validate_block_bitmap:441 [ 244.844225][T16990] EXT4-fs (loop7): 1 truncate cleaned up [ 244.858790][T16990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 244.921318][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 245.037604][T17020] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.065252][T17023] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.082261][T17020] FAT-fs (loop6): error, clusters badly computed (5 != 1) [ 245.093827][T17020] FAT-fs (loop6): Filesystem has been set read-only [ 245.106222][T17020] FAT-fs (loop6): error, clusters badly computed (6 != 2) [ 245.114863][T17020] FAT-fs (loop6): error, clusters badly computed (7 != 3) [ 245.729172][T17041] netlink: 'syz.8.4752': attribute type 3 has an invalid length. [ 245.747339][T17041] netlink: 'syz.8.4752': attribute type 4 has an invalid length. [ 245.770429][T17041] netlink: 108 bytes leftover after parsing attributes in process `syz.8.4752'. [ 245.810209][T17046] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.864165][T17046] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 245.883278][T17046] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4751: bg 0: block 248: padding at end of block bitmap is not set [ 245.898014][T17046] fserror_report: 5 callbacks suppressed [ 245.898029][T17046] loop6: lost filesystem error report for type 5 error -117 [ 245.908229][T17046] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.4751: Failed to acquire dquot type 1 [ 245.915621][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 245.915639][ C0] EXT4-fs (loop6): last error at time 2000000706: ext4_validate_block_bitmap:441 [ 245.944615][T17046] loop6: lost filesystem error report for type 5 error -117 [ 245.953435][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4760'. [ 245.970448][T17046] EXT4-fs (loop6): 1 truncate cleaned up [ 245.990897][T17046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 246.003679][T17063] bond0: Unable to set down delay as MII monitoring is disabled [ 246.261218][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 246.384688][T17092] syzkaller1: entered promiscuous mode [ 246.400597][T17092] syzkaller1: entered allmulticast mode [ 246.513199][T17101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.543079][T17101] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 246.565125][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.614165][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4779'. [ 246.846694][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4785'. [ 247.022853][T17134] vlan2: entered promiscuous mode [ 247.038227][T17134] hsr0: entered promiscuous mode [ 247.100489][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4794'. [ 247.224716][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4810'. [ 247.318269][T17170] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4803'. [ 247.552276][T17183] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.581556][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.609476][T17183] FAT-fs (loop7): Filesystem has been set read-only [ 247.620143][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.629126][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.638061][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.647293][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.656315][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.665249][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.674175][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.683824][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.694178][T17183] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.713271][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 247.713362][ T28] audit: type=1326 audit(2000000708.513:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.2.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 247.847223][ T28] audit: type=1326 audit(2000000708.643:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17198 comm="syz.6.4816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa40640c799 code=0x0 [ 247.892466][T17205] set_capacity_and_notify: 6 callbacks suppressed [ 247.892482][T17205] loop4: detected capacity change from 0 to 4096 [ 247.922604][T17205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.962355][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.130486][ T3563] Bluetooth: hci0: command 0x1003 tx timeout [ 248.136559][ T8781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.255652][T17218] loop8: detected capacity change from 0 to 512 [ 248.274305][T17218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.307992][T17218] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.373461][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.512465][T17236] loop8: detected capacity change from 0 to 128 [ 248.543177][T17238] : renamed from vlan0 (while UP) [ 248.884435][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4839'. [ 248.987745][T17264] tipc: Started in network mode [ 248.992735][T17264] tipc: Node identity ac14140f, cluster identity 4711 [ 249.002027][T17264] tipc: Enabled bearer , priority 10 [ 249.057026][ T28] audit: type=1400 audit(2000000709.853:1688): avc: denied { write } for pid=17271 comm="syz.4.4847" name="file0" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.106268][ T28] audit: type=1400 audit(2000000709.853:1689): avc: denied { open } for pid=17271 comm="syz.4.4847" path="/101/file0" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.148187][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.152993][ T28] audit: type=1400 audit(2000000709.853:1690): avc: denied { ioctl } for pid=17271 comm="syz.4.4847" path="/101/file0" dev="tmpfs" ino=543 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.157537][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.454187][T17294] tipc: Started in network mode [ 249.462581][T17294] tipc: Node identity ac14140f, cluster identity 4711 [ 249.480603][T17294] tipc: Enabled bearer , priority 10 [ 249.580708][T17299] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.587894][T17299] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.639764][T17299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.649964][T17299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.696724][T17299] batman_adv: batadv0: Interface deactivated: gretap1 [ 249.704389][T17304] : renamed from vlan0 (while UP) [ 249.712767][ T8017] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.722848][ T8017] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.739343][ T8017] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.776186][ T8017] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.781554][T17309] loop7: detected capacity change from 0 to 512 [ 249.792518][ T8017] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.820437][ T8017] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.824260][ T28] audit: type=1400 audit(2000000710.613:1691): avc: denied { ioctl } for pid=17312 comm="syz.8.4866" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.836675][ T8017] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.869774][ T8017] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.885982][T17309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.897947][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4867'. [ 249.913288][T17309] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.981736][T17327] loop8: detected capacity change from 0 to 1764 [ 249.995970][T17327] iso9660: Unknown parameter '' [ 250.021021][ T28] audit: type=1400 audit(2000000710.813:1692): avc: denied { create } for pid=17330 comm="syz.7.4872" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.090618][ T28] audit: type=1400 audit(2000000710.813:1693): avc: denied { write } for pid=17330 comm="syz.7.4872" name="file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.125713][T17343] syzkaller1: entered promiscuous mode [ 250.131482][T17343] syzkaller1: entered allmulticast mode [ 250.131695][ T28] audit: type=1400 audit(2000000710.813:1694): avc: denied { open } for pid=17330 comm="syz.7.4872" path="/150/file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.160281][ T10] tipc: Node number set to 2886997007 [ 250.177973][ T28] audit: type=1400 audit(2000000710.863:1695): avc: denied { unlink } for pid=15121 comm="syz-executor" name="file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.350155][ T8017] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.500732][ T10] tipc: Node number set to 2886997007 [ 251.426219][T17373] loop7: detected capacity change from 0 to 32768 [ 251.682890][T17405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.692906][T17405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.716005][T17405] tipc: