last executing test programs: 6m19.896816477s ago: executing program 32 (id=1182): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m15.923874855s ago: executing program 33 (id=4080): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa) 4m23.280686844s ago: executing program 34 (id=5591): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 4m21.412430836s ago: executing program 35 (id=5642): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffee000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 3m10.900937527s ago: executing program 36 (id=8474): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 2m48.9472539s ago: executing program 37 (id=8664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 2m38.145699094s ago: executing program 38 (id=8932): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 2m18.107221274s ago: executing program 39 (id=9290): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x40) 2m16.58758179s ago: executing program 40 (id=9311): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) 2m16.107531054s ago: executing program 41 (id=9336): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000280)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(r0, 0x3) 2m4.608937909s ago: executing program 42 (id=9470): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 1m58.232663428s ago: executing program 0 (id=9754): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf252100000024002d8005000400010000003552e66bffe370800800030008000000080002000300000008000300", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4042440}, 0x900) 1m58.139560593s ago: executing program 0 (id=9755): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m58.071443686s ago: executing program 0 (id=9758): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000d190000f10000000000000630000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 1m58.00236897s ago: executing program 0 (id=9759): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 1m57.955597002s ago: executing program 0 (id=9769): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 1m57.459598287s ago: executing program 0 (id=9763): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c) 1m57.459534137s ago: executing program 43 (id=9763): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c) 1m43.649003677s ago: executing program 6 (id=10144): r0 = getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') unshare(0x2c020400) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) 1m43.610703099s ago: executing program 6 (id=10145): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0xa8a00) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x20f6b1, 0x3180, 0x3, 0x60024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 1m43.545320013s ago: executing program 6 (id=10148): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fb, &(0x7f0000002440)="$eJzs3T9vW1UUAPAT1yWu07TlX6GdrmCB5YkyMLFEyJVQLYHaGqllelUcsGxsK8+DjZCIxMbEB2FkY+EL8EkqFhjohFFjJ3GikD+Kk5Do91t85PPOu/ddS0961j16zz/+6Zv2WpGt5YMoLSxEuR+RXqRIUYorMbER7/9w/68fHz15+mClXq89TKmy8vjeRymVI+LL735+57fB0he/3Ph1MUrTitu/33n+z+OvW0VqFanbG6Q8Pev1BvmzTjOttop2ltLnnebL87e6RXN9V36t0+v3Rynvri5X++vNokh5d5TazVEa9NL3EZF/lbe6KcuytFwNKieobWz9xOOr8UqMx+PxtajGUlyP5bgRN+NWvBqvxevxRrwZt+OteDvubB61fYKNE08fAAAAAAAAAAAAAAAAAAAAiBeb3fzjQ/v/l/bv/wcAAAAAAAAAAAAAAAAAAADmYLb//+/jv/8fAAAAAAAAAAAAAAAAAAAAmIOjvv9f/z8AAAAAAAAAAAAAAAAAAACcnkdPnj5YqddrD1OqRPyxMWwMG5PPSf7+p/XaB2lTeafqz+GwcWU7f2+ST5NceZpfjGpElKJe+3BXfqu+Eu+9O6l/mfvks/qe/N1YPZslAAAAgEsvS9tu7Xy783yfZf+Vn0Qz/w/seX4vx91yRFzfPV75dC+HYypG37bzTqe5flAQpZmDF6eVh1bNL7g5HfIsxppfsHDkhboaEec11Yu2qvsGlelS/1/mcxmCs74TcR5mbvIAAAAAAAAAAABcIAduAxxPN96ecDthxLXzvkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBfduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwVAAAAP//lUZx2w==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x92800, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x9}) 1m43.217985299s ago: executing program 6 (id=10152): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0xe000000b, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1004001, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0/file0\x00') 1m42.769338252s ago: executing program 6 (id=10163): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m42.619210869s ago: executing program 6 (id=10165): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1m42.416581989s ago: executing program 9 (id=10167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) 1m42.242185388s ago: executing program 9 (id=10173): io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 1m42.089614825s ago: executing program 9 (id=10179): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000032c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '+]'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0xffff, 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x1000}) 1m41.881411226s ago: executing program 9 (id=10185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 1m41.726389224s ago: executing program 9 (id=10187): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m41.679770006s ago: executing program 9 (id=10188): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 1m27.558474302s ago: executing program 44 (id=10165): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1m26.649834328s ago: executing program 45 (id=10188): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 1m22.804128449s ago: executing program 4 (id=10241): ioperm(0x0, 0x7, 0x80006) r0 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550d, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1m22.751481992s ago: executing program 4 (id=10243): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x440e0) 1m22.675177566s ago: executing program 4 (id=10249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000180), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 1m22.59211093s ago: executing program 4 (id=10252): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2002, 0x0) 1m22.541335523s ago: executing program 4 (id=10256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x205, &(0x7f0000002500)=0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x5, 0x1000, r0, 0x0}]) 1m22.268215896s ago: executing program 4 (id=10262): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,nfs,dots,nfs=stale_rw,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x8, 0x8000000000000000}) 1m22.233410028s ago: executing program 46 (id=10262): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,nfs,dots,nfs=stale_rw,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x8, 0x8000000000000000}) 14.948422193s ago: executing program 8 (id=12088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xc000}}, 0x20}}, 0x4) 14.865445477s ago: executing program 8 (id=12092): unshare(0x22020600) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 14.840025318s ago: executing program 8 (id=12093): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 14.779336571s ago: executing program 8 (id=12095): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 14.655214897s ago: executing program 8 (id=12096): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 14.435528599s ago: executing program 8 (id=12101): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 14.435399899s ago: executing program 47 (id=12101): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 4.091677925s ago: executing program 7 (id=12449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 4.043008608s ago: executing program 3 (id=12451): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.183517812s ago: executing program 7 (id=12462): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0xffffffff, 0x400, 0x3, 0x2c5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) close_range(r0, 0xffffffffffffffff, 0x0) 3.131478504s ago: executing program 7 (id=12463): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 3.090517626s ago: executing program 7 (id=12464): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 2.20163158s ago: executing program 7 (id=12483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0xf5}, @val={0x0, 0x0, 0x6, 0xffff, 0x18}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) 2.146951353s ago: executing program 3 (id=12485): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) 2.113631125s ago: executing program 3 (id=12487): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0xffffffff, 0x1}, 0x1004, 0x0, 0x10000, 0x3, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 1.959598323s ago: executing program 7 (id=12489): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000001080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x3, "e50ae3033dd22381e9cb4861560e0c12146a45f6eba8e561c8d8dd776a58575e", "ea8349685d7c95315f9728035fecd30c", {"e6205c0920fe4624a0bb1ee446bb3fda", "f439459a7f749a4a30c059c0e9f40f17"}}}}}}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffff, 0x4) 1.066339297s ago: executing program 1 (id=12499): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 672.171107ms ago: executing program 3 (id=12506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="89ff00000000e9ff", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) 671.800837ms ago: executing program 3 (id=12507): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x20000000) 623.377029ms ago: executing program 3 (id=12508): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0xd}, &(0x7f00000000c0)=0x8) 622.963989ms ago: executing program 5 (id=12509): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x2}, 0xd}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 510.535575ms ago: executing program 5 (id=12513): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 461.462087ms ago: executing program 5 (id=12515): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 326.161964ms ago: executing program 5 (id=12519): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 240.940379ms ago: executing program 5 (id=12522): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in=@broadcast, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x80000800, 0x300, 0x0, 0x0, 0xf42, 0x5, 0x2}, {0x8, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@loopback, 0x4, 0x33}, 0xa, @in=@rand_addr=0x64010100, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffa}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 237.236618ms ago: executing program 2 (id=12532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="000086dd00001100000000000000600000000f982cfffe8000000000000000000000000000aaff0200000000000000000000000000012f000000000000000401"], 0xfce) 217.93897ms ago: executing program 5 (id=12523): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0xb}, 0x8) 217.42672ms ago: executing program 1 (id=12524): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) write$ppp(r0, &(0x7f00000000c0)="000456b80ebe0b4bf8acee45ede38cb359439d8284c6711f94170ce8c09b4889195dcbb9ee753d65", 0x28) 170.738622ms ago: executing program 2 (id=12525): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x9803, 0xd5) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) 159.554473ms ago: executing program 2 (id=12526): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) 147.485073ms ago: executing program 2 (id=12527): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000c00)={0xa, 0x7, 0x9, 0xe0, 0x1, '\a\x00'}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) 134.292734ms ago: executing program 2 (id=12528): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 108.851935ms ago: executing program 1 (id=12529): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) 74.117777ms ago: executing program 2 (id=12530): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) poll(&(0x7f0000000080)=[{r0, 0x81}], 0x1, 0x2000009d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 66.846757ms ago: executing program 1 (id=12531): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) splice(r0, &(0x7f0000000040), r2, 0x0, 0x807, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/204, 0xcc}], 0x1) 55.253297ms ago: executing program 1 (id=12533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 0s ago: executing program 1 (id=12534): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): 392.087491][ T838] EXT4-fs: Ignoring removed oldalloc option [ 392.108310][ T838] EXT4-fs: Ignoring removed bh option [ 392.140143][ T838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.165077][ T28] audit: type=1400 audit(2000001980.753:2437): avc: denied { map } for pid=837 comm="syz.1.10627" path="/93/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 392.194034][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.218105][ T28] audit: type=1400 audit(2000001980.753:2438): avc: denied { execute } for pid=837 comm="syz.1.10627" path="/93/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 392.518879][ T865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.542710][ T865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.10624: inode #167772160: comm syz.2.10624: iget: illegal inode # [ 392.571708][ T871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=871 comm=syz.8.10628 [ 392.572175][ T865] EXT4-fs (loop2): Remounting filesystem read-only [ 392.591088][ T865] EXT4-fs warning (device loop2): ext4_xattr_block_set:2200: inode #19: comm syz.2.10624: dec ref error=-30 [ 392.636858][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.648131][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10633'. [ 392.669659][ T860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.682896][ T28] audit: type=1400 audit(2000001981.273:2439): avc: denied { write } for pid=881 comm="syz.7.10635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 392.709575][ T860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.923196][ T923] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.942172][ T923] EXT4-fs: Ignoring removed nobh option [ 392.949629][ T924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.990828][ T923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.020211][ T923] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.026394][ T924] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.10648: inode #167772160: comm syz.1.10648: iget: illegal inode # [ 393.058162][ T924] EXT4-fs (loop1): Remounting filesystem read-only [ 393.064694][ T924] EXT4-fs warning (device loop1): ext4_xattr_block_set:2200: inode #19: comm syz.1.10648: dec ref error=-30 [ 393.093536][T31548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.167763][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.237969][ T956] EXT4-fs (loop1): 1 truncate cleaned up [ 393.244020][ T956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.252224][ T961] EXT4-fs: Ignoring removed oldalloc option [ 393.271812][ T956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10654: bg 0: block 465: padding at end of block bitmap is not set [ 393.306719][ T961] EXT4-fs: Ignoring removed bh option [ 393.337711][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.352880][ T961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.457738][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.545204][ T28] audit: type=1400 audit(2000001982.133:2440): avc: denied { watch } for pid=981 comm="syz.7.10663" path="/76/file0" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 393.604860][ T28] audit: type=1400 audit(2000001982.193:2441): avc: denied { create } for pid=985 comm="syz.8.10665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.605861][ T986] ieee802154 phy0 wpan0: encryption failed: -126 [ 393.628610][ T28] audit: type=1400 audit(2000001982.193:2442): avc: denied { write } for pid=985 comm="syz.8.10665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.693409][ T989] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 393.723350][ T991] set_capacity_and_notify: 7 callbacks suppressed [ 393.723362][ T991] loop2: detected capacity change from 0 to 1024 [ 393.744765][ T991] EXT4-fs: inline encryption not supported [ 393.771837][ T991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.790343][ T991] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.10667: Allocating blocks 385-513 which overlap fs metadata [ 393.813726][ T1002] loop8: detected capacity change from 0 to 164 [ 393.820469][ T990] EXT4-fs (loop2): pa ffff888107c26c40: logic 16, phys. 129, len 24 [ 393.828475][ T990] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 393.902201][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.902635][ T1004] loop8: detected capacity change from 0 to 2048 [ 393.931629][ T1006] loop2: detected capacity change from 0 to 512 [ 393.941916][ T1006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.952994][ T1004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.953149][ T1006] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.10673: Invalid block bitmap block 0 in block_group 0 [ 393.979189][ T1006] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 393.987935][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 393.994388][ C0] EXT4-fs (loop2): initial error at time 2000001982: ext4_read_block_bitmap_nowait:483 [ 394.004061][ C0] EXT4-fs (loop2): last error at time 2000001982: ext4_read_block_bitmap_nowait:483 [ 394.016456][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.024321][ T1006] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.10673: attempt to clear invalid blocks 983261 len 1 [ 394.038958][ T1006] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 394.039118][ T1006] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.10673: Invalid inode table block 0 in block_group 0 [ 394.064357][ T1006] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 394.073909][ T1006] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 394.084015][ T1006] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.10673: Invalid inode table block 0 in block_group 0 [ 394.097112][ T1006] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 394.106886][ T1006] EXT4-fs error (device loop2): ext4_truncate:4587: inode #11: comm syz.2.10673: mark_inode_dirty error [ 394.119931][ T1006] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 394.120109][ T1006] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 394.138469][ T1006] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.10673: Invalid inode table block 0 in block_group 0 [ 394.151467][ T1006] EXT4-fs (loop2): 1 truncate cleaned up [ 394.157483][ T1006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.228673][ T1006] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 394.253495][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.296649][ T1033] loop5: detected capacity change from 0 to 512 [ 394.334668][ T1033] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 394.364328][ T1043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10683'. [ 394.376361][ T1043] netlink: 'syz.8.10683': attribute type 1 has an invalid length. [ 394.384468][ T1043] netlink: 'syz.8.10683': attribute type 2 has an invalid length. [ 394.394057][ T1033] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 394.408658][ T1033] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10679: bg 0: block 248: padding at end of block bitmap is not set [ 394.425496][ T1033] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.10679: Failed to acquire dquot type 1 [ 394.436815][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 394.436831][ C0] EXT4-fs (loop5): last error at time 2000001983: ext4_validate_block_bitmap:441 [ 394.453868][ T1033] EXT4-fs (loop5): 1 truncate cleaned up [ 394.459889][ T1033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 394.493265][ T1055] loop2: detected capacity change from 0 to 512 [ 394.568804][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 394.593318][ T3907] kernel write not supported for file bpf-prog (pid: 3907 comm: kworker/1:12) [ 394.660575][ T1078] loop2: detected capacity change from 0 to 512 [ 394.667115][ T1078] EXT4-fs: inline encryption not supported [ 394.696678][ T1078] EXT4-fs: Ignoring removed i_version option [ 394.754467][ T1078] EXT4-fs (loop2): 1 orphan inode deleted [ 394.767288][ T1078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.819921][ T1101] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10701'. [ 394.833592][ T1099] loop5: detected capacity change from 0 to 4096 [ 394.871000][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.891076][ T1099] EXT4-fs (loop5): shut down requested (1) [ 395.009066][ T1114] loop1: detected capacity change from 0 to 1024 [ 395.023075][ T1114] EXT4-fs: inline encryption not supported [ 395.057365][ T1114] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.10708: Allocating blocks 385-513 which overlap fs metadata [ 395.069995][ T1117] 9pnet: p9_errstr2errno: server reported unknown error [ 395.080235][ T1113] EXT4-fs (loop1): pa ffff888107c26c40: logic 16, phys. 129, len 24 [ 395.088365][ T1113] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 395.121865][ T1123] loop7: detected capacity change from 0 to 256 [ 395.128734][ T1123] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 395.169667][ T1123] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 395.245956][ T1131] netlink: 'syz.8.10714': attribute type 1 has an invalid length. [ 395.262361][ T1131] netlink: 16146 bytes leftover after parsing attributes in process `syz.8.10714'. [ 395.375352][ T1150] EXT4-fs: Ignoring removed mblk_io_submit option [ 395.403545][ T1150] EXT4-fs: Ignoring removed nobh option [ 395.502829][ T1154] EXT4-fs (loop8): 1 truncate cleaned up [ 395.509091][T31574] loop2: p1 p3 < > [ 395.509954][ T1150] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.527444][ T1138] loop2: p1 p3 < > [ 395.530214][ T1154] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10723: bg 0: block 465: padding at end of block bitmap is not set [ 395.572388][ T1147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.608953][ T1147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.669055][T31577] udevd[31577]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 395.680146][T31574] udevd[31574]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 395.696077][T31574] udevd[31574]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 395.707066][T31494] udevd[31494]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 395.846794][ T1176] netlink: 'syz.5.10732': attribute type 1 has an invalid length. [ 395.854994][ T1176] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.10732'. [ 396.227546][ T1193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.230657][ T1202] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 396.251246][ T1193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.270386][ T1202] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.410265][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10748'. [ 396.419302][ T1210] bond0: Unable to set down delay as MII monitoring is disabled [ 396.516554][ T1222] EXT4-fs (loop7): shut down requested (1) [ 396.587954][ T1233] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 396.603651][ T1233] FAT-fs (loop7): error, clusters badly computed (5 != 1) [ 396.611364][ T1233] FAT-fs (loop7): Filesystem has been set read-only [ 396.620034][ T1233] FAT-fs (loop7): error, clusters badly computed (6 != 2) [ 396.627420][ T1233] FAT-fs (loop7): error, clusters badly computed (7 != 3) [ 396.653555][ T1237] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 396.707789][ T1243] netlink: 'syz.7.10762': attribute type 3 has an invalid length. [ 396.716185][ T1243] netlink: 'syz.7.10762': attribute type 4 has an invalid length. [ 396.724287][ T1243] netlink: 108 bytes leftover after parsing attributes in process `syz.7.10762'. [ 396.774610][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 396.774644][ T28] audit: type=1326 audit(2000001985.363:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 396.808223][ T28] audit: type=1326 audit(2000001985.403:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 396.864796][ T28] audit: type=1326 audit(2000001985.403:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 396.919608][ T28] audit: type=1326 audit(2000001985.403:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 396.944126][ T28] audit: type=1326 audit(2000001985.403:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 396.986596][ T28] audit: type=1326 audit(2000001985.443:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 397.015684][ T28] audit: type=1326 audit(2000001985.443:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 397.053923][ T28] audit: type=1326 audit(2000001985.453:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 397.100205][ T28] audit: type=1326 audit(2000001985.453:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 397.158067][ T28] audit: type=1326 audit(2000001985.453:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1246 comm="syz.2.10764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 397.224347][ T1298] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 397.256678][ T1294] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 397.311727][ T1298] FAT-fs (loop5): error, clusters badly computed (5 != 1) [ 397.326848][ T1298] FAT-fs (loop5): Filesystem has been set read-only [ 397.348848][ T1298] FAT-fs (loop5): error, clusters badly computed (6 != 2) [ 397.369306][ T1298] FAT-fs (loop5): error, clusters badly computed (7 != 3) [ 397.558526][ T3864] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 397.682761][ T1334] : renamed from vlan0 (while UP) [ 397.905691][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10805'. [ 398.490578][ T1394] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.519660][ T1394] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 398.543783][ T1394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10823: bg 0: block 248: padding at end of block bitmap is not set [ 398.558774][ T1394] fserror_report: 11 callbacks suppressed [ 398.558850][ T1394] loop2: lost filesystem error report for type 5 error -117 [ 398.564802][ T1394] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.10823: Failed to acquire dquot type 1 [ 398.572125][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 398.572141][ C0] EXT4-fs (loop2): last error at time 2000001987: ext4_validate_block_bitmap:441 [ 398.599170][ T1394] loop2: lost filesystem error report for type 5 error -117 [ 398.611144][ T1394] EXT4-fs (loop2): 1 truncate cleaned up [ 398.760352][ T1413] syzkaller1: entered promiscuous mode [ 398.765938][ T1413] syzkaller1: entered allmulticast mode [ 398.800836][ T1417] set_capacity_and_notify: 13 callbacks suppressed [ 398.800850][ T1417] loop8: detected capacity change from 0 to 4096 [ 398.824392][ T1417] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 399.715562][ T1444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10842'. [ 399.779413][ T1448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10844'. [ 399.866066][ T1451] vlan2: entered promiscuous mode [ 399.891326][ T1451] hsr0: entered promiscuous mode [ 399.928901][ T1458] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10849'. [ 400.089300][ T1469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.116656][ T1469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.171291][ T1475] loop5: detected capacity change from 0 to 1024 [ 400.235103][ T1485] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10863'. [ 400.269137][ T1487] vlan2: entered promiscuous mode [ 400.274174][ T1487] hsr0: entered promiscuous mode [ 400.416287][ T1503] tipc: Enabled bearer , priority 10 [ 400.474000][ T1507] loop5: detected capacity change from 0 to 8192 [ 400.506507][ T1507] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 400.542917][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.567954][ T1507] FAT-fs (loop5): Filesystem has been set read-only [ 400.577635][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.595579][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.613687][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.632569][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.641782][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.651657][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.661041][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.669932][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.708821][ T1526] loop8: detected capacity change from 0 to 512 [ 400.713602][ T1507] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 400.791067][ T1526] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.396315][ T1554] loop8: detected capacity change from 0 to 128 [ 401.528339][ T3889] tipc: Node number set to 4280614912 [ 401.592966][ T1579] syzkaller1: entered promiscuous mode [ 401.609560][ T1579] syzkaller1: entered allmulticast mode [ 401.686827][ T1586] loop8: detected capacity change from 0 to 1764 [ 401.718305][ T1586] iso9660: Unknown parameter '' [ 401.933431][ T1596] loop8: detected capacity change from 0 to 32768 [ 401.984887][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10920'. [ 402.086764][ T1610] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.093960][ T1610] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.146947][ T1610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.156784][ T1610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.188763][T23724] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.197735][T23724] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.249549][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 402.249562][ T28] audit: type=1400 audit(2000001990.843:2488): avc: denied { ioctl } for pid=1619 comm="syz.2.10917" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.280989][T23724] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.291124][T23724] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.353869][ T1626] loop5: detected capacity change from 0 to 512 [ 402.369704][ T28] audit: type=1400 audit(2000001990.953:2489): avc: denied { create } for pid=1625 comm="syz.7.10921" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 402.434926][ T1634] loop7: detected capacity change from 0 to 512 [ 402.441446][ T1626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.458171][ T28] audit: type=1400 audit(2000001990.953:2490): avc: denied { write } for pid=1625 comm="syz.7.10921" name="file0" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 402.512286][ T1634] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10924: invalid indirect mapped block 256 (level 2) [ 402.537663][ T1634] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 402.537948][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 402.553490][ C1] EXT4-fs (loop7): initial error at time 2000001991: ext4_free_branches:1023: inode 11 [ 402.562873][ T28] audit: type=1400 audit(2000001990.953:2491): avc: denied { open } for pid=1625 comm="syz.7.10921" path="/117/file0" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 402.563144][ C1] EXT4-fs (loop7): last error at time 2000001991: ext4_free_branches:1023: inode 11 [ 402.595523][ T1634] EXT4-fs (loop7): 2 truncates cleaned up [ 402.603445][ T1634] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.10924: bg 0: block 5: invalid block bitmap [ 402.622895][ T1626] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.626087][ T28] audit: type=1400 audit(2000001991.013:2492): avc: denied { unlink } for pid=31548 comm="syz-executor" name="file0" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 402.875739][ T1674] loop5: detected capacity change from 0 to 1024 [ 402.940801][ T1674] EXT4-fs error (device loop5): ext4_xattr_set_entry:1670: inode #15: comm syz.5.10940: corrupted xattr entries [ 402.964746][ T1678] iso9660: Unknown parameter '' [ 403.003652][ T1682] EXT4-fs (loop2): 1 truncate cleaned up [ 403.024674][ T1674] EXT4-fs error (device loop5): ext4_xattr_block_set:2220: inode #15: comm syz.5.10940: bad block 113 [ 403.055435][ T28] audit: type=1400 audit(2000001991.633:2493): avc: denied { rename } for pid=1681 comm="syz.2.10943" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 403.124826][ T1686] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10943: bg 0: block 465: padding at end of block bitmap is not set [ 403.139816][ T1686] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 403.154730][ T1685] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.187220][ T1686] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.10943: invalid indirect mapped block 234881024 (level 0) [ 403.388051][ T1715] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10957'. [ 403.727635][ T28] audit: type=1400 audit(2000001992.313:2494): avc: denied { read } for pid=1724 comm="syz.8.10960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 403.864099][ T1731] set_capacity_and_notify: 4 callbacks suppressed [ 403.867397][ T1731] loop8: detected capacity change from 0 to 256 [ 403.928744][ T1731] FAT-fs (loop8): Directory bread(block 64) failed [ 403.943911][ T1731] FAT-fs (loop8): Directory bread(block 65) failed [ 403.985665][ T1733] syzkaller1: entered promiscuous mode [ 403.987950][ T1731] FAT-fs (loop8): Directory bread(block 66) failed [ 403.991476][ T1733] syzkaller1: entered allmulticast mode [ 404.008450][ T1731] FAT-fs (loop8): Directory bread(block 67) failed [ 404.015290][ T1731] FAT-fs (loop8): Directory bread(block 68) failed [ 404.022059][ T1731] FAT-fs (loop8): Directory bread(block 69) failed [ 404.028943][ T1731] FAT-fs (loop8): Directory bread(block 70) failed [ 404.035889][ T1731] FAT-fs (loop8): Directory bread(block 71) failed [ 404.043221][ T1731] FAT-fs (loop8): Directory bread(block 72) failed [ 404.049956][ T1731] FAT-fs (loop8): Directory bread(block 73) failed [ 404.228813][ T28] audit: type=1326 audit(2000001992.823:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.1.10971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f744609c799 code=0x0 [ 404.264996][ T1749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10973'. [ 404.518976][ T28] audit: type=1400 audit(2000001993.103:2496): avc: denied { mounton } for pid=1778 comm="syz.7.10985" path="/syzcgroup/unified/syz7/cgroup.procs" dev="cgroup2" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 405.152055][ T1807] loop1: detected capacity change from 0 to 512 [ 405.181721][ T1807] EXT4-fs (loop1): 1 truncate cleaned up [ 405.225463][ T1813] loop7: detected capacity change from 0 to 512 [ 405.232829][ T1815] loop2: detected capacity change from 0 to 128 [ 405.252364][ T1813] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 405.291598][ T1816] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10998: bg 0: block 465: padding at end of block bitmap is not set [ 405.307218][ T1813] EXT4-fs (loop7): 1 truncate cleaned up [ 405.343633][ T1821] syzkaller1: entered promiscuous mode [ 405.347002][ T1816] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 405.349522][ T1813] EXT4-fs (loop7): Online resizing not supported with sparse_super2 [ 405.365433][ T1821] syzkaller1: entered allmulticast mode [ 405.371539][ T1816] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.10998: invalid indirect mapped block 234881024 (level 0) [ 405.379848][ T1823] loop5: detected capacity change from 0 to 1024 [ 405.398999][ T1823] EXT4-fs: inline encryption not supported [ 405.433364][ T1823] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.465488][ T28] audit: type=1400 audit(2000001994.043:2497): avc: denied { read } for pid=1830 comm="syz.1.11007" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 405.654787][ T1855] netlink: 'syz.2.11017': attribute type 4 has an invalid length. [ 405.737177][ T1856] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.744419][ T1856] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.757147][ T1865] netlink: 'syz.2.11017': attribute type 4 has an invalid length. [ 405.796860][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.808533][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.847412][T23732] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.857075][T23732] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.867048][T23732] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.886172][T23732] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.426857][ T1911] loop8: detected capacity change from 0 to 128 [ 406.448481][ T1909] loop2: detected capacity change from 0 to 1024 [ 406.613525][ T1925] Process accounting resumed [ 407.827359][ T1955] Process accounting resumed [ 408.108964][ T3419] IPVS: starting estimator thread 0... [ 408.218974][ T1966] IPVS: using max 2400 ests per chain, 120000 per kthread [ 408.354557][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 408.354599][ T28] audit: type=1326 audit(2000001996.863:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1942 comm="syz.5.11055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7fc00000 [ 408.522436][ T2015] netlink: 'syz.5.11082': attribute type 4 has an invalid length. [ 408.556138][ T2015] netlink: 'syz.5.11082': attribute type 4 has an invalid length. [ 408.635387][ T2018] loop2: detected capacity change from 0 to 8192 [ 408.657549][ T2018] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.682148][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.702519][ T2018] FAT-fs (loop2): Filesystem has been set read-only [ 408.718035][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.727103][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.744357][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.763885][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.781458][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.790507][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.800169][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.817675][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 408.827749][ T2018] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 409.095668][ T2080] loop7: detected capacity change from 0 to 128 [ 409.107650][ T28] audit: type=1400 audit(2000001997.693:2501): avc: denied { watch } for pid=2079 comm="syz.7.11094" path="/152/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 409.182679][ T2085] loop7: detected capacity change from 0 to 1024 [ 409.223829][ T2085] EXT4-fs mount: 42 callbacks suppressed [ 409.223845][ T2085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.308303][T31548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.375367][ T28] audit: type=1400 audit(2000001997.963:2502): avc: denied { write } for pid=2108 comm="syz.7.11098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 409.409335][ T2113] netlink: 236 bytes leftover after parsing attributes in process `syz.8.11102'. [ 409.437806][ T2113] netlink: 236 bytes leftover after parsing attributes in process `syz.8.11102'. [ 409.578312][ T2133] netlink: 'syz.7.11107': attribute type 10 has an invalid length. [ 409.631522][ T2133] team0: Device wg1 is of different type [ 409.713263][ T28] audit: type=1326 audit(2000001998.303:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.7.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 409.745601][ T28] audit: type=1326 audit(2000001998.333:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.7.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 409.778608][ T28] audit: type=1326 audit(2000001998.333:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.7.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 409.812473][ T2160] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 409.819759][ T3420] IPVS: starting estimator thread 0... [ 409.819762][ T28] audit: type=1326 audit(2000001998.333:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.7.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 409.851552][ T28] audit: type=1326 audit(2000001998.333:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.7.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 409.875661][ T28] audit: type=1326 audit(2000001998.333:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.7.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 409.900045][ T28] audit: type=1326 audit(2000001998.333:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2153 comm="syz.7.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 409.960979][ T2163] IPVS: using max 2352 ests per chain, 117600 per kthread [ 410.008973][ T2173] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11120'. [ 410.053803][ T2175] loop7: detected capacity change from 0 to 8192 [ 410.061358][ T2175] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.074783][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.088542][ T2175] FAT-fs (loop7): Filesystem has been set read-only [ 410.095226][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.104274][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.113164][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.123051][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.132051][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.140956][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.149822][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.158632][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.167618][ T2175] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 410.441411][ T2183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11125'. [ 410.571953][ T2193] loop2: detected capacity change from 0 to 512 [ 410.609695][ T2193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.626472][ T2193] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.628274][ T2200] team0 (unregistering): Port device team_slave_0 removed [ 410.650171][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.678501][ T2200] team0 (unregistering): Port device team_slave_1 removed [ 411.415578][ T2240] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.423554][ T3889] IPVS: starting estimator thread 0... [ 411.451159][ T2241] loop8: detected capacity change from 0 to 8192 [ 411.468864][ T2241] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 411.502202][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.512339][ T2247] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11151'. [ 411.533764][ T2241] FAT-fs (loop8): Filesystem has been set read-only [ 411.542778][ T2247] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11151'. [ 411.552045][ T2244] IPVS: using max 2400 ests per chain, 120000 