last executing test programs: 1m39.968539023s ago: executing program 32 (id=76): r0 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x203}, 0x1}) io_uring_enter(r0, 0xdb4, 0xf258, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 1m28.125934558s ago: executing program 33 (id=346): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m21.069266552s ago: executing program 4 (id=518): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x94, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "754b9297d2f7d6ead1a8c625a6027c3da33ee7e67c5272bc672d774f827eecc0", "662cace2cd9bd233ecc708562880f2ed3e7915338888a348911f971c4561b852748b7796a4206c69face32b5aee53bea", "f239aecfba4b4ca42238c094d7c4c11f8264d679933e923937f3dbea", {"6bf7792a72a9a6bbc653880fadc8e4f6", "74281f809ca35bb7b5e2ab813678f21e"}}}}}}}, 0x0) 1m21.000704457s ago: executing program 4 (id=519): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m20.122145998s ago: executing program 4 (id=540): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 1m19.937139039s ago: executing program 4 (id=543): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x42000, 0x0) sync_file_range(r0, 0x9, 0x40000fe, 0x7) 1m19.864551293s ago: executing program 4 (id=545): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffd}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0) 1m19.591226929s ago: executing program 3 (id=551): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x8) ftruncate(r0, 0x8800000) io_uring_setup(0x10f7, &(0x7f00000004c0)={0x0, 0x296d, 0x2, 0x2, 0xdc}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) sendfile(r1, r0, 0x0, 0x558410e8) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.496767595s ago: executing program 4 (id=552): close(0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x44f3, 0x143001) unlinkat(r0, 0x0, 0x200) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x0, 0x42, 0x0, 0x0) 1m19.477416336s ago: executing program 34 (id=552): close(0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x44f3, 0x143001) unlinkat(r0, 0x0, 0x200) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x0, 0x42, 0x0, 0x0) 1m19.317724335s ago: executing program 3 (id=554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.249188489s ago: executing program 3 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m19.128705406s ago: executing program 3 (id=556): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000000c00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x42000, 0x0) sync_file_range(r0, 0x9, 0x40000fe, 0x7) 1m19.07180234s ago: executing program 3 (id=558): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 1m18.496564703s ago: executing program 3 (id=566): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m18.496378453s ago: executing program 35 (id=566): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m11.619900667s ago: executing program 6 (id=704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m11.543326461s ago: executing program 6 (id=707): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4008085) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 1m11.461373126s ago: executing program 6 (id=709): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x9, 0x2c1, &(0x7f0000001880)="$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") openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x800000a1e) 1m11.366771661s ago: executing program 6 (id=710): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 1m10.948361546s ago: executing program 6 (id=717): r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4000, @fd, 0x96, 0x0, 0x0, 0x5, 0x0, {0x1, r3}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m10.688691301s ago: executing program 6 (id=723): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) setresuid(0x0, 0xee00, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1m10.658904373s ago: executing program 36 (id=723): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) setresuid(0x0, 0xee00, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 47.597039277s ago: executing program 2 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x67) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 46.645048792s ago: executing program 2 (id=1249): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 46.549996358s ago: executing program 2 (id=1250): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 46.280599814s ago: executing program 2 (id=1260): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 45.948814993s ago: executing program 2 (id=1267): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4004) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1913e) 45.776013124s ago: executing program 2 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}}, 0x2000a100) 45.715782617s ago: executing program 37 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}}, 0x2000a100) 9.908729878s ago: executing program 9 (id=1957): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x12) 9.452634215s ago: executing program 9 (id=1963): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x54, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xc}, {0x0, 0xf}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xe7da}, {0x8, 0xb, 0x36}, {0x8, 0xb, 0x800}]}, 0x54}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f000300"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 9.385736949s ago: executing program 9 (id=1964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) 9.228304138s ago: executing program 9 (id=1967): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 9.056230798s ago: executing program 9 (id=1971): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x3, &(0x7f0000000400)='roo4c\xbe\xb1\x8f/hi\"9\xf2\xe7\xe0\xa7/\x17\'?\xae)\x18\xb2r\xfc%(\xe4\x9c\f\xbf\xb5\x83\x18\xb6^X\xa0\xf6\xdd\x0f\x1d\xd0\x03\x14\xe3\x96\x0f\xc4\xd1\xdb\xfb\x8dU\x15\xcb\xf3f\xf2\xd0y3\vz/\\\xe9\xf5*\xa5\xdf\xdf\xbeP%4\xe0\xcc!\xff\x140\x8b\xdeX\xc4\xfe\x85\x80X\b\x1d\xe9T\x95K\xad\xaf@\x9b\xbb\xf4\x96c\v\xe0\x8dG\xe0~\xde\x86=\xc0\xd0 \xbf\xf8\x0f\xd7\x99\xb8\t\x8amhG\xb5_\\\x14$d\xf3\\]*>\xcf\x18\xcb!\xe9i\x01\xcd\x1e\xc6\x9d$d\x9f*@|\a\xe8\x17\xe8M2Z;\xd4\x03\xfe\x8a_G\xfd\xf8\xf2\xc1\x11\x9f\xfc)\xd5\xeaP\xe6\xaf|4ad\xd6\xca%0\xe0\xfcf[7m\xba\x1f\xff\x9e\xa3\xcd\x1e\xaaj\xd2Pp8\x19\vJl!K\xfd\xe7\x9f\x1d\'\xc6\xd2\xe2\xf2[+\x83+\x8b\x8c\xf7\xb4C\xac\x02\xc4\xbf\x89\x93l\x9b\xd6s', &(0x7f0000000880), 0x0) 8.6864424s ago: executing program 9 (id=1979): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x304e, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) 8.590696816s ago: executing program 38 (id=1979): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x304e, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) 3.315356825s ago: executing program 1 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) 2.943845958s ago: executing program 1 (id=2073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14fd88a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 2.836670704s ago: executing program 1 (id=2074): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 2.620591106s ago: executing program 1 (id=2078): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x300, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x630a4, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000) 2.515332692s ago: executing program 1 (id=2082): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x81}, 