Resetting bearer [ 251.729472][ T8017] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.738590][ T8017] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.748184][ T8017] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.757405][ T8017] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.945326][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4914'. [ 252.109635][T17431] loop8: detected capacity change from 0 to 1024 [ 252.140220][T17431] EXT4-fs error (device loop8): ext4_xattr_set_entry:1670: inode #15: comm syz.8.4917: corrupted xattr entries [ 252.152716][T17431] EXT4-fs error (device loop8): ext4_xattr_block_set:2220: inode #15: comm syz.8.4917: bad block 113 [ 252.370380][ T3563] Bluetooth: hci0: command 0x1003 tx timeout [ 252.370393][ T8781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.477461][T17449] loop8: detected capacity change from 0 to 512 [ 252.491494][T17439] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.498646][T17439] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.517766][T17449] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4925: invalid indirect mapped block 256 (level 2) [ 252.545795][T17449] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 252.546122][T17449] EXT4-fs (loop8): 2 truncates cleaned up [ 252.555309][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 252.555322][ C0] EXT4-fs (loop8): initial error at time 2000000713: ext4_free_branches:1023: inode 11 [ 252.555355][ C0] EXT4-fs (loop8): last error at time 2000000713: ext4_free_branches:1023: inode 11 [ 252.592114][T17449] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4925: bg 0: block 5: invalid block bitmap [ 252.682288][T17439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.692154][T17457] loop8: detected capacity change from 0 to 8192 [ 252.693830][T17439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.710706][T17457] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.737504][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.752139][T17457] FAT-fs (loop8): Filesystem has been set read-only [ 252.759131][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.769622][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.779260][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.788261][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.797125][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.806057][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.814891][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.823682][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.833026][T17457] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 252.843773][ T167] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.873694][ T167] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.895567][ T167] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.916246][ T167] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.110678][T17478] syzkaller1: entered promiscuous mode [ 253.117149][T17478] syzkaller1: entered allmulticast mode [ 253.238937][T17492] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.246089][T17492] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.291682][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 253.291696][ T28] audit: type=1400 audit(2000000714.083:1697): avc: denied { mounton } for pid=17493 comm="syz.2.4956" path="/syzcgroup/unified/syz2/cgroup.procs" dev="cgroup2" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 253.379259][T17492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.392368][T17501] loop4: detected capacity change from 0 to 256 [ 253.399036][T17492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.419522][T17501] FAT-fs (loop4): Directory bread(block 64) failed [ 253.434353][T17501] FAT-fs (loop4): Directory bread(block 65) failed [ 253.441690][T17501] FAT-fs (loop4): Directory bread(block 66) failed [ 253.448275][T17501] FAT-fs (loop4): Directory bread(block 67) failed [ 253.455227][T17501] FAT-fs (loop4): Directory bread(block 68) failed [ 253.462043][T17501] FAT-fs (loop4): Directory bread(block 69) failed [ 253.468637][T17501] FAT-fs (loop4): Directory bread(block 70) failed [ 253.475828][T17501] FAT-fs (loop4): Directory bread(block 71) failed [ 253.482703][ T8017] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.491982][ T8017] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.502498][ T8017] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.511691][T17501] FAT-fs (loop4): Directory bread(block 72) failed [ 253.518461][T17501] FAT-fs (loop4): Directory bread(block 73) failed [ 253.525090][ T8017] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.594149][T17503] loop4: detected capacity change from 0 to 512 [ 253.607536][T17503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.635760][T17503] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.689507][T17507] Process accounting resumed [ 253.745715][T17523] syzkaller1: entered promiscuous mode [ 253.753687][T17523] syzkaller1: entered allmulticast mode [ 254.104238][ T28] audit: type=1400 audit(2000000714.903:1698): avc: denied { read } for pid=17552 comm="syz.4.4971" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.144005][T17557] loop8: detected capacity change from 0 to 128 [ 254.171743][ T28] audit: type=1400 audit(2000000714.903:1699): avc: denied { open } for pid=17552 comm="syz.4.4971" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.226876][ T28] audit: type=1400 audit(2000000714.903:1700): avc: denied { write } for pid=17552 comm="syz.4.4971" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.554579][T17576] loop8: detected capacity change from 0 to 512 [ 254.576711][T17576] EXT4-fs (loop8): 1 truncate cleaned up [ 254.599895][T17581] netlink: 'syz.4.4980': attribute type 4 has an invalid length. [ 254.610877][ T28] audit: type=1400 audit(2000000715.413:1701): avc: denied { rename } for pid=17574 comm="syz.8.4978" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.668700][T17582] netlink: 'syz.4.4980': attribute type 4 has an invalid length. [ 254.701231][T17583] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4978: bg 0: block 465: padding at end of block bitmap is not set [ 254.723075][T17585] loop6: detected capacity change from 0 to 256 [ 254.775686][T17583] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 254.775763][T17585] FAT-fs (loop6): Directory bread(block 64) failed [ 254.786229][T17583] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4978: invalid indirect mapped block 234881024 (level 0) [ 254.820966][T17585] FAT-fs (loop6): Directory bread(block 65) failed [ 254.834185][T17585] FAT-fs (loop6): Directory bread(block 66) failed [ 254.839599][T17592] 9p: Bad value for 'rfdno' [ 254.846777][T17585] FAT-fs (loop6): Directory bread(block 67) failed [ 254.858991][T17585] FAT-fs (loop6): Directory bread(block 68) failed [ 254.866614][T17585] FAT-fs (loop6): Directory bread(block 69) failed [ 254.893375][T17585] FAT-fs (loop6): Directory bread(block 70) failed [ 254.911095][T17585] FAT-fs (loop6): Directory bread(block 71) failed [ 254.917634][T17585] FAT-fs (loop6): Directory bread(block 72) failed [ 254.926756][T17585] FAT-fs (loop6): Directory bread(block 73) failed [ 255.795300][T17614] loop8: detected capacity change from 0 to 1024 [ 255.820250][T17598] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.827495][T17598] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.897984][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.907845][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.032775][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.060123][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.077936][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.096706][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.248342][T17646] loop4: detected capacity change from 0 to 1024 [ 256.255422][T17646] EXT4-fs: inline encryption not supported [ 256.285250][T17646] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.303931][T17646] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.5007: lblock 3 mapped to illegal pblock 3 (length 3) [ 256.321744][T17651] loop7: detected capacity change from 0 to 512 [ 256.335489][T17646] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 256.351271][T17651] EXT4-fs (loop7): 1 truncate cleaned up [ 256.357691][T17646] EXT4-fs (loop4): This should not happen!! Data will be lost [ 256.357691][T17646] [ 256.420662][ T8011] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 256.425257][T17654] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5008: bg 0: block 465: padding at end of block bitmap is not set [ 256.453959][ T8011] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 256.471057][ T8011] EXT4-fs (loop4): This should not happen!! Data will be lost [ 256.471057][ T8011] [ 256.487519][ T59] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 256.504581][ T59] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 52 with max blocks 16 with error 117 [ 256.524224][T17654] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 256.533950][ T59] EXT4-fs (loop4): This should not happen!! Data will be lost [ 256.533950][ T59] [ 256.544055][T17654] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5008: invalid indirect mapped block 234881024 (level 0) [ 256.755132][ T28] audit: type=1400 audit(2000000717.553:1702): avc: denied { write } for pid=17673 comm="syz.4.5016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.068707][ T3372] IPVS: starting estimator thread 0... [ 257.180462][T17695] IPVS: using max 2592 ests per chain, 129600 per kthread [ 257.237911][T17712] netlink: 'syz.8.5034': attribute type 10 has an invalid length. [ 257.249173][T17712] team0: Device wg1 is of different type [ 257.350514][ T23] IPVS: starting estimator thread 0... [ 257.394136][ T28] audit: type=1326 audit(2000000718.193:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcacc0c799 code=0x7ffc0000 [ 257.417893][ T28] audit: type=1326 audit(2000000718.193:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcacc0c799 code=0x7ffc0000 [ 257.442973][ T28] audit: type=1326 audit(2000000718.193:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcacc0c799 code=0x7ffc0000 [ 257.450432][T17724] IPVS: using max 2352 ests per chain, 117600 per kthread [ 257.474208][ T28] audit: type=1326 audit(2000000718.193:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.4.5042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcacc0c799 code=0x7ffc0000 [ 257.638183][T17748] loop7: detected capacity change from 0 to 128 [ 258.140772][T17799] loop6: detected capacity change from 0 to 512 [ 258.166974][T17799] EXT4-fs (loop6): 1 truncate cleaned up [ 258.235031][T17817] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5064: bg 0: block 465: padding at end of block bitmap is not set [ 258.249730][T17817] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 258.258806][T17817] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5064: invalid indirect mapped block 234881024 (level 0) [ 258.595051][T17876] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5084'. [ 258.741826][T17894] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.843970][T17907] loop4: detected capacity change from 0 to 512 [ 258.856686][T17907] EXT4-fs (loop4): 1 truncate cleaned up [ 258.862098][T17910] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5085'. [ 258.873151][T17910] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5085'. [ 258.928226][T17914] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5088'. [ 258.953827][T17915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5080: bg 0: block 465: padding at end of block bitmap is not set [ 258.970585][T17915] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 258.979761][T17915] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5080: invalid indirect mapped block 234881024 (level 0) [ 259.004545][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 259.004557][ T28] audit: type=1326 audit(2000000719.803:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.046033][ T28] audit: type=1326 audit(2000000719.803:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.069501][ T28] audit: type=1326 audit(2000000719.803:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.098887][ T28] audit: type=1326 audit(2000000719.803:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.122735][ T28] audit: type=1326 audit(2000000719.803:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.146633][ T28] audit: type=1326 audit(2000000719.803:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.171944][ T28] audit: type=1326 audit(2000000719.803:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.203868][ T28] audit: type=1326 audit(2000000719.803:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.230308][ T28] audit: type=1326 audit(2000000719.803:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.270080][T17925] team0 (unregistering): Port device team_slave_0 removed [ 259.273608][ T28] audit: type=1326 audit(2000000719.803:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17803 comm="syz.2.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7fc00000 [ 259.301873][T17925] team0 (unregistering): Port device team_slave_1 removed [ 259.312252][T17932] loop8: detected capacity change from 0 to 512 [ 259.342961][T17932] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.411577][T17944] netlink: 'syz.7.5098': attribute type 10 has an invalid length. [ 259.421149][T17944] team0: Device wg1 is of different type [ 259.800291][T17979] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5112'. [ 259.995679][T17997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17997 comm=syz.2.5121 [ 260.518148][T18021] loop7: detected capacity change from 0 to 2048 [ 260.545092][T18021] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #12: comm syz.7.5130: corrupted in-inode xattr: e_name out of bounds [ 260.560133][T18021] EXT4-fs (loop7): Remounting filesystem read-only [ 260.714628][T18032] loop4: detected capacity change from 0 to 4096 [ 261.270987][T18085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18085 comm=syz.6.5168 [ 261.369050][T18090] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5156'. [ 261.407962][T18096] loop6: detected capacity change from 0 to 512 [ 261.501490][T18107] netlink: 'syz.6.5169': attribute type 12 has an invalid length. [ 261.509832][T18107] netlink: 'syz.6.5169': attribute type 29 has an invalid length. [ 261.518074][T18107] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5169'. [ 261.582216][T18112] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 261.723303][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5178'. [ 261.772776][T18129] gtp0: entered promiscuous mode [ 261.784607][T18129] gtp0: entered allmulticast mode [ 261.909889][T18142] loop2: detected capacity change from 0 to 7 [ 261.963816][T18144] IPVS: Error connecting to the multicast addr [ 262.451998][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5209'. [ 262.483604][T18194] gtp1: entered promiscuous mode [ 262.500807][T18194] gtp1: entered allmulticast mode [ 262.555914][T18200] loop8: detected capacity change from 0 to 164 [ 262.650934][T18204] syzkaller1: entered promiscuous mode [ 262.665705][T18204] syzkaller1: entered allmulticast mode [ 262.741869][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5221'. [ 262.753364][T18216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.776803][T18216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.861832][T18230] loop2: detected capacity change from 0 to 7 [ 262.901612][T18234] loop8: detected capacity change from 0 to 4096 [ 262.923700][T18234] EXT4-fs mount: 26 callbacks suppressed [ 262.923750][T18234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.987145][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.148185][T18261] netlink: zone id is out of range [ 263.157856][T18261] netlink: zone id is out of range [ 263.183881][T18261] netlink: set zone limit has 8 unknown bytes [ 263.520758][T18274] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.529257][T18274] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 263.553547][T18278] loop6: detected capacity change from 0 to 512 [ 263.607588][T18278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.673920][T18292] syzkaller1: entered promiscuous mode [ 263.692229][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.721321][T18292] syzkaller1: entered allmulticast mode [ 264.043231][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 264.043246][ T28] audit: type=1400 audit(2000000724.843:1790): avc: denied { create } for pid=18314 comm="syz.8.5261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 264.116513][T18318] loop4: detected capacity change from 0 to 256 [ 264.123758][T18318] FAT-fs (loop4): bogus number of FAT sectors [ 264.129928][T18318] FAT-fs (loop4): Can't find a valid FAT filesystem [ 264.278315][ T28] audit: type=1400 audit(2000000725.073:1791): avc: denied { write } for pid=18325 comm="syz.4.