per kthread [ 411.564050][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.577476][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.587208][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.596629][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.605840][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.615967][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.626903][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.635864][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.651799][ T2241] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 411.952362][ T2267] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11162'. [ 412.110230][ T2281] loop1: detected capacity change from 0 to 512 [ 412.169759][ T2281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.185800][ T2288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2288 comm=syz.2.11170 [ 412.190919][ T2281] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.302876][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.407254][ T2301] IPv6: NLM_F_REPLACE set, but no existing node found! [ 412.741716][ T2326] loop5: detected capacity change from 0 to 4096 [ 412.743564][ T2322] loop1: detected capacity change from 0 to 8192 [ 412.752317][ T2330] loop8: detected capacity change from 0 to 2048 [ 412.777159][ T2322] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 412.790622][ T2330] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.801345][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.806951][ T2330] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #12: comm syz.8.11189: corrupted in-inode xattr: e_name out of bounds [ 412.825924][ T2326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.831418][ T2322] FAT-fs (loop1): Filesystem has been set read-only [ 412.848579][ T2335] team0 (unregistering): Port device team_slave_0 removed [ 412.867872][ T2335] team0 (unregistering): Port device team_slave_1 removed [ 412.877408][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.879492][ T2330] EXT4-fs (loop8): Remounting filesystem read-only [ 412.886307][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.902116][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.911195][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.949222][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.970129][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.972979][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.990099][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 412.999326][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 413.009734][ T2322] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 413.037682][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.077014][ T2345] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 413.175880][ T2352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11197'. [ 413.223884][ T2352] gtp2: entered promiscuous mode [ 413.238586][ T2352] gtp2: entered allmulticast mode [ 413.539713][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 413.539727][ T28] audit: type=1400 audit(2000002002.133:2567): avc: denied { listen } for pid=2372 comm="syz.2.11207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.909093][ T2381] loop7: detected capacity change from 0 to 512 [ 414.009293][ T9] IPVS: starting estimator thread 0... [ 414.034099][ T2388] IPv6: NLM_F_REPLACE set, but no existing node found! [ 414.078780][ T2394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.098008][ T2390] IPVS: using max 2400 ests per chain, 120000 per kthread [ 414.171808][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.261658][ T2408] syzkaller1: entered promiscuous mode [ 414.267140][ T2408] syzkaller1: entered allmulticast mode [ 414.342921][ T28] audit: type=1400 audit(2000002002.933:2568): avc: denied { write } for pid=2417 comm="syz.2.11225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.413514][ T2427] set_capacity_and_notify: 1 callbacks suppressed [ 414.413527][ T2427] loop2: detected capacity change from 0 to 7 [ 414.730388][ T2460] loop5: detected capacity change from 0 to 164 [ 414.937598][ T28] audit: type=1400 audit(2000002003.523:2569): avc: denied { watch watch_reads } for pid=2472 comm="syz.1.11252" path="/220/file0" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 414.993205][ T2477] syzkaller1: entered promiscuous mode [ 415.007181][ T28] audit: type=1400 audit(2000002003.523:2570): avc: denied { write } for pid=2471 comm="syz.8.11251" path="socket:[97234]" dev="sockfs" ino=97234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 415.024929][ T2477] syzkaller1: entered allmulticast mode [ 415.351106][ T28] audit: type=1326 audit(2000002003.943:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.2.11263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 415.385605][ T28] audit: type=1326 audit(2000002003.943:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.2.11263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 415.411830][ T2507] loop7: detected capacity change from 0 to 256 [ 415.423389][ T28] audit: type=1326 audit(2000002003.943:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.2.11263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 415.448744][ T2507] FAT-fs (loop7): bogus number of FAT sectors [ 415.455217][ T2507] FAT-fs (loop7): Can't find a valid FAT filesystem [ 415.477080][ T28] audit: type=1326 audit(2000002003.943:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.2.11263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 415.501263][ T28] audit: type=1326 audit(2000002003.943:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.2.11263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 415.534172][ T2515] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11270'. [ 415.534943][ T28] audit: type=1400 audit(2000002004.123:2576): avc: denied { write } for pid=2512 comm="syz.7.11269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 415.566819][ T2517] syzkaller1: entered promiscuous mode [ 415.574745][ T2517] syzkaller1: entered allmulticast mode [ 415.659262][ T2528] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.11277'. [ 415.669167][ T2528] netlink: zone id is out of range [ 415.674589][ T2528] netlink: zone id is out of range [ 415.681887][ T2530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11278'. [ 415.690998][ T2530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.698443][ T2530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.706153][ T2530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.722147][ T2528] netlink: set zone limit has 8 unknown bytes [ 415.728303][ T2530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.739394][ T2530] batman_adv: batadv0: Interface deactivated: gretap1 [ 415.746270][ T2530] batman_adv: batadv0: Removing interface: gretap1 [ 415.788927][ T2535] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 415.803597][ T2535] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 415.854583][ T2541] loop8: detected capacity change from 0 to 512 [ 415.891924][ T2541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.012409][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.106261][ T2571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11294'. [ 416.135381][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.175620][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.197003][ T2571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.205211][ T2571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.217169][ T41] tipc: Subscription rejected, illegal request [ 416.329503][ T2591] loop8: detected capacity change from 0 to 1024 [ 416.338992][ T2591] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.358645][ T2591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.396246][ T2591] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 416.425893][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.624494][ T2614] syzkaller1: entered promiscuous mode [ 416.634083][ T2614] syzkaller1: entered allmulticast mode [ 416.821683][ T2620] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11316'. [ 416.855294][ T2623] loop5: detected capacity change from 0 to 512 [ 416.870264][ T2623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.915956][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.009010][ T2635] loop1: detected capacity change from 0 to 164 [ 417.643361][ T2656] loop8: detected capacity change from 0 to 128 [ 417.705054][ T2660] netlink: 'syz.8.11332': attribute type 4 has an invalid length. [ 417.712957][ T2660] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11332'. [ 417.802541][ T2674] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11338'. [ 417.879184][ T2683] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=2683 comm=syz.1.11342 [ 418.037208][ T2697] loop5: detected capacity change from 0 to 512 [ 418.048552][ T2697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 418.072076][ T2697] EXT4-fs (loop5): 1 truncate cleaned up [ 418.084563][ T2697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.121606][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.844177][ T2734] syzkaller1: entered promiscuous mode [ 418.849767][ T2734] syzkaller1: entered allmulticast mode [ 419.033629][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 419.033641][ T28] audit: type=1400 audit(2000002007.623:2594): avc: denied { add_name } for pid=2743 comm="syz.1.11369" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 419.085185][ T28] audit: type=1400 audit(2000002007.663:2595): avc: denied { create } for pid=2743 comm="syz.1.11369" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 419.121352][ T28] audit: type=1400 audit(2000002007.713:2596): avc: denied { mount } for pid=2751 comm="syz.1.11373" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 419.178301][ T2758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11377'. [ 419.206491][ T28] audit: type=1400 audit(2000002007.793:2597): avc: denied { read } for pid=2763 comm="syz.2.11379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 419.212477][ T2758] bond3: option primary_reselect: invalid value (8) [ 419.234397][ T2758] bond3 (unregistering): Released all slaves [ 419.257402][ T28] audit: type=1400 audit(2000002007.843:2598): avc: denied { ioctl } for pid=2763 comm="syz.2.11379" path="socket:[98701]" dev="sockfs" ino=98701 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 419.309623][ T2769] tmpfs: Bad value for 'mpol' [ 419.778139][ T2828] loop5: detected capacity change from 0 to 164 [ 419.851786][ T28] audit: type=1400 audit(2000002008.443:2599): avc: denied { mounton } for pid=2830 comm="syz.1.11408" path="/proc/547" dev="proc" ino=98888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 420.038930][ T28] audit: type=1400 audit(2000002008.633:2600): avc: denied { create } for pid=2843 comm="syz.2.11413" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 420.079545][ T28] audit: type=1400 audit(2000002008.673:2601): avc: denied { write } for pid=2847 comm="syz.2.11415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 420.222269][ T2853] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 420.690062][ T2868] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11433'. [ 420.704193][ T2868] bond3: option primary_reselect: invalid value (8) [ 420.712202][ T2868] bond3 (unregistering): Released all slaves [ 420.805013][ T2877] syzkaller1: entered promiscuous mode [ 420.811446][ T2877] syzkaller1: entered allmulticast mode [ 421.122191][ T2894] tmpfs: Bad value for 'mpol' [ 421.259334][ T2898] tmpfs: Bad value for 'mpol' [ 421.309762][ T2903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11440'. [ 421.339969][ T2903] bond1: option primary_reselect: invalid value (8) [ 421.412200][ T28] audit: type=1326 audit(2000002009.793:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2899 comm="syz.5.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 421.436840][ T2903] bond1 (unregistering): Released all slaves [ 421.443239][ T28] audit: type=1326 audit(2000002009.793:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2899 comm="syz.5.11438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 422.043510][ T2935] program syz.8.11453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.531195][ T2952] usb usb7: usbfs: process 2952 (syz.1.11462) did not claim interface 0 before use [ 422.878310][ T2976] loop1: detected capacity change from 0 to 1024 [ 422.916465][ T2983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11474'. [ 422.991164][ T2976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.095136][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.131707][ T3011] netlink: 'syz.7.11482': attribute type 16 has an invalid length. [ 423.153732][ T3011] netlink: 'syz.7.11482': attribute type 17 has an invalid length. [ 423.261210][ T3007] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 423.324345][ T3030] sctp: [Deprecated]: syz.8.11490 (pid 3030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.324345][ T3030] Use struct sctp_sack_info instead [ 423.391433][ T3037] usb usb7: usbfs: process 3037 (syz.5.11494) did not claim interface 0 before use [ 423.447091][ T3048] syzkaller1: entered promiscuous mode [ 423.453438][ T3048] syzkaller1: entered allmulticast mode [ 423.736662][ T3059] loop1: detected capacity change from 0 to 1024 [ 423.751653][ T3059] EXT4-fs: Ignoring removed bh option [ 423.780641][ T3059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.793308][ T3059] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.875382][ T3066] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.11500: lblock 0 mapped to illegal pblock 0 (length 6) [ 423.936051][ T3066] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 423.965292][ T3066] EXT4-fs (loop1): This should not happen!! Data will be lost [ 423.965292][ T3066] [ 423.981301][ T3066] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11500: bg 0: block 112: padding at end of block bitmap is not set [ 423.998196][T23734] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 424.019304][T23734] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 