0x100b28, 0xa, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.947666115s ago: executing program 1 (id=2091): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) truncate(&(0x7f00000000c0)='./file1\x00', 0x40020fe000002) 1.767132226s ago: executing program 0 (id=2095): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000) recvmsg(r0, &(0x7f0000000d00)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.670684322s ago: executing program 7 (id=2098): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) 1.614007415s ago: executing program 7 (id=2099): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) 1.560737559s ago: executing program 7 (id=2101): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0) close(0x3) 1.53285356s ago: executing program 0 (id=2102): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') msgsnd(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1.342934191s ago: executing program 8 (id=2106): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 1.334767282s ago: executing program 7 (id=2107): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1e61, 0x9296, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) 1.264636256s ago: executing program 8 (id=2108): signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 1.245037717s ago: executing program 8 (id=2109): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a0000005733f31e4a68232217259dd085fe52a0f96e6d0e4914374623298bf6164c6edc469a100997a1fe5054f283855993aa80d11f0ac4d4575537d4496ae39334e1d5a9c590770d9cc2fac7ad6eb355297bd49a346a15ac2c4d8eb6fe32c15c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c000000ac141427000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.112716835s ago: executing program 8 (id=2111): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat(r1, 0x0, 0x40, 0x14) 1.026831559s ago: executing program 0 (id=2113): r0 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 892.801798ms ago: executing program 7 (id=2114): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x40004331}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 892.100818ms ago: executing program 0 (id=2124): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6105060302016ccbdfac"], 0x61) 762.100075ms ago: executing program 0 (id=2116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6005}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x26) 639.125533ms ago: executing program 0 (id=2117): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 463.902542ms ago: executing program 5 (id=2120): r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0xe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x4ccd, 0x8713, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) 354.617829ms ago: executing program 5 (id=2121): r0 = socket(0x1, 0x1, 0x0) close(r0) mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004}) 325.564741ms ago: executing program 5 (id=2122): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 301.555643ms ago: executing program 5 (id=2123): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') msgsnd(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 279.213514ms ago: executing program 8 (id=2125): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x10100, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 193.983919ms ago: executing program 8 (id=2126): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1e61, 0x9296, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) 23.776988ms ago: executing program 5 (id=2127): r0 = syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x10000, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e50000000000", @ANYRES32=0x0, @ANYRES32], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x51, 0x0, @fd, 0x1, 0x0, 0x7, 0x1}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 23.372109ms ago: executing program 7 (id=2128): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)='-', 0x1, 0x4004085, 0x0, 0x0) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 5 (id=2129): r0 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) sendto$inet(r0, &(0x7f0000000040)='J', 0x1, 0x4004084, 0x0, 0x0) kernel console output (not intermixed with test programs): hout journal. Quota mode: writeback. [ 72.326162][ T3439] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.345988][ T6052] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.352164][ T6052] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.800: invalid indirect mapped block 4294967295 (level 1) [ 72.376900][ T6052] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.380783][ T6052] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.800: invalid indirect mapped block 4294967295 (level 2) [ 72.406724][ T28] kauditd_printk_skb: 217 callbacks suppressed [ 72.406740][ T28] audit: type=1400 audit(1770772453.886:794): avc: denied { mount } for pid=5769 comm="syz-executor" name="/" dev="gadgetfs" ino=4626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.407711][ T3439] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.458961][ T6064] netlink: 104 bytes leftover after parsing attributes in process `syz.7.805'. [ 72.470619][ T6038] loop2: detected capacity change from 0 to 32768 [ 72.471398][ T6052] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.477934][ T3439] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.497498][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.518954][ T6052] EXT4-fs (loop1): 1 truncate cleaned up [ 72.527411][ T3298] loop2: p1 p2 p3 < p5 p6 > [ 72.535680][ T3298] loop2: p2 size 16775168 extends beyond EOD, truncated [ 72.547441][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.580376][ T3298] loop2: p5 start 4294970168 is beyond EOD, truncated [ 72.611847][ T6038] loop2: p1 p2 p3 < p5 p6 > [ 72.635230][ T6038] loop2: p2 size 16775168 extends beyond EOD, truncated [ 72.636805][ T6038] loop2: p5 start 4294970168 is beyond EOD, truncated [ 72.683956][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.732519][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.733532][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.757554][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.757877][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 72.823944][ T28] audit: type=1400 audit(1770772454.296:795): avc: denied { write } for pid=6084 comm="syz.7.812" name="ip6_mr_cache" dev="proc" ino=4026533420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.851521][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 72.866596][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.867409][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.887730][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.951290][ T6094] loop1: detected capacity change from 0 to 512 [ 73.010100][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.055941][ T6094] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.137681][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.283449][ T6120] loop1: detected capacity change from 0 to 128 [ 73.292575][ T6121] net_ratelimit: 3320 callbacks suppressed [ 73.292592][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.307562][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.316751][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.325851][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.334982][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.344105][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.353282][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.362388][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.371556][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.380656][ T6121] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 73.395697][ T6120] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.068980][ T28] audit: type=1326 audit(1770772455.546:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.159172][ T28] audit: type=1326 audit(1770772455.546:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.222260][ T28] audit: type=1326 audit(1770772455.546:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.261528][ T6157] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 74.287117][ T28] audit: type=1326 audit(1770772455.546:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.313266][ T28] audit: type=1326 audit(1770772455.576:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.337910][ T28] audit: type=1326 audit(1770772455.576:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.361254][ T28] audit: type=1326 audit(1770772455.576:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.384631][ T28] audit: type=1326 audit(1770772455.576:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.8.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 74.427272][ T6157] EXT4-fs (loop1): Remounting filesystem read-only [ 74.433896][ T6157] EXT4-fs (loop1): 1 truncate cleaned up [ 74.490406][ T6157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.553925][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.631857][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.841'. [ 74.647609][ T6174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.649271][ T6171] netlink: 9 bytes leftover after parsing attributes in process `syz.1.841'. [ 74.692855][ T6174] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.724597][ T6179] netlink: 68 bytes leftover after parsing attributes in process `syz.1.845'. [ 74.801257][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.892009][ T6196] EXT4-fs: Ignoring removed orlov option [ 74.936800][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 74.937394][ T6196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.059082][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.477406][ T6250] netlink: 2 bytes leftover after parsing attributes in process `syz.7.870'. [ 75.491840][ T6250] netlink: 2 bytes leftover after parsing attributes in process `syz.7.870'. [ 75.532176][ T6250] netlink: 2 bytes leftover after parsing attributes in process `syz.7.870'. [ 75.544347][ T6250] netlink: 2 bytes leftover after parsing attributes in process `syz.7.870'. [ 75.575812][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 75.660358][ T3388] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.680908][ T3388] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.875534][ T6285] set_capacity_and_notify: 3 callbacks suppressed [ 75.875555][ T6285] loop1: detected capacity change from 0 to 256 [ 75.893148][ T6285] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.079123][ T3395] IPVS: starting estimator thread 0... [ 76.165864][ T6300] IPVS: using max 2256 ests per chain, 112800 per kthread [ 76.205856][ T3395] kernel write not supported for file /vcs (pid: 3395 comm: kworker/0:4) [ 76.346772][ T6337] loop2: detected capacity change from 0 to 128 [ 76.367873][ T6337] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.420118][ T6337] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.482124][ T6346] loop8: detected capacity change from 0 to 256 [ 76.496627][ T6346] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.536960][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.596025][ T3363] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 76.614557][ T3363] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.996143][ T3402] kernel write not supported for file /vcs (pid: 3402 comm: kworker/1:3) [ 77.095685][ T6409] loop9: detected capacity change from 0 to 128 [ 77.166291][ T6409] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.219360][ T6409] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.386788][ T5769] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.555405][ T6464] loop1: detected capacity change from 0 to 1024 [ 77.599579][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.645259][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.810008][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 77.810104][ T28] audit: type=1326 audit(1770772459.286:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.9.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 77.929642][ T28] audit: type=1326 audit(1770772459.316:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.9.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 77.981514][ T28] audit: type=1326 audit(1770772459.316:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.9.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 78.007427][ T28] audit: type=1326 audit(1770772459.316:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.9.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 78.190670][ T6530] loop2: detected capacity change from 0 to 1024 [ 78.239901][ T6530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.295095][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.440414][ T28] audit: type=1326 audit(1770772459.916:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 78.483214][ T28] audit: type=1326 audit(1770772459.916:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 78.537411][ T6568] netlink: 'syz.1.968': attribute type 1 has an invalid length. [ 78.564392][ T6568] __nla_validate_parse: 7 callbacks suppressed [ 78.564411][ T6568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.968'. [ 78.581734][ T28] audit: type=1326 audit(1770772459.916:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 78.586724][ T6575] batadv_slave_1: entered promiscuous mode [ 78.636270][ T28] audit: type=1326 audit(1770772459.916:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6556 comm="syz.8.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 78.694395][ T6573] batadv_slave_1: left promiscuous mode [ 78.736626][ T28] audit: type=1326 audit(1770772460.136:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.9.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x0 [ 79.504502][ T28] audit: type=1326 audit(1770772460.976:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354a4ebf79 code=0x7ffc0000 [ 79.596025][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 79.620731][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 80.109554][ T6644] netlink: 'syz.2.987': attribute type 11 has an invalid length. [ 80.130712][ T6644] netlink: 140 bytes leftover after parsing attributes in process `syz.2.987'. [ 80.157289][ T6646] loop9: detected capacity change from 0 to 8192 [ 80.243350][ T6655] batadv_slave_1: entered promiscuous mode [ 80.250468][ T6653] batadv_slave_1: left promiscuous mode [ 80.432168][ T6681] netlink: 'syz.9.1003': attribute type 1 has an invalid length. [ 80.451083][ T6681] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1003'. [ 80.660518][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1006'. [ 80.692802][ T6691] chnl_net:caif_netlink_parms(): no params data found [ 81.035466][ T6717] loop2: detected capacity change from 0 to 1024 [ 81.044660][ T6717] EXT4-fs: inline encryption