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.477544][T18333] __nla_validate_parse: 1 callbacks suppressed [ 264.477593][T18333] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5269'. [ 264.915623][T18355] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5278'. [ 265.053783][T18362] loop8: detected capacity change from 0 to 128 [ 265.130074][T18366] loop8: detected capacity change from 0 to 512 [ 265.154681][T18366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.176748][ T28] audit: type=1400 audit(2000000725.973:1792): avc: denied { create } for pid=18365 comm="syz.8.5292" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 265.219393][T18371] loop4: detected capacity change from 0 to 1024 [ 265.226374][T18371] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.236892][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.271545][T18371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.288332][T18371] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 265.328214][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.861359][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5290'. [ 265.880576][ T8011] tipc: Subscription rejected, illegal request [ 266.332751][T18422] netlink: 'syz.2.5305': attribute type 4 has an invalid length. [ 266.357619][T18422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5305'. [ 266.634565][ T167] tipc: Subscription rejected, illegal request [ 266.836403][ T28] audit: type=1400 audit(2000000727.633:1793): avc: denied { mount } for pid=18458 comm="syz.2.5322" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 266.843997][T18456] loop8: detected capacity change from 0 to 164 [ 266.870115][ T28] audit: type=1400 audit(2000000727.663:1794): avc: denied { setopt } for pid=18457 comm="syz.7.5320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.903288][T18462] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=18462 comm=syz.2.5324 [ 266.921238][ T28] audit: type=1400 audit(2000000727.723:1795): avc: denied { mounton } for pid=18455 comm="syz.8.5321" path="/505/file0" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 266.992337][T18471] loop4: detected capacity change from 0 to 512 [ 267.011790][T18471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.033563][T18471] EXT4-fs (loop4): 1 truncate cleaned up [ 267.039707][T18471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.070899][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.681827][ T28] audit: type=1400 audit(2000000728.483:1796): avc: denied { create } for pid=18493 comm="syz.4.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 267.703911][ T28] audit: type=1400 audit(2000000728.483:1797): avc: denied { read } for pid=18493 comm="syz.4.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 268.041165][T18508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=18508 comm=syz.6.5341 [ 268.113873][T18514] loop6: detected capacity change from 0 to 512 [ 268.150555][T18514] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 268.179628][T18514] EXT4-fs (loop6): 1 truncate cleaned up [ 268.185936][ T28] audit: type=1400 audit(2000000728.983:1798): avc: denied { add_name } for pid=18517 comm="syz.2.5348" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.186003][T18514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.234585][ T28] audit: type=1400 audit(2000000728.983:1799): avc: denied { create } for pid=18517 comm="syz.2.5348" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 268.274084][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.709496][T18563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5367'. [ 268.732828][T18563] bond2: option primary_reselect: invalid value (8) [ 268.745722][T18563] bond2 (unregistering): Released all slaves [ 268.831451][T18571] tmpfs: Bad value for 'mpol' [ 269.413617][T18618] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 269.790135][T18627] syzkaller1: entered promiscuous mode [ 269.795766][T18627] syzkaller1: entered allmulticast mode [ 269.924160][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 269.924174][ T28] audit: type=1400 audit(2000000730.723:1804): avc: denied { write } for pid=18630 comm="syz.8.5396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 270.174259][ T28] audit: type=1326 audit(2000000730.973:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18649 comm="syz.2.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 270.215555][ T28] audit: type=1326 audit(2000000730.973:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18649 comm="syz.2.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 270.266038][ T28] audit: type=1326 audit(2000000731.003:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18649 comm="syz.2.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 270.315370][ T28] audit: type=1326 audit(2000000731.003:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18649 comm="syz.2.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 270.340211][ T28] audit: type=1326 audit(2000000731.003:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18649 comm="syz.2.5404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 270.799096][T18690] program syz.7.5422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.066456][T18707] sctp: [Deprecated]: syz.6.5430 (pid 18707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.066456][T18707] Use struct sctp_sack_info instead [ 271.144967][T18714] usb usb7: usbfs: process 18714 (syz.6.5433) did not claim interface 0 before use [ 271.268580][T18724] loop8: detected capacity change from 0 to 4096 [ 271.282975][T18724] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.334263][T18724] EXT4-fs (loop8): shut down requested (1) [ 271.340445][T18728] loop6: detected capacity change from 0 to 1024 [ 271.376312][T18724] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 271.386076][T18728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.400508][T18724] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 271.416723][T18724] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 271.441640][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.478764][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.508751][ T28] audit: type=1400 audit(2000000732.303:1810): avc: denied { listen } for pid=18741 comm="syz.6.5442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 271.560623][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5446'. [ 271.725784][T18762] loop7: detected capacity change from 0 to 1024 [ 271.757395][T18762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.900744][T15121] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.937702][T18770] sctp: [Deprecated]: syz.2.5457 (pid 18770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.937702][T18770] Use struct sctp_sack_info instead [ 271.985557][T18775] netlink: 'syz.8.5455': attribute type 16 has an invalid length. [ 272.002370][T18775] netlink: 'syz.8.5455': attribute type 17 has an invalid length. [ 272.026417][T18774] loop4: detected capacity change from 0 to 512 [ 272.045062][T18774] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.056353][T18774] EXT4-fs (loop4): 1 truncate cleaned up [ 272.059941][T18775] gtp1: left promiscuous mode [ 272.062616][T18774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.089643][T18775] gtp1: left allmulticast mode [ 272.091014][T18774] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.5458: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 272.114798][ T28] audit: type=1400 audit(2000000732.893:1811): avc: denied { rename } for pid=18773 comm="syz.4.5458" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.143699][T18780] gretap0: left promiscuous mode [ 272.150089][T18774] EXT4-fs (loop4): Remounting filesystem read-only [ 272.156745][T18774] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.5458: Deleting old file: nlink 5, error=-117 [ 272.186546][ T28] audit: type=1400 audit(2000000732.893:1812): avc: denied { rmdir } for pid=18773 comm="syz.4.5458" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 272.214571][T18780] erspan0: left promiscuous mode [ 272.235527][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.256701][T18784] usb usb7: usbfs: process 18784 (syz.7.5461) did not claim interface 0 before use [ 272.287801][T18780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.296005][T18780] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.306303][T18780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.439326][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5469'. [ 272.463172][T18802] netlink: 'syz.7.5478': attribute type 16 has an invalid length. [ 272.477110][T18802] netlink: 'syz.7.5478': attribute type 17 has an invalid length. [ 272.510807][T18802] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.567207][T18812] syzkaller1: entered promiscuous mode [ 272.572823][T18812] syzkaller1: entered allmulticast mode [ 272.846772][T18823] usb usb7: usbfs: process 18823 (syz.8.5477) did not claim interface 0 before use [ 272.860072][T18826] loop7: detected capacity change from 0 to 1024 [ 272.878307][T18826] EXT4-fs: Ignoring removed bh option [ 272.898025][T18826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.910892][T18826] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.980271][T18829] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.5479: lblock 0 mapped to illegal pblock 0 (length 6) [ 272.996418][T18829] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 273.008759][T18829] EXT4-fs (loop7): This should not happen!! Data will be lost [ 273.008759][T18829] [ 273.018847][T18829] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5479: bg 0: block 112: padding at end of block bitmap is not set [ 273.037050][ T167] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 273.051973][ T167] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 273.064368][ T167] EXT4-fs (loop7): This should not happen!! Data will be lost [ 273.064368][ T167] [ 273.125652][ T167] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 180 with error 28 [ 273.148478][ T167] EXT4-fs (loop7): This should not happen!! Data will be lost [ 273.148478][ T167] [ 273.178787][ T167] EXT4-fs (loop7): Total free blocks count 0 [ 273.188863][ T167] EXT4-fs (loop7): Free/Dirty block details [ 273.200530][ T167] EXT4-fs (loop7): free_blocks=0 [ 273.298489][ T28] audit: type=1400 audit(2000000734.093:1813): avc: denied { create } for pid=18849 comm="syz.2.