424.033714][T23734] EXT4-fs (loop1): This should not happen!! Data will be lost [ 424.033714][T23734] [ 424.104590][ T3079] loop8: detected capacity change from 0 to 4096 [ 424.151671][ T3079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.180531][ T3079] EXT4-fs (loop8): shut down requested (1) [ 424.186685][ T3079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 424.213607][T23734] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 948 with error 28 [ 424.243548][ T3087] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 424.264931][T23734] EXT4-fs (loop1): This should not happen!! Data will be lost [ 424.264931][T23734] [ 424.275581][ T3079] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 424.284664][T23734] EXT4-fs (loop1): Total free blocks count 0 [ 424.300199][T23734] EXT4-fs (loop1): Free/Dirty block details [ 424.308044][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.319129][T23734] EXT4-fs (loop1): free_blocks=0 [ 424.560792][ T3110] batadv_slave_1: entered promiscuous mode [ 424.567578][ T3108] batadv_slave_1: left promiscuous mode [ 424.583859][ T3113] loop2: detected capacity change from 0 to 512 [ 424.615904][ T3113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 424.635400][ T3115] loop5: detected capacity change from 0 to 4096 [ 424.644014][ T3113] EXT4-fs (loop2): 1 truncate cleaned up [ 424.650421][ T3113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.680858][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 424.680871][ T28] audit: type=1400 audit(2000002013.273:2610): avc: denied { rename } for pid=3112 comm="syz.2.11521" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.687795][ T3115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.718008][ T3113] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.11521: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 424.742287][ T28] audit: type=1400 audit(2000002013.313:2611): avc: denied { rmdir } for pid=3112 comm="syz.2.11521" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 424.767541][ T3113] EXT4-fs (loop2): Remounting filesystem read-only [ 424.774541][ T3113] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.11521: Deleting old file: nlink 5, error=-117 [ 424.814854][ T3115] EXT4-fs (loop5): shut down requested (1) [ 424.826914][ T3115] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 424.837832][ T3115] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 424.847366][ T3115] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 424.866522][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.881381][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.041400][ T3133] loop5: detected capacity change from 0 to 764 [ 425.101007][ T3137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11534'. [ 425.110185][ T3137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11534'. [ 425.123342][ T3137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11534'. [ 425.156860][ T290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.193487][ T3137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11534'. [ 425.203095][ T290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.225254][ T290] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.251351][ T290] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.517125][ T3157] syzkaller1: entered promiscuous mode [ 425.524071][ T3157] syzkaller1: entered allmulticast mode [ 425.541439][ T3161] usb usb7: usbfs: process 3161 (syz.2.11542) did not claim interface 0 before use [ 425.802918][ T3171] loop7: detected capacity change from 0 to 4096 [ 425.829533][ T3171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.841289][ T3179] loop5: detected capacity change from 0 to 512 [ 425.866997][ T3171] EXT4-fs (loop7): shut down requested (1) [ 425.908319][ T3171] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 425.917091][ T3171] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 425.944783][ T3179] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 425.966619][ T3179] EXT4-fs (loop5): 1 truncate cleaned up [ 425.978608][ T3179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.008058][ T3171] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 426.033791][T31548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.039929][ T3179] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.11551: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 426.072755][ T3190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11557'. [ 426.113561][ T3190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11557'. [ 426.153236][ T3196] loop8: detected capacity change from 0 to 1024 [ 426.159938][ T3179] EXT4-fs (loop5): Remounting filesystem read-only [ 426.168496][ T3196] EXT4-fs: Ignoring removed bh option [ 426.179513][ T3179] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.11551: Deleting old file: nlink 5, error=-117 [ 426.236618][ T3196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.272192][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.290514][ T3196] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.410980][ T3211] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.11559: lblock 0 mapped to illegal pblock 0 (length 6) [ 426.472526][ T3211] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 426.492366][ T3211] EXT4-fs (loop8): This should not happen!! Data will be lost [ 426.492366][ T3211] [ 426.530659][ T3211] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11559: bg 0: block 112: padding at end of block bitmap is not set [ 426.547810][T23720] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 426.571847][T23720] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 426.607982][T23720] EXT4-fs (loop8): This should not happen!! Data will be lost [ 426.607982][T23720] [ 426.720432][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 426.754521][ T3223] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11568'. [ 426.773642][ T3221] loop2: detected capacity change from 0 to 128 [ 426.833746][ T3229] loop8: detected capacity change from 0 to 764 [ 426.863959][ T3225] loop7: detected capacity change from 0 to 128 [ 426.913366][ T3225] msdos: Bad value for 'gid' [ 426.949715][ T3225] msdos: Bad value for 'gid' [ 426.976295][ T28] audit: type=1400 audit(2000002015.563:2612): avc: denied { ioctl } for pid=3238 comm="syz.5.11577" path="socket:[99828]" dev="sockfs" ino=99828 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 427.036081][ T3245] loop2: detected capacity change from 0 to 1024 [ 427.047342][ T3248] loop8: detected capacity change from 0 to 256 [ 427.058866][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11583'. [ 427.094500][ T3245] EXT4-fs: Ignoring removed bh option [ 427.120631][ T3250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11583'. [ 427.133508][T23724] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.145350][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11583'. [ 427.156584][ T3245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.169457][T23724] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.187967][T23724] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.196705][ T3250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11583'. [ 427.210769][T23724] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.219690][ T3245] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.268773][ T3259] loop5: detected capacity change from 0 to 1024 [ 427.307709][ T3262] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.11579: lblock 0 mapped to illegal pblock 0 (length 6) [ 427.323277][ T3259] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 427.338136][ T3262] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 427.356752][ T3259] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 427.360621][ T3262] EXT4-fs (loop2): This should not happen!! Data will be lost [ 427.360621][ T3262] [ 427.382302][ T3259] JBD2: no valid journal superblock found [ 427.391336][ T3262] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11579: bg 0: block 112: padding at end of block bitmap is not set [ 427.412796][ T3259] EXT4-fs (loop5): Could not load journal inode [ 427.472953][T23734] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 427.488188][T23734] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 427.500464][T23734] EXT4-fs (loop2): This should not happen!! Data will be lost [ 427.500464][T23734] [ 427.513934][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 427.524455][ T3259] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 427.577346][ T3273] netlink: 256 bytes leftover after parsing attributes in process `syz.5.11590'. [ 427.587697][ T3273] netlink: 256 bytes leftover after parsing attributes in process `syz.5.11590'. [ 427.690555][ T3284] EXT4-fs (loop5): 1 truncate cleaned up [ 427.711778][ T3284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.726054][ T28] audit: type=1400 audit(2000002016.323:2613): avc: denied { write } for pid=3283 comm="syz.5.11595" name="file3" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 427.749361][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.760923][ T28] audit: type=1400 audit(2000002016.323:2614): avc: denied { rename } for pid=3283 comm="syz.5.11595" name="file3" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 427.785586][ T28] audit: type=1400 audit(2000002016.323:2615): avc: denied { reparent } for pid=3283 comm="syz.5.11595" name="file3" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 428.093282][ T3302] syzkaller1: entered promiscuous mode [ 428.099060][ T3302] syzkaller1: entered allmulticast mode [ 428.173288][ T28] audit: type=1326 audit(2000002016.763:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.8.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79da3c799 code=0x7ffc0000 [ 428.196888][ T28] audit: type=1326 audit(2000002016.763:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.8.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79da3c799 code=0x7ffc0000 [ 428.221029][ T28] audit: type=1326 audit(2000002016.763:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.8.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc79da3c799 code=0x7ffc0000 [ 428.244739][ T28] audit: type=1326 audit(2000002016.763:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.8.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79da3c799 code=0x7ffc0000 [ 428.318781][ T3306] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11606'. [ 428.533462][ T3313] msdos: Bad value for 'gid' [ 428.538530][ T3313] msdos: Bad value for 'gid' [ 429.128151][ T3350] msdos: Bad value for 'gid' [ 429.133557][ T3350] msdos: Bad value for 'gid' [ 429.452358][ T3377] EXT4-fs: inline encryption not supported [ 429.556864][ T3377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.585328][T31548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.687997][ T3390] EXT4-fs (loop7): 1 truncate cleaned up [ 429.694089][ T3390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.731563][T31548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.101436][ T3397] set_capacity_and_notify: 9 callbacks suppressed [ 430.101458][ T3397] loop1: detected capacity change from 0 to 128 [ 430.149373][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 430.149386][ T28] audit: type=1400 audit(2000002018.743:2627): avc: denied { write } for pid=3907 comm="kworker/1:12" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=100924 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 430.185747][ T3397] msdos: Bad value for 'gid' [ 430.209869][ T3397] msdos: Bad value for 'gid' [ 430.279451][ T28] audit: type=1326 audit(2000002018.873:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3418 comm="syz.5.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 430.309813][ T28] audit: type=1326 audit(2000002018.873:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3418 comm="syz.5.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 430.360627][ T28] audit: type=1326 audit(2000002018.873:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3418 comm="syz.5.