not supported [ 81.077050][ T6717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.115402][ T6708] loop7: detected capacity change from 0 to 8192 [ 81.180664][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.433166][ T6755] loop7: detected capacity change from 0 to 512 [ 81.465410][ T6755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.483575][ T6758] loop9: detected capacity change from 0 to 1024 [ 81.500884][ T6755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.519856][ T6758] EXT4-fs: inline encryption not supported [ 81.547275][ T6755] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.577551][ T6758] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.611688][ T6755] EXT4-fs (loop7): shut down requested (2) [ 81.635911][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.687108][ T5769] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.830688][ T6775] loop8: detected capacity change from 0 to 512 [ 81.861178][ T6775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.903570][ T6775] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.943340][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.973330][ T6788] loop2: detected capacity change from 0 to 1024 [ 81.982191][ T6788] EXT4-fs: inline encryption not supported [ 82.010628][ T6788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.104890][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.262410][ T6811] loop2: detected capacity change from 0 to 512 [ 82.272195][ T6811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.315333][ T6811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.340784][ T6811] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.351316][ T6817] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1057'. [ 82.378610][ T6811] EXT4-fs (loop2): shut down requested (2) [ 82.431638][ T6817] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 82.467844][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.831146][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 82.831165][ T28] audit: type=1326 audit(1770772464.306:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 82.914835][ T28] audit: type=1326 audit(1770772464.306:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.004198][ T6883] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 83.012147][ T28] audit: type=1326 audit(1770772464.336:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f930e2fc84e code=0x7ffc0000 [ 83.083766][ T28] audit: type=1326 audit(1770772464.356:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.107918][ T28] audit: type=1326 audit(1770772464.356:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.144169][ T28] audit: type=1326 audit(1770772464.356:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.167952][ T28] audit: type=1326 audit(1770772464.356:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.187133][ T6883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.191949][ T28] audit: type=1326 audit(1770772464.356:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.221555][ T28] audit: type=1326 audit(1770772464.356:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.245144][ T28] audit: type=1326 audit(1770772464.516:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.9.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f930e33bf79 code=0x7ffc0000 [ 83.354180][ T6895] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1084'. [ 83.365143][ T6895] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 83.433836][ T6899] netlink: 'syz.1.1087': attribute type 9 has an invalid length. [ 83.447977][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 83.487709][ T6901] loop2: detected capacity change from 0 to 2048 [ 83.504633][ T6899] netlink: 'syz.1.1087': attribute type 9 has an invalid length. [ 83.528304][ T6901] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.537903][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 83.558817][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.596826][ T6901] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1088: bg 0: block 234: padding at end of block bitmap is not set [ 83.611577][ T6901] EXT4-fs (loop2): Remounting filesystem read-only [ 83.618418][ T6901] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 83.693856][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.814700][ T6935] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1093'. [ 84.115177][ T6974] netlink: 'syz.2.1111': attribute type 9 has an invalid length. [ 84.135147][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 84.149231][ T6974] netlink: 'syz.2.1111': attribute type 9 has an invalid length. [ 84.149183][ T51] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.166018][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 84.180280][ T51] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.189369][ T51] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.199518][ T51] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.357286][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 84.378291][ T6981] netlink: 'syz.1.1104': attribute type 7 has an invalid length. [ 84.413360][ T6981] netlink: 'syz.1.1104': attribute type 7 has an invalid length. [ 84.438670][ T6978] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.111124][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1118'. [ 85.348040][ T7018] netlink: 'syz.7.1120': attribute type 7 has an invalid length. [ 85.366545][ T7018] netlink: 'syz.7.1120': attribute type 7 has an invalid length. [ 85.480884][ T7022] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1122'. [ 85.822793][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1132'. [ 86.428120][ T7080] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1144'. [ 86.778397][ T7088] loop2: detected capacity change from 0 to 1024 [ 86.812877][ T7088] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.850510][ T7088] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 86.869304][ T7088] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.886833][ T7088] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.1147: Failed to acquire dquot type 0 [ 86.955799][ T7088] loop2: lost filesystem error report for type 5 error -117 [ 86.956173][ T7088] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.1147: Failed to acquire dquot type 0 [ 86.975515][ T7088] loop2: lost filesystem error report for type 5 error -117 [ 86.977094][ T7088] EXT4-fs error (device loop2): ext4_free_blocks:6727: comm syz.2.1147: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.005789][ T7088] loop2: lost filesystem error report for type 5 error -117 [ 87.006098][ T7088] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.1147: Failed to acquire dquot type 0 [ 87.026323][ T7088] loop2: lost filesystem error report for type 5 error -117 [ 87.026556][ T7088] EXT4-fs (loop2): 1 orphan inode deleted [ 87.050696][ T7088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.100561][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.430821][ T7107] bridge0: port 3(vlan2) entered blocking state [ 87.437956][ T7107] bridge0: port 3(vlan2) entered disabled state [ 87.444477][ T7107] vlan2: entered allmulticast mode [ 87.449866][ T7107] bridge0: entered allmulticast mode [ 87.455839][ T7107] vlan2: left allmulticast mode [ 87.460813][ T7107] bridge0: left allmulticast mode [ 87.467561][ T7094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.478526][ T7094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.608636][ T7113] loop9: detected capacity change from 0 to 128 [ 87.615315][ T7113] EXT4-fs: Ignoring removed nobh option [ 87.632143][ T7113] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.648658][ T7115] loop8: detected capacity change from 0 to 1024 [ 87.657935][ T7115] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.669065][ T7113] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.677071][ T7115] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 87.700102][ T7115] EXT4-fs (loop8): orphan cleanup on readonly fs [ 87.709653][ T7115] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.1161: Failed to acquire dquot type 0 [ 87.733123][ T7115] loop8: lost filesystem error report for type 5 error -117 [ 87.733302][ T7115] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.1161: Failed to acquire dquot type 0 [ 87.752400][ T7115] loop8: lost filesystem error report for type 5 error -117 [ 87.754377][ T7115] EXT4-fs error (device loop8): ext4_free_blocks:6727: comm syz.8.1161: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.775704][ T7115] loop8: lost filesystem error report for type 5 error -117 [ 87.776219][ T7115] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.1161: Failed to acquire dquot type 0 [ 87.795142][ T7115] loop8: lost filesystem error report for type 5 error -117 [ 87.795581][ T7115] EXT4-fs (loop8): 1 orphan inode deleted [ 87.826714][ T7115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.859711][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.872120][ T5769] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.947867][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1164'. [ 87.957096][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1164'. [ 87.983680][ T64] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.008958][ T64] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.031574][ T64] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.048656][ T64] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.366678][ T7147] loop1: detected capacity change from 0 to 1024 [ 88.386369][ T7151] loop8: detected capacity change from 0 to 128 [ 88.392966][ T7151] EXT4-fs: Ignoring removed nobh option [ 88.402203][ T7147] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.449571][ T7147] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 88.471351][ T7147] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.472192][ T7151] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.490038][ T7147] __quota_error: 35 callbacks suppressed [ 88.490054][ T7147] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 88.516064][ T7151] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.516442][ T7147] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.579795][ T7147] EXT4-fs error (device loop1): ext4_acquire_dquot:6991: comm syz.1.1173: Failed to acquire dquot type 0 [ 88.635878][ T7147] loop1: lost filesystem error report for type 5 error -117 [ 88.636516][ T7147] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 88.663932][ T7147] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.686802][ T7147] EXT4-fs error (device loop1): ext4_acquire_dquot:6991: comm syz.1.1173: Failed to acquire dquot type 0 [ 88.690388][ T5114] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.712610][ T7147] loop1: lost filesystem error report for type 5 error -117 [ 88.712803][ T7147] EXT4-fs error (device loop1): ext4_free_blocks:6727: comm syz.1.1173: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.761515][ T7147] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 88.772023][ T7147] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 88.792389][ T7155] loop2: detected capacity change from 0 to 1024 [ 88.857186][ T7155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 88.875427][ T7155] System zones: 0-1, 3-8 [ 88.899580][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.906023][ T7147] EXT4-fs error (device loop1): ext4_acquire_dquot:6991: comm syz.1.1173: Failed to acquire dquot type 0 [ 88.923724][ T7147] EXT4-fs (loop1): 1 orphan inode deleted [ 88.930770][ T7147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.965886][ T7155] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.015805][ T28] audit: type=1400 audit(1770772470.486:955): avc: denied { append } for pid=7154 comm="syz.2.1176" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.049866][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.059403][ T7155] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.1176: lblock 0 mapped to illegal pblock 0 (length 1) [ 89.076085][ T7155] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 89.095801][ T7155] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.095801][ T7155] [ 89.128271][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.137001][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.179875][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.532562][ T7183] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 89.545873][ T7183] netlink: 'syz.1.1185': attribute type 2 has an invalid length. [ 89.763377][ T28] audit: type=1326 audit(1770772471.236:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b451bf79 code=0x7ffc0000 [ 89.800149][ T28] audit: type=1326 audit(1770772471.236:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc1b451bf79 code=0x7ffc0000 [ 89.851726][ T28] audit: type=1326 audit(1770772471.316:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.1.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b451bf79 code=0x7ffc0000 [ 89.954180][ T7204] loop1: detected capacity change from 0 to 1024 [ 90.020773][ T7204] EXT4-fs: dax option not supported [ 90.325798][ T7236] loop7: detected capacity change from 0 to 128 [ 90.357731][ T7236] EXT4-fs: Ignoring removed nobh option [ 90.397034][ T7236] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.418138][ T7236] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.579772][ T5073] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.671213][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.681776][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.864838][ T7272] loop7: detected capacity change from 0 to 512 [ 90.902921][ T7272] EXT4-fs: Ignoring removed nobh option [ 90.908965][ T7272] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 90.920046][ T7272] EXT4-fs (loop7): 1 truncate cleaned up [ 90.926454][ T7272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.982806][ T7275] loop8: detected capacity change from 0 to 1024 [ 90.989788][ T7275] EXT4-fs: dax option not supported [ 90.990956][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.283953][ T7297] netlink: 'syz.7.1231': attribute type 1 has an invalid length. [ 91.300124][ T7297] bond1: entered promiscuous mode [ 91.305613][ T7297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.325997][ T7297] bond1: (slave bridge1): making interface the new active one [ 91.333604][ T7297] bridge1: entered promiscuous mode [ 91.339784][ T7297] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 91.690677][ T7309] EXT4-fs: Ignoring removed nobh option [ 91.718582][ T7309] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.732006][ T7309] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.808267][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.891530][ T7318] SELinux: failed to load policy [ 91.943459][ T7327] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 91.960697][ T7327] bond1: entered promiscuous mode [ 91.968080][ T7327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.013016][ T7327] bond1: (slave bridge1): making interface the new active one [ 92.022593][ T7327] bridge1: entered promiscuous mode [ 92.028863][ T7327] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 92.140015][ T7340] netlink: 'syz.1.1248': attribute type 12 has an invalid length. [ 92.148919][ T7340] netlink: 'syz.1.1248': attribute type 29 has an invalid length. [ 92.157950][ T7340] __nla_validate_parse: 2 callbacks suppressed [ 92.158021][ T7340] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1248'. [ 92.173742][ T7340] netlink: 'syz.1.1248': attribute type 2 has an invalid length. [ 92.181739][ T7340] netlink: 'syz.1.1248': attribute type 3 has an invalid length. [ 92.205923][ T7340] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1248'. [ 92.231844][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 92.275311][ T7347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.357713][ T7347] bond3: (slave batadv1): Opening slave failed [ 92.500402][ T7373] set_capacity_and_notify: 1 callbacks suppressed [ 92.500456][ T7373] loop2: detected capacity change from 0 to 128 [ 92.529240][ T7373] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.541764][ T7373] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.574563][ T7374] loop7: detected capacity change from 0 to 4096 [ 92.604283][ T7374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.625799][ T7373] loop2: detected capacity change from 128 to 64 [ 92.646485][ T7379] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Out of memory [ 92.666229][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.675595][ T7379] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Out of memory [ 92.685542][ T7379] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #13: comm syz.2.1260: mark_inode_dirty error [ 92.699055][ T7379] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -12 [ 92.733708][ T7384] loop7: detected capacity change from 0 to 512 [ 92.749705][ T7384] EXT4-fs: Ignoring removed orlov option [ 92.755799][ T7379] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -12) [ 92.790129][ T7384] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 92.816976][ T3309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Out of memory [ 92.827334][ T3309] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 92.839329][ T7384] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 92.863308][ T7384] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.1264: corrupted in-inode xattr: e_value size too large [ 92.885786][ T7384] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.885986][ T7384] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1264: couldn't read orphan inode 15 (err -117) [ 92.907533][ T7384] fserror_report: 2 callbacks suppressed [ 92.907549][ T7384] loop7: lost filesystem error report for type 5 error -117 [ 92.913839][ T7384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.966149][ T6750] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.989124][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.030622][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.143296][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.155558][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.186490][ T7412] netlink: 'syz.7.1277': attribute type 8 has an invalid length. [ 93.194466][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1277'. [ 93.215491][ T7412] bond0: entered promiscuous mode [ 93.222037][ T7412] bond_slave_0: entered promiscuous mode [ 93.228535][ T7412] bond_slave_1: entered promiscuous mode [ 93.245891][ T7412] gretap0: entered promiscuous mode [ 93.252370][ T7412] debugfs: 'hsr1' already exists in 'hsr' [ 93.259154][ T7412] Cannot create hsr debugfs directory [ 93.264645][ T7412] hsr1: entered promiscuous mode [ 93.292176][ T7418] loop9: detected capacity change from 0 to 128 [ 93.300936][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.320869][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.356149][ T7418] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.401374][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.411782][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.415861][ T7418] loop9: detected capacity change from 128 to 64 [ 93.436549][ T7418] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Out of memory [ 93.446247][ T7418] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Out of memory [ 93.455551][ T7418] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #13: comm syz.9.1278: mark_inode_dirty error [ 93.467311][ T7418] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -12 [ 93.467466][ T7418] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -12) [ 93.510698][ T7402] chnl_net:caif_netlink_parms(): no params data found [ 93.534340][ T5769] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Out of memory [ 93.538467][ T36] bridge_slave_1: left allmulticast mode [ 93.549528][ T5769] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 93.549561][ T36] bridge_slave_1: left promiscuous mode [ 93.549894][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.575089][ T36] bridge_slave_0: left allmulticast mode [ 93.584000][ T36] bridge_slave_0: left promiscuous mode [ 93.590151][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.690491][ T36] gretap0 (unregistering): left promiscuous mode [ 93.747542][ T36] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 93.756005][ T36] bridge1 (unregistering): left promiscuous mode [ 93.797345][ T36] bond0 (unregistering): left promiscuous mode [ 93.803629][ T36] bond_slave_0: left promiscuous mode [ 93.809600][ T36] bond_slave_1: left promiscuous mode [ 93.817852][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.829825][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.841231][ T36] bond0 (unregistering): Released all slaves [ 93.849319][ T36] bond1 (unregistering): Released all slaves [ 93.858442][ T36] bond2 (unregistering): Released all slaves [ 93.867148][ T36] bond3 (unregistering): Released all slaves [ 93.909433][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.919477][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.927469][ T7402] bridge_slave_0: entered allmulticast mode [ 93.934392][ T7402] bridge_slave_0: entered promiscuous mode [ 93.943058][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.950836][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.958214][ T7402] bridge_slave_1: entered allmulticast mode [ 93.964996][ T7402] bridge_slave_1: entered promiscuous mode [ 93.983526][ T36] hsr_slave_0: left promiscuous mode [ 93.989468][ T36] hsr_slave_1: left promiscuous mode [ 93.996367][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.003781][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.011589][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.019482][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.029920][ T36] veth1_macvtap: left promiscuous mode [ 94.035407][ T36] veth0_macvtap: left promiscuous mode [ 94.041015][ T36] veth1_vlan: left promiscuous mode [ 94.047012][ T36] veth0_vlan: left promiscuous mode [ 94.128199][ T36] team0 (unregistering): Port device team_slave_1 removed [ 94.138286][ T36] team0 (unregistering): Port device team_slave_0 removed [ 94.177795][ T7402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.190945][ T7402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.215444][ T7402] team0: Port device team_slave_0 added [ 94.222498][ T7402] team0: Port device team_slave_1 added [ 94.240095][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.247514][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.275238][ T7402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.287212][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.294216][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.321626][ T7402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.355671][ T7402] hsr_slave_0: entered promiscuous mode [ 94.361955][ T7402] hsr_slave_1: entered promiscuous mode [ 94.367919][ T7402] debugfs: 'hsr0' already exists in 'hsr' [ 94.373678][ T7402] Cannot create hsr debugfs directory [ 94.471800][ T36] IPVS: stop unused estimator thread 0... [ 94.560551][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.570952][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.619127][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.630039][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.696931][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.708629][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.759779][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.770340][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.865239][ T12] bridge_slave_1: left allmulticast mode [ 94.871292][ T12] bridge_slave_1: left promiscuous mode [ 94.877310][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.885162][ T12] bridge_slave_0: left allmulticast mode [ 94.890938][ T12] bridge_slave_0: left promiscuous mode [ 94.896664][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.047935][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.058108][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.068072][ T12] bond0 (unregistering): Released all slaves [ 95.105025][ T12] hsr_slave_0: left promiscuous mode [ 95.110909][ T12] hsr_slave_1: left promiscuous mode [ 95.117546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.124965][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.133338][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.142628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.153862][ T12] veth1_macvtap: left promiscuous mode [ 95.159645][ T12] veth0_macvtap: left promiscuous mode [ 95.165237][ T12] veth1_vlan: left promiscuous mode [ 95.170679][ T12] veth0_vlan: left promiscuous mode [ 95.259226][ T12] team0 (unregistering): Port device team_slave_1 removed [ 95.270355][ T12] team0 (unregistering): Port device team_slave_0 removed [ 95.953658][ T7402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.962924][ T7402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.972401][ T7402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.982130][ T7402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.022842][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.034317][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.044837][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.052022][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.065359][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.072532][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.090468][ T7402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.102084][ T7402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.172164][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.257162][ T7402] veth0_vlan: entered promiscuous mode [ 96.265412][ T7402] veth1_vlan: entered promiscuous mode [ 96.281748][ T7402] veth0_macvtap: entered promiscuous mode [ 96.289942][ T7402] veth1_macvtap: entered promiscuous mode [ 96.302621][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.314298][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.327261][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.338207][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.350265][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.374119][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.476481][ T7658] net_ratelimit: 3321 callbacks suppressed [ 96.476498][ T7658] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.815367][ T7656] chnl_net:caif_netlink_parms(): no params data found [ 96.973710][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.005861][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.013169][ T7656] bridge_slave_0: entered allmulticast mode [ 97.020986][ T7656] bridge_slave_0: entered promiscuous mode [ 97.057805][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.065040][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.072482][ T7656] bridge_slave_1: entered allmulticast mode [ 97.082007][ T7656] bridge_slave_1: entered promiscuous mode [ 97.092965][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 97.092983][ T28] audit: type=1400 audit(1770772478.566:994): avc: denied { write } for pid=7712 comm="syz.8.1291" lport=39310 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 97.152598][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.165693][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.217690][ T7656] team0: Port device team_slave_0 added [ 97.226448][ T28] audit: type=1326 audit(1770772478.686:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 97.250878][ T7656] team0: Port device team_slave_1 added [ 97.298239][ T28] audit: type=1326 audit(1770772478.686:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 97.350884][ T28] audit: type=1326 audit(1770772478.686:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 97.375047][ T28] audit: type=1326 audit(1770772478.686:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 97.419320][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.425669][ T28] audit: type=1326 audit(1770772478.686:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 97.426526][ T28] audit: type=1326 audit(1770772478.686:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 97.474197][ T7733] loop7: detected capacity change from 0 to 1024 [ 97.481353][ T28] audit: type=1326 audit(1770772478.686:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 97.498879][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.574526][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.589435][ T7746] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.592414][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.607843][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.634080][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.664859][ T7656] hsr_slave_0: entered promiscuous mode [ 97.671283][ T7656] hsr_slave_1: entered promiscuous mode [ 97.678091][ T7656] debugfs: 'hsr0' already exists in 'hsr' [ 97.684022][ T7656] Cannot create hsr debugfs directory [ 97.765911][ T7759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7759 comm=syz.8.1304 [ 98.020214][ T28] audit: type=1326 audit(1770772479.496:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.1.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b451bf79 code=0x7ffc0000 [ 98.058422][ T28] audit: type=1326 audit(1770772479.496:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7782 comm="syz.1.