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 273.652497][T18866] loop7: detected capacity change from 0 to 128 [ 273.665660][T18867] loop8: detected capacity change from 0 to 1024 [ 273.700676][T18867] EXT4-fs: Ignoring removed bh option [ 273.731403][T18867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.744324][T18867] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.809422][T18876] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.5495: lblock 0 mapped to illegal pblock 0 (length 6) [ 273.822917][T18876] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 273.835373][T18876] EXT4-fs (loop8): This should not happen!! Data will be lost [ 273.835373][T18876] [ 273.845281][T18876] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5495: bg 0: block 112: padding at end of block bitmap is not set [ 273.861742][ T8017] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8) [ 273.876544][ T8017] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 273.888810][ T8017] EXT4-fs (loop8): This should not happen!! Data will be lost [ 273.888810][ T8017] [ 273.937997][ T8017] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 1652 with error 28 [ 273.950754][ T8017] EXT4-fs (loop8): This should not happen!! Data will be lost [ 273.950754][ T8017] [ 273.960402][ T8017] EXT4-fs (loop8): Total free blocks count 0 [ 273.966373][ T8017] EXT4-fs (loop8): Free/Dirty block details [ 273.974257][ T8017] EXT4-fs (loop8): free_blocks=0 [ 274.240725][T18892] batadv_slave_1: entered promiscuous mode [ 274.247278][T18891] batadv_slave_1: left promiscuous mode [ 274.281039][T18890] loop6: detected capacity change from 0 to 128 [ 274.302271][T18890] msdos: Bad value for 'gid' [ 274.307342][T18890] msdos: Bad value for 'gid' [ 274.362563][T18900] loop6: detected capacity change from 0 to 764 [ 274.432819][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5513'. [ 274.441939][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5513'. [ 274.454526][ T8017] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.463852][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5513'. [ 274.472928][ T8017] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.482127][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5513'. [ 274.491441][ T8017] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.508265][ T8017] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.720191][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5522'. [ 274.741025][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5522'. [ 274.894959][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5527'. [ 274.922925][T18939] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5527'. [ 274.955428][ T167] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.000149][ T167] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.032654][ T167] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.056924][ T167] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.441307][T18968] loop8: detected capacity change from 0 to 128 [ 276.297929][T19004] set_capacity_and_notify: 1 callbacks suppressed [ 276.297946][T19004] loop4: detected capacity change from 0 to 512 [ 276.359354][T19004] EXT4-fs (loop4): 1 truncate cleaned up [ 276.370736][T19004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.460511][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 276.460527][ T28] audit: type=1400 audit(2000000737.243:1816): avc: denied { write } for pid=19003 comm="syz.4.5558" name="file3" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 276.518417][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.540413][ T28] audit: type=1400 audit(2000000737.243:1817): avc: denied { rename } for pid=19003 comm="syz.4.5558" name="file3" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 276.605851][ T28] audit: type=1400 audit(2000000737.243:1818): avc: denied { reparent } for pid=19003 comm="syz.4.5558" name="file3" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 276.665996][ T28] audit: type=1400 audit(2000000737.443:1819): avc: denied { write } for pid=19024 comm="syz.6.5567" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 276.771851][T19033] __nla_validate_parse: 3 callbacks suppressed [ 276.771868][T19033] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5570'. [ 276.808964][T19033] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5570'. [ 276.949182][ T28] audit: type=1326 audit(2000000737.743:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.7.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead648c799 code=0x7ffc0000 [ 276.973227][ T28] audit: type=1326 audit(2000000737.743:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.7.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead648c799 code=0x7ffc0000 [ 277.007983][ T28] audit: type=1326 audit(2000000737.743:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.7.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fead648c799 code=0x7ffc0000 [ 277.035890][ T28] audit: type=1326 audit(2000000737.743:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.7.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead648c799 code=0x7ffc0000 [ 277.061545][ T28] audit: type=1326 audit(2000000737.753:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19044 comm="syz.7.5576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead648c799 code=0x7ffc0000 [ 277.128313][T19058] loop7: detected capacity change from 0 to 256 [ 277.219287][T19062] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5583'. [ 277.228431][T19062] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5583'. [ 277.508438][T19073] loop4: detected capacity change from 0 to 1024 [ 277.517177][T19073] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 277.528233][T19073] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 277.538437][T19073] JBD2: no valid journal superblock found [ 277.544441][T19073] EXT4-fs (loop4): Could not load journal inode [ 277.605080][T19075] syzkaller1: entered promiscuous mode [ 277.610731][T19075] syzkaller1: entered allmulticast mode [ 277.636192][T19073] loop4: detected capacity change from 0 to 8192 [ 277.642865][T19073] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 277.721188][ T28] audit: type=1326 audit(2000000738.523:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19080 comm="syz.7.5592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead648c799 code=0x7ffc0000 [ 277.894505][T19105] loop4: detected capacity change from 0 to 1024 [ 277.903856][T19105] EXT4-fs: inline encryption not supported [ 277.929200][T19105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.036835][T15656] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.267271][T19140] netlink: 'syz.2.5617': attribute type 4 has an invalid length. [ 278.395564][T19148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5621'. [ 278.604487][T19159] loop4: detected capacity change from 0 to 1024 [ 278.616212][T19159] ext4: Unknown parameter 'uid' [ 278.694730][T19163] loop4: detected capacity change from 0 to 128 [ 279.033220][T19190] loop7: detected capacity change from 0 to 1024 [ 279.050122][T19190] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 279.063011][T19190] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 279.073893][T19190] JBD2: no valid journal superblock found [ 279.079749][T19190] EXT4-fs (loop7): Could not load journal inode [ 279.188318][T19192] loop7: detected capacity change from 0 to 8192 [ 279.195041][T19192] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 