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 430.385660][ T28] audit: type=1326 audit(2000002018.943:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3418 comm="syz.5.11651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 430.436136][ T3438] loop7: detected capacity change from 0 to 1024 [ 430.467836][ T3438] EXT4-fs: Ignoring removed bh option [ 430.493333][ T3438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.523674][ T3438] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.688070][ T3446] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.11657: lblock 0 mapped to illegal pblock 0 (length 6) [ 430.704779][ T3446] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 430.717375][ T3446] EXT4-fs (loop7): This should not happen!! Data will be lost [ 430.717375][ T3446] [ 430.727678][ T3446] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.11657: bg 0: block 112: padding at end of block bitmap is not set [ 430.746925][ T50] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 430.761715][ T50] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 430.778547][ T50] EXT4-fs (loop7): This should not happen!! Data will be lost [ 430.778547][ T50] [ 430.795173][ T3452] netlink: 'syz.1.11660': attribute type 4 has an invalid length. [ 430.857937][ T28] audit: type=1400 audit(2000002019.443:2632): avc: denied { read } for pid=3453 comm="syz.8.11662" path="socket:[100277]" dev="sockfs" ino=100277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 431.002784][ T50] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 116 with error 28 [ 431.015447][ T50] EXT4-fs (loop7): This should not happen!! Data will be lost [ 431.015447][ T50] [ 431.035328][ T50] EXT4-fs (loop7): Total free blocks count 0 [ 431.050804][ T50] EXT4-fs (loop7): Free/Dirty block details [ 431.057362][ T50] EXT4-fs (loop7): free_blocks=0 [ 431.514381][ T3477] loop5: detected capacity change from 0 to 128 [ 431.539908][ T3473] loop8: detected capacity change from 0 to 1024 [ 431.568061][ T3473] ext4: Unknown parameter 'uid' [ 432.432382][ T3519] sctp: [Deprecated]: syz.1.11693 (pid 3519) Use of int in maxseg socket option. [ 432.432382][ T3519] Use struct sctp_assoc_value instead [ 432.442828][ T3520] loop5: detected capacity change from 0 to 1024 [ 432.470544][ T3520] EXT4-fs: Ignoring removed bh option [ 432.511715][ T3520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.566191][ T3520] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.699626][ T3534] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.11692: lblock 0 mapped to illegal pblock 0 (length 6) [ 432.723352][ T3534] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 432.817949][ T3534] EXT4-fs (loop5): This should not happen!! Data will be lost [ 432.817949][ T3534] [ 432.827719][ T3534] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11692: bg 0: block 112: padding at end of block bitmap is not set [ 432.902897][T23734] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 432.928762][T23734] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 432.941198][T23734] EXT4-fs (loop5): This should not happen!! Data will be lost [ 432.941198][T23734] [ 433.002001][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 433.020033][ T3545] loop7: detected capacity change from 0 to 1024 [ 433.035049][ T3545] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 433.066692][ T3545] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 433.083372][ T3545] JBD2: no valid journal superblock found [ 433.094764][ T3545] EXT4-fs (loop7): Could not load journal inode [ 433.142266][ T3554] loop5: detected capacity change from 0 to 256 [ 433.261392][ T3555] loop7: detected capacity change from 0 to 8192 [ 433.275170][ T3555] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 433.349056][ T3564] loop8: detected capacity change from 0 to 1024 [ 433.373613][ T3564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.401165][ T3570] batadv_slave_1: entered promiscuous mode [ 433.421894][ T3569] batadv_slave_1: left promiscuous mode [ 433.444172][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.459674][ T3572] __nla_validate_parse: 1 callbacks suppressed [ 433.459689][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11714'. [ 433.507396][ T28] audit: type=1326 audit(2000002022.093:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.7.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 433.530075][ T3572] netlink: 'syz.5.11714': attribute type 30 has an invalid length. [ 433.544445][ T28] audit: type=1326 audit(2000002022.093:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.7.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 433.575075][ T3572] netlink: 'syz.5.11714': attribute type 29 has an invalid length. [ 433.598071][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11714'. [ 433.607520][ T28] audit: type=1326 audit(2000002022.093:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.7.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 433.636422][ T28] audit: type=1326 audit(2000002022.093:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.7.11716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623167c799 code=0x7ffc0000 [ 433.850478][ T3601] loop7: detected capacity change from 0 to 1024 [ 433.884089][ T3601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 433.898098][ T3601] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.938272][T31548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 434.091805][ T3611] SELinux: Context : is not valid (left unmapped). [ 434.203715][ T3615] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 434.248052][ T3615] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 434.276020][ T3615] JBD2: no valid journal superblock found [ 434.282071][ T3615] EXT4-fs (loop8): Could not load journal inode [ 434.311517][ T3627] syzkaller1: entered promiscuous mode [ 434.317112][ T3627] syzkaller1: entered allmulticast mode [ 434.424686][ T3630] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 434.577225][ T3653] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11749'. [ 434.603395][ T3653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11749'. [ 434.654421][ T3661] syzkaller1: entered promiscuous mode [ 434.667448][ T3661] syzkaller1: entered allmulticast mode [ 435.139411][ T3694] syzkaller1: entered promiscuous mode [ 435.144892][ T3694] syzkaller1: entered allmulticast mode [ 435.305783][ T3702] set_capacity_and_notify: 2 callbacks suppressed [ 435.305812][ T3702] loop1: detected capacity change from 0 to 4096 [ 435.322784][ T3704] loop7: detected capacity change from 0 to 512 [ 435.329369][ T3704] SELinux: security_context_str_to_sid () failed with errno=-22 [ 435.351980][ T3702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.391716][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.443817][ T3712] vhci_hcd vhci_hcd.3: default hub control req: 800f v0000 i0000 l31125 [ 435.549128][ T3722] loop7: detected capacity change from 0 to 512 [ 435.579364][ T3722] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.11782: inode has both inline data and extents flags [ 435.607939][ T3722] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 435.615956][ T3722] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.11782: couldn't read orphan inode 15 (err -117) [ 435.625119][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 435.625150][ C0] EXT4-fs (loop7): initial error at time 2000002024: ext4_orphan_get:1391: inode 15 [ 435.625178][ C0] EXT4-fs (loop7): last error at time 2000002024: ext4_orphan_get:1391: inode 15 [ 435.722344][ T3722] loop7: lost filesystem error report for type 5 error -117 [ 435.723063][ T3722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.755831][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11786'. [ 435.758692][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 435.758704][ T28] audit: type=1400 audit(2000002024.353:2675): avc: denied { getopt } for pid=3721 comm="syz.7.11782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 435.808379][T31548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.956868][ T28] audit: type=1400 audit(2000002024.543:2676): avc: denied { mount } for pid=3757 comm="syz.2.11800" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 436.025410][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11804'. [ 436.051168][ T3772] loop2: detected capacity change from 0 to 512 [ 436.077847][ T3772] EXT4-fs: Ignoring removed bh option [ 436.087116][ T3772] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 436.117447][ T3772] EXT4-fs (loop2): 1 truncate cleaned up [ 436.129146][ T3772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.189358][ T3787] vhci_hcd vhci_hcd.3: default hub control req: 800f v0000 i0000 l31125 [ 436.217988][ T28] audit: type=1400 audit(2000002024.793:2677): avc: denied { link } for pid=3769 comm="syz.2.11806" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 436.281074][T28496] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.438680][ T3813] netlink: 'syz.1.11833': attribute type 13 has an invalid length. [ 436.463366][ T3813] gretap0: refused to change device tx_queue_len [ 436.479344][ T3813] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 436.528540][ T3821] loop5: detected capacity change from 0 to 512 [ 436.551580][ T3821] EXT4-fs: Ignoring removed bh option [ 436.574210][ T3821] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 436.583855][ T3821] EXT4-fs (loop5): 1 truncate cleaned up [ 436.589999][ T3821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.620170][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.659417][ T3830] loop5: detected capacity change from 0 to 512 [ 436.720726][ T3830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.739541][ T28] audit: type=1400 audit(2000002025.323:2678): avc: denied { append } for pid=3834 comm="syz.1.11834" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 436.849172][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.978867][ T3856] loop8: detected capacity change from 0 to 512 [ 436.997316][ T3856] EXT4-fs: Ignoring removed bh option [ 437.012599][ T3856] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 437.051545][ T3856] EXT4-fs (loop8): 1 truncate cleaned up [ 437.075206][ T3856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.111983][ T28] audit: type=1400 audit(2000002025.693:2679): avc: denied { read } for pid=3863 comm="syz.5.11846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 437.148287][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.347108][ T28] audit: type=1326 audit(2000002025.933:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.5.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 437.371544][ T28] audit: type=1326 audit(2000002025.963:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.5.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 437.395471][ T28] audit: type=1326 audit(2000002025.963:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.5.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 437.419726][ T28] audit: type=1326 audit(2000002025.963:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.5.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 437.447734][ T28] audit: type=1326 audit(2000002025.963:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.5.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 437.591510][ T3915] loop1: detected capacity change from 0 to 1024 [ 437.600182][ T3915] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 437.611374][ T3915] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 437.621727][ T3915] JBD2: no valid journal superblock found [ 437.627566][ T3915] EXT4-fs (loop1): Could not load journal inode [ 437.782677][ T3915] loop1: detected capacity change from 0 to 8192 [ 437.789603][ T3915] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 437.800593][ T3937] bpf: Bad value for 'gid' [ 437.868828][ T3940] netlink: 'syz.8.11879': attribute type 4 has an invalid length. [ 438.051421][ T3950] loop1: detected capacity change from 0 to 256 [ 438.063681][ T3952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 438.122542][ T3956] netlink: 'syz.5.11886': attribute type 13 has an invalid length. [ 438.133085][ T3952] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.145443][ T3952] EXT4-fs (loop8): shut down requested (1) [ 438.152634][ T3956] gretap0: refused to change device tx_queue_len [ 438.163081][ T3956] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 438.167365][ T3952] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 438.237584][ T3952] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 438.300762][ T3974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 438.330685][ T3974] System zones: 1-3, 19-19, 35-36 [ 438.347629][ T3974] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 438.484150][ T3974] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups) [ 438.517855][ T3987] netlink: 'syz.1.11898': attribute type 1 has an invalid length. [ 438.648747][ T3999] netlink: 'syz.2.11903': attribute type 13 has an invalid length. [ 438.721991][ T3999] gretap0: refused to change device tx_queue_len [ 438.740897][ T3999] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 439.250084][ T4025] netlink: 'syz.8.11912': attribute type 3 has an invalid length. [ 439.372284][ T4035] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 439.407958][ T4035] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 439.424768][ T4035] JBD2: no valid journal superblock found [ 439.436619][ T4035] EXT4-fs (loop5): Could not load journal inode [ 439.577411][ T4052] netlink: 'syz.2.11922': attribute type 4 has an invalid length. [ 439.610958][ T4049] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 439.626086][ T4054] netlink: 'syz.2.11925': attribute type 1 has an invalid length. [ 439.989683][ T4101] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 440.068880][ T4109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.090320][ T4109] EXT4-fs mount: 6 callbacks suppressed [ 440.090375][ T4109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.111042][ T4109] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.124003][ T4109] EXT4-fs (loop5): shut down requested (1) [ 440.130375][ T4109] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 440.139394][ T4109] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 440.140726][ T4117] netlink: 'syz.7.11954': attribute type 3 has an invalid length. [ 440.177006][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.756122][ T4140] set_capacity_and_notify: 10 callbacks suppressed [ 440.756139][ T4140] loop8: detected capacity change from 0 to 512 [ 440.768123][ T4142] loop1: detected capacity change from 0 to 2048 [ 440.778666][ T4140] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.788016][ T4140] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 440.798100][ T4140] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 440.806412][ T4140] System zones: 0-2, 18-18, 34-35 [ 440.812266][ T4140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 440.812542][ T4142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.836433][ T4140] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 440.846049][ T4140] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 440.854261][ T4140] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 440.863469][ T4140] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11963: bg 0: block 353: padding at end of block bitmap is not set [ 440.878564][ T4140] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 440.878870][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.910514][ T4147] loop1: detected capacity change from 0 to 1024 [ 440.918644][ T4147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 440.919028][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.948260][ T4147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.035569][ T4159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11970'. [ 441.085349][T31483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.272639][ T4176] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11978'. [ 441.339774][ T4184] loop8: detected capacity change from 0 to 512 [ 441.361313][ T4184] EXT4-fs: Ignoring removed bh option [ 441.388973][ T4184] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.407128][ T4186] netlink: 15 bytes leftover after parsing attributes in process `syz.2.11982'. [ 441.416334][ T4184] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.421626][ T4180] loop1: detected capacity change from 0 to 1024 [ 441.439324][ T4180] ext4: Unknown parameter 'uid' [ 441.513967][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.818508][ T4221] netlink: 'syz.8.11998': attribute type 3 has an invalid length. [ 441.879326][ T4225] netlink: 15 bytes leftover after parsing attributes in process `syz.8.12000'. [ 442.128029][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12010'. [ 442.141931][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.185633][ T4251] loop8: detected capacity change from 0 to 512 [ 442.209193][ T4251] EXT4-fs: Ignoring removed bh option [ 442.224675][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.235163][ T4251] EXT4-fs: inline encryption not supported [ 442.268600][ T4251] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 442.330425][ T4251] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 442.358143][ T4251] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.12009: bg 0: block 248: padding at end of block bitmap is not set [ 442.379075][ T4251] loop8: lost filesystem error report for type 5 error -117 [ 442.379220][ T4251] __quota_error: 54 callbacks suppressed [ 442.379233][ T4251] Quota error (device loop8): write_blk: dquota write failed [ 442.392165][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 442.392182][ C0] EXT4-fs (loop8): last error at time 2000002030: ext4_validate_block_bitmap:441 [ 442.424787][ T4251] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 442.450461][ T4251] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.12009: Failed to acquire dquot type 1 [ 442.488032][ T4251] loop8: lost filesystem error report for type 5 error -117 [ 442.491821][ T4251] EXT4-fs (loop8): 1 truncate cleaned up [ 442.508509][ T4251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 442.589285][ T28] audit: type=1400 audit(2000002031.183:2739): avc: denied { remount } for pid=4283 comm="syz.2.12025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 442.611469][T29945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 442.655677][T23732] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 442.676797][T23732] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 442.689020][T23732] loop8: lost filesystem error report for type 5 error -117 [ 442.710329][ T28] audit: type=1400 audit(2000002031.303:2740): avc: denied { connect } for pid=4290 comm="syz.8.12027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 442.753083][ T4293] netlink: 'syz.1.12029': attribute type 3 has an invalid length. [ 442.984847][ T28] audit: type=1400 audit(2000002031.573:2741): avc: denied { attach_queue } for pid=4303 comm="syz.1.12034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 443.356953][ T4319] netlink: 'syz.7.12039': attribute type 3 has an invalid length. [ 443.393546][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.400730][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.430308][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12042'. [ 443.579596][ T28] audit: type=1326 audit(2000002032.173:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4331 comm="syz.5.12045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x0 [ 443.879404][ T4347] netlink: 'syz.8.12052': attribute type 3 has an invalid length. [ 444.072253][ T4365] xt_hashlimit: size too large, truncated to 1048576 [ 444.098473][ T4367] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 444.106231][ T4367] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 444.262597][ T4373] SELinux: failed to load policy [ 444.264666][ T4377] futex_wake_op: syz.8.12066 tries to shift op by -1; fix this program [ 444.295444][ T4381] loop1: detected capacity change from 0 to 512 [ 444.302211][ T4381] EXT4-fs: Ignoring removed nobh option [ 444.317113][ T4381] EXT4-fs: Ignoring removed bh option [ 444.326198][ T4381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 444.340189][ T4381] EXT4-fs (loop1): 1 truncate cleaned up [ 444.348544][ T4381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.369915][ T28] audit: type=1400 audit(2000002032.963:2743): avc: denied { mounton } for pid=4380 comm="syz.1.12068" path="/380/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 444.404044][T31483] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 444.427009][ T28] audit: type=1400 audit(2000002032.993:2744): avc: denied { rmdir } for pid=31483 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.463905][T31483] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 444.476650][T31483] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 444.523360][ T4398] batadv_slave_1: entered promiscuous mode [ 444.537435][ T3962] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.546885][ T4398] batadv_slave_1: left promiscuous mode [ 444.562513][ T28] audit: type=1400 audit(2000002033.153:2745): avc: denied { mounton } for pid=4401 comm="syz.8.12077" path="/proc/1073/cgroup" dev="proc" ino=104807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 444.592084][ T4404] xt_hashlimit: size too large, truncated to 1048576 [ 444.813337][T23724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.826682][T23724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.889715][T23724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.910187][ T3420] IPVS: starting estimator thread 0... [ 444.927928][T23724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.946846][ T4434] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 444.954126][ T4444] loop8: detected capacity change from 0 to 512 [ 444.960983][ T4444] EXT4-fs: Ignoring removed nobh option [ 444.966557][ T4444] EXT4-fs: Ignoring removed bh option [ 444.977418][ T4444] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 444.990636][T23724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.998073][ T4439] IPVS: using max 2208 ests per chain, 110400 per kthread [ 445.005772][T23724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.029603][ T4444] EXT4-fs (loop8): 1 truncate cleaned up [ 445.038301][ T4444] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.063598][T29945] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 445.082539][T29945] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 445.099063][T29945] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 445.111631][T23724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.132324][T23724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.145985][ T3651] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.207800][ T4443] chnl_net:caif_netlink_parms(): no params data found [ 445.227527][ T4466] xt_hashlimit: size too large, truncated to 1048576 [ 445.298243][T23724] bridge_slave_1: left allmulticast mode [ 445.303884][T23724] bridge_slave_1: left promiscuous mode [ 445.332580][T23724] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.342748][T23724] bridge_slave_0: left allmulticast mode [ 445.349630][T23724] bridge_slave_0: left promiscuous mode [ 445.355462][T23724] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.461306][T23724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.475069][T23724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.484905][T23724] bond0 (unregistering): Released all slaves [ 445.492548][T23724] bond1 (unregistering): Released all slaves [ 445.501164][T23724] bond2 (unregistering): Released all slaves [ 445.543786][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.558135][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.565656][ T4443] bridge_slave_0: entered allmulticast mode [ 445.572281][ T4443] bridge_slave_0: entered promiscuous mode [ 445.579114][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.586183][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.593563][ T4443] bridge_slave_1: entered allmulticast mode [ 445.600148][ T4443] bridge_slave_1: entered promiscuous mode [ 445.607554][ T4489] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 445.630371][T23724] hsr_slave_0: left promiscuous mode [ 445.641495][T23724] hsr_slave_1: left promiscuous mode [ 445.647140][T23724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.654989][T23724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.668151][T23724] veth1_macvtap: left promiscuous mode [ 445.673727][T23724] veth0_macvtap: left promiscuous mode [ 445.680065][T23724] veth1_vlan: left promiscuous mode [ 445.685328][T23724] veth0_vlan: left promiscuous mode [ 445.738243][T23724] team0 (unregistering): Port device team_slave_1 removed [ 445.747720][T23724] team0 (unregistering): Port device team_slave_0 removed [ 445.804623][ T4443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.827303][ T4443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.848799][ T3560] hid_parser_main: 91 callbacks suppressed [ 445.848813][ T3560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 445.878533][ T3560] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 445.915772][ T4443] team0: Port device team_slave_0 added [ 445.945239][ T4443] team0: Port device team_slave_1 added [ 445.967106][ T4443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.974764][ T4443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.009080][ T4443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.031812][ T4443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.038949][ T4443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.065955][ T4443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.108367][ T4443] hsr_slave_0: entered promiscuous mode [ 446.114469][ T4443] hsr_slave_1: entered promiscuous mode [ 446.122232][ T4474] chnl_net:caif_netlink_parms(): no params data found [ 446.170982][T23724] IPVS: stop unused estimator thread 0... [ 446.195141][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.202335][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.209487][ T4474] bridge_slave_0: entered allmulticast mode [ 446.215895][ T4474] bridge_slave_0: entered promiscuous mode [ 446.222365][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.229456][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.236965][ T4474] bridge_slave_1: entered allmulticast mode [ 446.243441][ T4474] bridge_slave_1: entered promiscuous mode [ 446.269798][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.280537][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.305580][ T4474] team0: Port device team_slave_0 added [ 446.315176][ T4474] team0: Port device team_slave_1 added [ 446.331970][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.340790][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.367379][ T4474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.381764][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.388739][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.414753][ T4474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.440056][ T4474] hsr_slave_0: entered promiscuous mode [ 446.445971][ T4474] hsr_slave_1: entered promiscuous mode [ 446.452502][ T4474] debugfs: 'hsr0' already exists in 'hsr' [ 446.458392][ T4474] Cannot create hsr debugfs directory [ 446.621535][ T4443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 446.640381][ T4443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.656932][ T4443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.670242][ T4443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.718918][T23724] bridge_slave_1: left allmulticast mode [ 446.728071][T23724] bridge_slave_1: left promiscuous mode [ 446.735443][T23724] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.745467][T23724] bridge_slave_0: left allmulticast mode [ 446.755417][ T4596] xt_hashlimit: size too large, truncated to 1048576 [ 446.762139][T23724] bridge_slave_0: left promiscuous mode [ 446.768256][T23724] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.879773][T23724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.893335][T23724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.902782][T23724] bond0 (unregistering): Released all slaves [ 446.910034][T23724] bond1 (unregistering): Released all slaves [ 446.919125][T23724] bond2 (unregistering): Released all slaves [ 446.963214][T23724] tipc: Disabling bearer [ 446.979303][T23724] tipc: Left network mode [ 446.989465][ T4443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.001999][T23724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.020527][T23724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.115938][ T4443] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.137378][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.144455][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.168242][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.175417][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.189104][ T4651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12130'. [ 447.214129][ T4651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12130'. [ 447.321185][ T4443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.371575][T23724] IPVS: stop unused estimator thread 0... [ 447.418744][ T4443] veth0_vlan: entered promiscuous mode [ 447.426343][ T4443] veth1_vlan: entered promiscuous mode [ 447.439182][ T4443] veth0_macvtap: entered promiscuous mode [ 447.449700][ T4443] veth1_macvtap: entered promiscuous mode [ 447.462298][ T4443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.472839][ T4443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.485249][T23732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.494513][T23732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.504742][T23732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.513618][T23732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.649107][ T4729] loop1: detected capacity change from 0 to 128 [ 447.659667][ T4729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12140'. [ 447.669294][ T4729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12140'. [ 447.961799][ T4783] loop5: detected capacity change from 0 to 512 [ 447.964780][ T4474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 447.983372][ T4783] EXT4-fs: Mount option(s) incompatible with ext2 [ 447.998883][ T4474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.023754][ T4474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.041941][ T4474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.122072][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.159717][ T4474] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.176613][T23724] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.183712][T23724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.199728][T23724] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.206829][T23724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.215887][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 448.215900][ T28] audit: type=1326 audit(2000002036.813:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.2.12135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7fc00000 [ 448.343253][ T4843] loop5: detected capacity change from 0 to 512 [ 448.370594][ T4474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.407588][ T4843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.429911][ T4843] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #11: comm syz.5.12162: iget: bad extended attribute block 3153 [ 448.560545][ T4474] veth0_vlan: entered promiscuous mode [ 448.566070][ T4843] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 448.567920][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 448.583465][ C0] EXT4-fs (loop5): initial error at time 2000002037: ext4_orphan_get:1391: inode 11 [ 448.592854][ C0] EXT4-fs (loop5): last error at time 2000002037: ext4_orphan_get:1391: inode 11 [ 448.602601][ T4843] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.12162: couldn't read orphan inode 11 (err -117) [ 448.621629][ T4843] loop5: lost filesystem error report for type 5 error -117 [ 448.626106][ T4843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.654790][ T4474] veth1_vlan: entered promiscuous mode [ 448.676615][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.729862][ T4474] veth0_macvtap: entered promiscuous mode [ 448.763545][ T4474] veth1_macvtap: entered promiscuous mode [ 448.804484][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.829506][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.855683][T23732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.879202][T23732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.898792][T23732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.917758][ T4914] syzkaller1: entered promiscuous mode [ 448.924960][ T4914] syzkaller1: entered allmulticast mode [ 448.945974][T23732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.498639][ T5005] syzkaller1: entered promiscuous mode [ 449.533335][ T5005] syzkaller1: entered allmulticast mode [ 450.135016][ T5055] SELinux: failed to load policy [ 450.205658][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.212938][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.261319][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.270818][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.374274][T23734] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.398194][T23734] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.432821][T23734] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.448010][T23734] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.501181][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12224'. [ 450.548355][ T5081] syz_tun: entered promiscuous mode [ 450.560497][ T5081] macsec1: entered promiscuous mode [ 450.575736][ T5081] macsec1: entered allmulticast mode [ 450.585846][ T5081] syz_tun: entered allmulticast mode [ 450.600716][ T5081] syz_tun: left allmulticast mode [ 450.605994][ T5081] syz_tun: left promiscuous mode [ 450.808099][ T28] audit: type=1400 audit(2000002039.393:2768): avc: denied { lock } for pid=5108 comm="syz.5.12235" path="socket:[106391]" dev="sockfs" ino=106391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 450.905958][ T28] audit: type=1326 audit(2000002039.493:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 450.940204][ T28] audit: type=1326 audit(2000002039.493:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 450.964283][ T28] audit: type=1326 audit(2000002039.523:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 450.988350][ T28] audit: type=1326 audit(2000002039.523:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 451.023940][ T28] audit: type=1326 audit(2000002039.523:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 451.053700][ T5132] netlink: 'syz.2.12245': attribute type 1 has an invalid length. [ 451.060082][ T28] audit: type=1326 audit(2000002039.523:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 451.078055][ T5132] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12245'. [ 451.086221][ T28] audit: type=1326 audit(2000002039.523:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 451.119783][ T28] audit: type=1326 audit(2000002039.523:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.12240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17fa1bc799 code=0x7ffc0000 [ 451.372593][ T5166] loop1: detected capacity change from 0 to 512 [ 451.466682][ T5166] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 451.486654][ T5166] System zones: 0-2, 18-18, 34-35 [ 451.511492][ T5166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.524356][ T5166] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.570198][ T4443] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.613376][ T5196] netlink: 'syz.1.12273': attribute type 12 has an invalid length. [ 451.631564][ T5196] netlink: 'syz.1.12273': attribute type 29 has an invalid length. [ 451.640309][ T5196] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12273'. [ 451.667501][ T5196] netlink: 'syz.1.12273': attribute type 2 has an invalid length. [ 451.726294][ T5214] loop1: detected capacity change from 0 to 1024 [ 451.733091][ T5214] EXT4-fs: Ignoring removed mblk_io_submit option [ 451.763187][ T5214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.891695][ T4443] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.907359][ T5230] all (unregistering): Released all slaves [ 451.968404][ T5240] syzkaller1: entered promiscuous mode [ 451.974126][ T5240] syzkaller1: entered allmulticast mode [ 451.999845][ T5243] loop3: detected capacity change from 0 to 1024 [ 452.014468][ T5243] EXT4-fs: inline encryption not supported [ 452.030014][ T5243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.072035][ T4474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.153890][ T5261] netlink: 'syz.7.12301': attribute type 10 has an invalid length. [ 452.162364][ T5261] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.12301'. [ 452.526513][ T5299] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5299 comm=syz.5.12317 [ 452.711048][ T5316] netlink: 'syz.3.12324': attribute type 2 has an invalid length. [ 452.735709][ T5318] team0: Port device syz_tun added [ 452.965114][ T5335] IPVS: persistence engine module ip_vs_pe_ not found [ 453.615199][ T5392] bridge_slave_0: left allmulticast mode [ 453.626433][ T5392] bridge_slave_0: left promiscuous mode [ 453.638736][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.646422][ T5392] bridge_slave_1: left allmulticast mode [ 453.652162][ T5392] bridge_slave_1: left promiscuous mode [ 453.657795][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.666853][ T5392] bond0: (slave bond_slave_0): Releasing backup interface [ 453.674606][ T5392] bond0: (slave bond_slave_1): Releasing backup interface [ 453.682335][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.689856][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.697214][ T5392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.021938][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 454.021952][ T28] audit: type=1400 audit(2000002042.613:2837): avc: denied { append } for pid=5431 comm="syz.1.12377" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 454.074216][ T28] audit: type=1400 audit(2000002042.663:2838): avc: denied { remount } for pid=5434 comm="syz.5.12378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 454.102708][ T28] audit: type=1400 audit(2000002042.693:2839): avc: denied { unmount } for pid=32042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 454.135278][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12379'. [ 454.146925][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12379'. [ 454.231322][ T5447] loop5: detected capacity change from 0 to 128 [ 454.257700][ T5447] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.278066][ T5447] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 454.317397][T32042] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.340901][ T5457] ipvlan2: entered promiscuous mode [ 454.347762][ T5457] team0: Device ipvlan2 failed to register rx_handler [ 454.355574][ T5459] program syz.2.12387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.433570][ T5471] team0: Device macvtap1 failed to register rx_handler [ 454.519535][ T5483] IPv6: NLM_F_REPLACE set, but no existing node found! [ 454.565765][ T28] audit: type=1326 audit(2000002043.153:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.5.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 454.591861][ T28] audit: type=1326 audit(2000002043.183:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.5.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 454.680715][ T28] audit: type=1326 audit(2000002043.183:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.5.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 454.705448][ T28] audit: type=1326 audit(2000002043.183:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.5.12399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f02cc799 code=0x7ffc0000 [ 454.981253][ T5521] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 454.997960][ T5521] vhci_hcd vhci_hcd.2: invalid port number 96 [ 455.004043][ T5521] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 455.193418][ T28] audit: type=1400 audit(2000002043.783:2844): avc: denied { bind } for pid=5555 comm="syz.7.12429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 455.234235][ T28] audit: type=1400 audit(2000002043.783:2845): avc: denied { name_bind } for pid=5555 comm="syz.7.12429" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 455.258411][ T5561] tipc: Enabling of bearer rejected, failed to enable media [ 455.264548][ T28] audit: type=1400 audit(2000002043.783:2846): avc: denied { node_bind } for pid=5555 comm="syz.7.12429" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 455.570180][ T5596] can0: slcan on ptm0. [ 456.038027][ T5589] can0 (unregistered): slcan off ptm0. [ 457.056851][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12468'. [ 457.299123][ T5710] syzkaller1: entered promiscuous mode [ 457.314813][ T5710] syzkaller1: entered allmulticast mode [ 457.631080][ T5739] syzkaller1: entered promiscuous mode [ 457.653142][ T5739] syzkaller1: entered allmulticast mode [ 458.788908][ T5773] syzkaller1: entered promiscuous mode [ 458.807440][ T5773] syzkaller1: entered allmulticast mode [ 459.158671][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 459.179409][ T5786] sctp: [Deprecated]: syz.3.12508 (pid 5786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.179409][ T5786] Use struct sctp_sack_info instead [ 459.213444][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 459.213523][ T28] audit: type=1400 audit(2000002047.803:2874): avc: denied { setattr } for pid=5798 comm="syz.5.12513" name="/" dev="configfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 459.269177][ T5803] loop5: detected capacity change from 0 to 1024 [ 459.307474][ T5805] SELinux: failed to load policy [ 459.315303][ T5803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.343977][ T5803] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.12515: Allocating blocks 449-513 which overlap fs metadata [ 459.359033][ T5803] EXT4-fs (loop5): Remounting filesystem read-only [ 459.374293][ T5802] EXT4-fs (loop5): pa ffff888107c26e70: logic 48, phys. 177, len 21 [ 459.391815][T32042] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.726080][ T5847] ================================================================== [ 459.734176][ T5847] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 459.742069][ T5847] [ 459.744371][ T5847] write to 0xffff88811c734818 of 8 bytes by task 5848 on cpu 0: [ 459.751973][ T5847] cpu_map_kthread_run+0x4fe/0x1680 [ 459.757148][ T5847] kthread+0x22a/0x280 [ 459.761190][ T5847] ret_from_fork+0x150/0x360 [ 459.765760][ T5847] ret_from_fork_asm+0x1a/0x30 [ 459.770507][ T5847] [ 459.772809][ T5847] read to 0xffff88811c734818 of 8 bytes by task 5847 on cpu 1: [ 459.780325][ T5847] bq_flush_to_queue+0x124/0x360 [ 459.785246][ T5847] __cpu_map_flush+0x47/0xa0 [ 459.789810][ T5847] xdp_do_flush+0xf8/0x160 [ 459.794205][ T5847] bpf_test_run_xdp_live+0xe8a/0x1360 [ 459.799562][ T5847] bpf_prog_test_run_xdp+0x57b/0xa10 [ 459.804850][ T5847] bpf_prog_test_run+0x204/0x340 [ 459.809768][ T5847] __sys_bpf+0x52e/0x7e0 [ 459.813987][ T5847] __x64_sys_bpf+0x41/0x50 [ 459.818386][ T5847] x64_sys_call+0x10cb/0x3020 [ 459.823041][ T5847] do_syscall_64+0x12c/0x370 [ 459.827614][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.833484][ T5847] [ 459.835784][ T5847] value changed: 0xffff8881482b3070 -> 0x0000000000000000 [ 459.842864][ T5847] [ 459.845169][ T5847] Reported by Kernel Concurrency Sanitizer on: [ 459.851311][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz.1.12534 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.862228][ T5847] Tainted: [W]=WARN [ 459.866011][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.876041][ T5847] ==================================================================