279.373963][T19207] loop6: detected capacity change from 0 to 1024 [ 279.397176][T19207] EXT4-fs: inline encryption not supported [ 279.427131][T19207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.452057][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.515088][T19223] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 279.526229][T19223] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 279.537099][T19223] JBD2: no valid journal superblock found [ 279.543016][T19223] EXT4-fs (loop8): Could not load journal inode [ 279.629582][T19223] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 279.805036][T19238] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5671'. [ 280.164026][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5674'. [ 280.744240][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5689'. [ 280.782092][T19306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.855015][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.995914][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5700'. [ 281.030463][T19328] netlink: 'syz.4.5700': attribute type 30 has an invalid length. [ 281.052757][T19328] netlink: 'syz.4.5700': attribute type 29 has an invalid length. [ 281.074012][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5700'. [ 281.195908][T19334] syzkaller1: entered promiscuous mode [ 281.201613][T19334] syzkaller1: entered allmulticast mode [ 281.488076][T19355] set_capacity_and_notify: 5 callbacks suppressed [ 281.488092][T19355] loop8: detected capacity change from 0 to 1024 [ 281.506921][T19359] sctp: [Deprecated]: syz.2.5712 (pid 19359) Use of int in maxseg socket option. [ 281.506921][T19359] Use struct sctp_assoc_value instead [ 281.532858][T19355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 281.547472][T19355] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.570849][T19361] SELinux: Context : is not valid (left unmapped). [ 281.580644][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 281.580657][ T28] audit: type=1400 audit(2000000742.373:1856): avc: denied { relabelto } for pid=19360 comm="syz.7.5716" name="rdma.current" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 281.611970][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.622638][T19369] loop6: detected capacity change from 0 to 256 [ 281.633498][ T28] audit: type=1400 audit(2000000742.373:1857): avc: denied { associate } for pid=19360 comm="syz.7.5716" name="rdma.current" dev="tmpfs" ino=1638 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 281.694683][ T28] audit: type=1400 audit(2000000742.483:1858): avc: denied { unlink } for pid=15121 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 281.736977][T19377] batadv_slave_1: entered promiscuous mode [ 281.753351][T19376] batadv_slave_1: left promiscuous mode [ 281.920122][T19386] loop8: detected capacity change from 0 to 1024 [ 281.935760][T19386] ext4: Unknown parameter 'uid' [ 281.959549][T19393] sctp: [Deprecated]: syz.6.5727 (pid 19393) Use of int in maxseg socket option. [ 281.959549][T19393] Use struct sctp_assoc_value instead [ 281.967670][ T28] audit: type=1326 audit(2000000742.763:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19390 comm="syz.2.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 282.025836][ T28] audit: type=1326 audit(2000000742.763:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19390 comm="syz.2.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 282.049820][ T28] audit: type=1326 audit(2000000742.803:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19390 comm="syz.2.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 282.074037][ T28] audit: type=1326 audit(2000000742.803:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19390 comm="syz.2.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 282.097716][ T28] audit: type=1326 audit(2000000742.803:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19390 comm="syz.2.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 282.216756][ T28] audit: type=1400 audit(2000000743.003:1864): avc: denied { map } for pid=19407 comm="syz.6.5736" path="socket:[58873]" dev="sockfs" ino=58873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 282.245265][T19412] batadv_slave_1: entered promiscuous mode [ 282.261213][ T28] audit: type=1400 audit(2000000743.003:1865): avc: denied { read accept } for pid=19407 comm="syz.6.5736" path="socket:[58873]" dev="sockfs" ino=58873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 282.271009][T19411] batadv_slave_1: left promiscuous mode [ 282.290896][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5740'. [ 282.305563][T19415] netlink: 'syz.7.5740': attribute type 30 has an invalid length. [ 282.329586][T19415] netlink: 'syz.7.5740': attribute type 29 has an invalid length. [ 282.338416][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5740'. [ 282.340502][T19420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5742'. [ 282.368984][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5742'. [ 283.024809][T19484] loop8: detected capacity change from 0 to 512 [ 283.036977][T19484] SELinux: security_context_str_to_sid () failed with errno=-22 [ 283.073054][T19478] loop7: detected capacity change from 0 to 8192 [ 283.097830][T19489] vhci_hcd vhci_hcd.3: default hub control req: 800f v0000 i0000 l31125 [ 283.114917][T19478] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 283.127499][T19478] FAT-fs (loop7): Filesystem has been set read-only [ 283.152068][T19491] loop8: detected capacity change from 0 to 512 [ 283.213650][T19491] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.5773: inode has both inline data and extents flags [ 283.232556][T19491] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 283.232720][T19491] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5773: couldn't read orphan inode 15 (err -117) [ 283.241887][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 283.241902][ C0] EXT4-fs (loop8): initial error at time 2000000744: ext4_orphan_get:1391: inode 15 [ 283.241925][ C0] EXT4-fs (loop8): last error at time 2000000744: ext4_orphan_get:1391: inode 15 [ 283.325504][T19491] loop8: lost filesystem error report for type 5 error -117 [ 283.326338][T19491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.368222][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.416035][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5782'. [ 283.801009][T15132] udevd[15132]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 283.813819][T19537] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5791'. [ 283.823704][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5791'. [ 285.493832][T19693] bpf: Bad value for 'gid' [ 285.535052][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5864'. [ 285.708399][T19706] netlink: 'syz.8.5866': attribute type 13 has an invalid length. [ 285.752263][T19706] erspan0: refused to change device tx_queue_len [ 285.788357][T19706] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 286.007665][T19730] loop8: detected capacity change from 0 to 512 [ 286.043340][T19727] loop6: detected capacity change from 0 to 1024 [ 286.053329][T19727] ext4: Unknown parameter 'uid' [ 286.114124][T19730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.261353][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.398307][T19757] netlink: 'syz.6.5891': attribute type 4 has an invalid length. [ 286.515715][T19767] loop8: detected capacity change from 0 to 256 [ 286.722869][T19779] netlink: 'syz.6.5902': attribute type 3 has an invalid length. [ 286.801595][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 286.801610][ T28] audit: type=1326 audit(2000000747.603:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 286.813491][T19788] loop6: detected capacity change from 0 to 1024 [ 286.849495][ T28] audit: type=1326 audit(2000000747.633:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 286.873973][ T28] audit: type=1326 audit(2000000747.633:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 286.899599][T19788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.922261][T19788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.935588][ T28] audit: type=1326 audit(2000000747.633:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 286.959816][ T28] audit: type=1326 audit(2000000747.633:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 286.983410][ T28] audit: type=1326 audit(2000000747.633:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 287.007207][ T28] audit: type=1326 audit(2000000747.633:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 287.031041][ T28] audit: type=1326 audit(2000000747.633:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 287.054760][ T28] audit: type=1326 audit(2000000747.643:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 287.078412][ T28] audit: type=1326 audit(2000000747.643:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19784 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x7ffc0000 [ 287.122081][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.224287][T19800] netlink: 'syz.8.5911': attribute type 4 has an invalid length. [ 287.256196][T19808] loop6: detected capacity change from 0 to 1024 [ 287.309909][T19816] loop8: detected capacity change from 0 to 128 [ 287.327791][T19808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 287.343250][T19816] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 287.344428][T19808] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.356431][T19820] netlink: 'syz.7.5921': attribute type 1 has an invalid length. [ 287.372667][T19816] System zones: 1-3, 19-19, 35-36 [ 287.385805][T19808] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5915: bg 0: block 112: padding at end of block bitmap is not set [ 287.395942][T19816] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 287.412765][T19733] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 287.450525][T19816] ext4 filesystem being mounted at /642/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.498119][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 287.556126][T19816] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups) [ 287.587652][T19837] loop6: detected capacity change from 0 to 512 [ 287.594491][T10774] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.943598][T19866] loop6: detected capacity change from 0 to 1024 [ 287.969443][T19866] ext4: Unknown parameter 'uid' [ 288.137078][T19892] loop6: detected capacity change from 0 to 2048 [ 288.183848][T19896] loop8: detected capacity change from 0 to 1024 [ 288.193881][T19896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.233939][T19896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.286606][T19904] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 288.306044][T19910] loop6: detected capacity change from 0 to 1024 [ 288.327432][T19910] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.338784][T19910] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.354413][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.370309][T19910] JBD2: no valid journal superblock found [ 288.405868][T19910] EXT4-fs (loop6): Could not load journal inode [ 288.488437][T19926] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5966'. [ 288.605355][T19910] loop6: detected capacity change from 0 to 8192 [ 288.613968][T19941] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5974'. [ 288.623336][T19910] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 288.810388][T19951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.840472][T19951] ext4 filesystem being mounted at /654/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.865045][T19951] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5978: bg 0: block 112: padding at end of block bitmap is not set [ 288.937698][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 289.110751][T19973] EXT4-fs: Ignoring removed bh option [ 289.132666][T19973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.145423][T19973] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.190011][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.275474][T19986] EXT4-fs: Ignoring removed bh option [ 289.287877][T19986] EXT4-fs: inline encryption not supported [ 289.294229][T19986] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.312641][T19986] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 289.327991][T19986] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5989: bg 0: block 248: padding at end of block bitmap is not set [ 289.342749][T19986] loop6: lost filesystem error report for type 5 error -117 [ 289.343192][T19986] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.5989: Failed to acquire dquot type 1 [ 289.360340][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 289.361819][T19986] loop6: lost filesystem error report for type 5 error -117 [ 289.368203][ C0] EXT4-fs (loop6): last error at time 2000000750: ext4_acquire_dquot:7001 [ 289.371231][T19986] EXT4-fs (loop6): 1 truncate cleaned up [ 289.375503][ C0] [ 289.385179][T19986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 289.463747][T15457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 289.474168][ T59] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 289.510280][ T59] loop6: lost filesystem error report for type 5 error -117 [ 289.643091][T19999] netlink: 'syz.6.5995': attribute type 3 has an invalid length. [ 289.862610][T20018] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6001'. [ 289.926364][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6005'. [ 289.936153][T20028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.997323][T20031] EXT4-fs: Ignoring removed bh option [ 290.012176][T20031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.024934][T20031] ext4 filesystem being mounted at /659/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.046118][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.279676][T20048] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6013'. [ 290.799268][T20083] netlink: 'syz.6.6029': attribute type 3 has an invalid length. [ 291.776202][T20138] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 291.795669][T20138] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 291.799768][T20144] xt_hashlimit: size too large, truncated to 1048576 [ 291.815791][T20140] futex_wake_op: syz.7.6055 tries to shift op by -1; fix this program [ 292.013570][T20156] set_capacity_and_notify: 5 callbacks suppressed [ 292.013587][T20156] loop6: detected capacity change from 0 to 512 [ 292.036069][T20156] EXT4-fs: Ignoring removed nobh option [ 292.047772][T20156] EXT4-fs: Ignoring removed bh option [ 292.055332][T20156] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 292.068739][T20156] EXT4-fs (loop6): 1 truncate cleaned up [ 292.081065][T20156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.125952][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 292.125966][ T28] audit: type=1400 audit(2000000752.923:1971): avc: denied { mounton } for pid=20152 comm="syz.6.6060" path="/336/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 292.136691][T15457] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 292.173041][T15457] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 292.200546][T15457] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 292.206752][ T28] audit: type=1400 audit(2000000752.933:1972): avc: denied { rmdir } for pid=15457 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.295922][T19675] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.324685][T20181] batadv_slave_1: entered promiscuous mode [ 292.331047][T20181] batadv_slave_1: left promiscuous mode [ 292.344070][ T28] audit: type=1400 audit(2000000753.143:1973): avc: denied { mounton } for pid=20182 comm="syz.8.6074" path="/proc/1510/cgroup" dev="proc" ino=61376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 292.368345][ T7999] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.418807][ T7999] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.481459][ T7999] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.522843][ T7999] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.585903][ T28] audit: type=1400 audit(2000000753.383:1974): avc: denied { read write } for pid=20214 comm="syz.8.6087" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 292.610725][T13128] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 292.614870][T20194] chnl_net:caif_netlink_parms(): no params data found [ 292.626236][T13128] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.641366][ T28] audit: type=1400 audit(2000000753.383:1975): avc: denied { open } for pid=20214 comm="syz.8.6087" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 292.680484][ T7999] bridge_slave_1: left allmulticast mode [ 292.686143][ T7999] bridge_slave_1: left promiscuous mode [ 292.707680][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.722251][ T7999] bridge_slave_0: left allmulticast mode [ 292.727935][ T7999] bridge_slave_0: left promiscuous mode [ 292.737972][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.812890][ T7999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.822314][ T7999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.831646][ T7999] bond0 (unregistering): Released all slaves [ 292.865078][T20194] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.872290][T20194] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.879392][T20194] bridge_slave_0: entered allmulticast mode [ 292.885975][T20194] bridge_slave_0: entered promiscuous mode [ 292.894303][T20194] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.901369][T20194] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.908481][T20194] bridge_slave_1: entered allmulticast mode [ 292.914984][T20194] bridge_slave_1: entered promiscuous mode [ 292.921253][ T7999] tipc: Disabling bearer [ 292.926570][ T7999] tipc: Left network mode [ 292.942344][T20194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.961320][ T7999] hsr_slave_0: left promiscuous mode [ 292.967192][ T7999] hsr_slave_1: left promiscuous mode [ 293.005698][ T7999] team0 (unregistering): Port device team_slave_1 removed [ 293.015500][ T7999] team0 (unregistering): Port device team_slave_0 removed [ 293.051060][T20194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.071213][T20194] team0: Port device team_slave_0 added [ 293.077841][T20194] team0: Port device team_slave_1 added [ 293.096360][T20194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.104024][T20194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.131879][T20194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.143763][T20194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.151498][T20194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.178346][T20194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.212867][T20194] hsr_slave_0: entered promiscuous mode [ 293.219906][T20194] hsr_slave_1: entered promiscuous mode [ 293.225951][T20194] debugfs: 'hsr0' already exists in 'hsr' [ 293.231905][T20194] Cannot create hsr debugfs directory [ 293.237298][ T28] audit: type=1326 audit(2000000754.033:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20186 comm="syz.7.6078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead648c799 code=0x7fc00000 [ 293.391108][T20265] SELinux: failed to load policy [ 293.482264][ T28] audit: type=1326 audit(2000000754.283:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.2.6097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f262dc4c799 code=0x0 [ 293.560417][ T28] audit: type=1400 audit(2000000754.353:1978): avc: denied { read } for pid=20299 comm="syz.8.6098" name="file0" dev="tmpfs" ino=3570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 294.119642][ T28] audit: type=1400 audit(2000000754.913:1979): avc: denied { connect } for pid=20394 comm="syz.4.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.166891][T20194] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 294.178357][T20194] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 294.198170][T20194] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 294.227845][T20194] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 294.294013][T20429] team0: Port device syz_tun added [ 294.384915][T20194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.470636][T20194] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.579161][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.586254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.621872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.628953][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.642482][T20467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6128'. [ 294.656986][T20467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6128'. [ 294.694187][T20194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.735932][ T28] audit: type=1326 audit(2000000755.533:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20477 comm="syz.8.6131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00861cc799 code=0x7ffc0000 [ 294.805351][T20194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.024962][T20194] veth0_vlan: entered promiscuous mode [ 295.048255][T20194] veth1_vlan: entered promiscuous mode [ 295.079561][T20194] veth0_macvtap: entered promiscuous mode [ 295.094915][T20194] veth1_macvtap: entered promiscuous mode [ 295.117546][T20194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.130458][T20194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.149030][ T8011] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.163284][ T8011] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.192452][ T8011] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.207974][ T8011] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.306462][T20552] team0: Port device syz_tun added [ 295.759198][T20619] loop8: detected capacity change from 0 to 512 [ 295.782049][T20619] EXT4-fs: Mount option(s) incompatible with ext2 [ 295.841628][T20625] loop8: detected capacity change from 0 to 2048 [ 295.874190][T20625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.903761][T20634] loop9: detected capacity change from 0 to 512 [ 295.921959][T20634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.956061][T20634] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #11: comm syz.9.6155: iget: bad extended attribute block 3153 [ 295.971954][T20634] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.972110][T20634] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6155: couldn't read orphan inode 11 (err -117) [ 295.981327][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 295.981342][ C1] EXT4-fs (loop9): initial error at time 2000000756: ext4_orphan_get:1391: inode 11 [ 295.981364][ C1] EXT4-fs (loop9): last error at time 2000000756: ext4_orphan_get:1391: inode 11 [ 296.032177][T20634] loop9: lost filesystem error report for type 5 error -117 [ 296.032691][T20634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.067011][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.141229][T20194] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.386792][T20653] syzkaller1: entered promiscuous mode [ 296.392646][T20653] syzkaller1: entered allmulticast mode [ 296.495289][ T167] Bluetooth: hci0: Frame reassembly failed (-84) [ 297.146428][T20696] loop8: detected capacity change from 0 to 1024 [ 297.156758][T20696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 297.166399][T20696] System zones: 0-1, 3-36 [ 297.180429][T20696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.195320][T20696] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 297.215781][T10774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.559704][T20730] SELinux: failed to load policy [ 297.745328][T20750] loop9: detected capacity change from 0 to 8192 [ 297.984826][ T8011] ================================================================== [ 297.992938][ T8011] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 298.001192][ T8011] [ 298.003510][ T8011] write to 0xffff88815d2b1466 of 2 bytes by task 20759 on cpu 0: [ 298.011226][ T8011] fat16_ent_put+0x28/0x60 [ 298.015645][ T8011] fat_ent_write+0x6c/0xe0 [ 298.020071][ T8011] fat_chain_add+0x16c/0x490 [ 298.024664][ T8011] fat_get_block+0x46c/0x5e0 [ 298.029253][ T8011] __block_write_begin_int+0x400/0xf90 [ 298.034718][ T8011] cont_write_begin+0x5fe/0x970 [ 298.039575][ T8011] fat_write_begin+0x4f/0xe0 [ 298.044163][ T8011] cont_write_begin+0x1b0/0x970 [ 298.049019][ T8011] fat_write_begin+0x4f/0xe0 [ 298.053616][ T8011] generic_cont_expand_simple+0xb0/0x150 [ 298.059247][ T8011] fat_cont_expand+0x3e/0x170 [ 298.063922][ T8011] fat_setattr+0x2a4/0x870 [ 298.068342][ T8011] notify_change+0x872/0x8f0 [ 298.072929][ T8011] do_ftruncate+0x349/0x3d0 [ 298.077432][ T8011] __x64_sys_ftruncate+0x68/0xc0 [ 298.082371][ T8011] x64_sys_call+0x2beb/0x3020 [ 298.087069][ T8011] do_syscall_64+0x12c/0x370 [ 298.091665][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.097566][ T8011] [ 298.099887][ T8011] read to 0xffff88815d2b1400 of 512 bytes by task 8011 on cpu 1: [ 298.107597][ T8011] copy_folio_from_iter_atomic+0x75f/0x1170 [ 298.113505][ T8011] generic_perform_write+0x2c1/0x490 [ 298.118805][ T8011] shmem_file_write_iter+0xc5/0xf0 [ 298.123930][ T8011] lo_rw_aio+0x67d/0x730 [ 298.128187][ T8011] loop_process_work+0x56c/0xac0 [ 298.133145][ T8011] loop_workfn+0x31/0x40 [ 298.137404][ T8011] process_scheduled_works+0x513/0xa10 [ 298.142868][ T8011] worker_thread+0x58a/0x780 [ 298.147473][ T8011] kthread+0x22a/0x280 [ 298.151544][ T8011] ret_from_fork+0x150/0x360 [ 298.156140][ T8011] ret_from_fork_asm+0x1a/0x30 [ 298.160904][ T8011] [ 298.163221][ T8011] Reported by Kernel Concurrency Sanitizer on: [ 298.169369][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 298.178903][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.188993][ T8011] Workqueue: loop9 loop_workfn [ 298.193777][ T8011] ================================================================== [ 298.530570][ T8781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 298.533387][ T3563] Bluetooth: hci0: command 0x1003 tx timeout [ 299.491731][T20659] Bluetooth: hci0: Opcode 0x0c1a failed: -4