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1b451bf79 code=0x7ffc0000 [ 98.198406][ T7797] loop0: detected capacity change from 0 to 1024 [ 98.360867][ T7816] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.431075][ T7656] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 98.467584][ T7656] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 98.499354][ T7827] loop7: detected capacity change from 0 to 128 [ 98.568609][ T7831] bio_check_eod: 42 callbacks suppressed [ 98.568626][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.568626][ T7831] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 98.588145][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.588145][ T7831] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 98.603184][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.603184][ T7831] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 98.617099][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.617099][ T7831] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 98.631839][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.631839][ T7831] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 98.660479][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.660479][ T7831] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 98.680240][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.680240][ T7831] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 98.694107][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.694107][ T7831] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 98.708725][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.708725][ T7831] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 98.722538][ T7831] syz.7.1315: attempt to access beyond end of device [ 98.722538][ T7831] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 98.759203][ T7656] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 98.803210][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 98.803515][ T7656] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 98.820574][ T7830] netlink: 'syz.1.1326': attribute type 30 has an invalid length. [ 98.981440][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.020859][ T7656] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.066694][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.073799][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.111758][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.119170][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.208837][ T7656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.329351][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.503787][ T7851] loop1: detected capacity change from 0 to 32768 [ 99.518834][ T3298] loop1: p1 p2 p3 < p5 p6 > [ 99.536287][ T3298] loop1: p2 size 16775168 extends beyond EOD, truncated [ 99.564382][ T3298] loop1: p5 start 4294970168 is beyond EOD, truncated [ 99.585562][ T7851] loop1: p1 p2 p3 < p5 p6 > [ 99.593161][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1336'. [ 99.601250][ T7851] loop1: p2 size 16775168 extends beyond EOD, truncated [ 99.620904][ T7851] loop1: p5 start 4294970168 is beyond EOD, truncated [ 99.633802][ T7917] bridge: RTM_NEWNEIGH with invalid ether address [ 99.654348][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1336'. [ 99.695928][ T7921] bridge: RTM_NEWNEIGH with invalid ether address [ 99.720165][ T7656] veth0_vlan: entered promiscuous mode [ 99.750184][ T7656] veth1_vlan: entered promiscuous mode [ 99.795074][ T7656] veth0_macvtap: entered promiscuous mode [ 99.811962][ T7656] veth1_macvtap: entered promiscuous mode [ 99.837115][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.863537][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 99.864012][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.878933][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 99.883786][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 99.902445][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 99.919497][ T64] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.940177][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 99.942815][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 99.959274][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 99.966625][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 99.985337][ T64] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.003121][ T64] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.018338][ T64] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.042457][ T7945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'. [ 100.066794][ T7945] bridge: RTM_NEWNEIGH with invalid ether address [ 100.075486][ T7945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'. [ 100.098475][ T7945] bridge: RTM_NEWNEIGH with invalid ether address [ 101.404835][ T8041] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1378'. [ 101.414016][ T8041] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 101.421576][ T8041] ..0ªî{X¹¦: entered allmulticast mode [ 101.427970][ T8041] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 101.802281][ T8050] loop8: detected capacity change from 0 to 32768 [ 101.890112][ T3299] loop8: p1 p2 p3 < p5 p6 > [ 101.895587][ T3299] loop8: p2 size 16775168 extends beyond EOD, truncated [ 101.922806][ T3299] loop8: p5 start 4294970168 is beyond EOD, truncated [ 101.942510][ T8050] loop8: p1 p2 p3 < p5 p6 > [ 101.968244][ T8050] loop8: p2 size 16775168 extends beyond EOD, truncated [ 102.000900][ T8050] loop8: p5 start 4294970168 is beyond EOD, truncated [ 102.131396][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 102.136900][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 102.346222][ T8116] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1409'. [ 102.368744][ T8116] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 102.397175][ T8116] ..0ªî{X¹¦: entered allmulticast mode [ 102.410532][ T8116] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 103.094460][ T8174] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 103.105764][ T1035] IPVS: starting estimator thread 0... [ 103.165250][ T8125] loop7: detected capacity change from 0 to 32768 [ 103.196118][ T8176] IPVS: using max 2304 ests per chain, 115200 per kthread [ 103.231580][ T3298] loop7: p1 p2 p3 < p5 p6 > [ 103.247971][ T3298] loop7: p2 size 16775168 extends beyond EOD, truncated [ 103.270698][ T3298] loop7: p5 start 4294970168 is beyond EOD, truncated [ 103.292438][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 103.292456][ T28] audit: type=1400 audit(1770772484.766:1078): avc: denied { write } for pid=8192 comm="syz.0.1437" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 103.327720][ T8125] loop7: p1 p2 p3 < p5 p6 > [ 103.381845][ T8125] loop7: p2 size 16775168 extends beyond EOD, truncated [ 103.416698][ T8125] loop7: p5 start 4294970168 is beyond EOD, truncated [ 103.891662][ T8190] loop1: detected capacity change from 0 to 32768 [ 103.959058][ T3298] loop1: p1 p2 p3 < p5 p6 > [ 103.964382][ T3298] loop1: p2 size 16775168 extends beyond EOD, truncated [ 103.992095][ T3298] loop1: p5 start 4294970168 is beyond EOD, truncated [ 104.040474][ T8190] loop1: p1 p2 p3 < p5 p6 > [ 104.046296][ T8190] loop1: p2 size 16775168 extends beyond EOD, truncated [ 104.056769][ T8190] loop1: p5 start 4294970168 is beyond EOD, truncated [ 104.092066][ T8236] netlink: 'syz.8.1449': attribute type 29 has an invalid length. [ 104.123462][ T8236] netlink: 'syz.8.1449': attribute type 29 has an invalid length. [ 104.154231][ T8236] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1449'. [ 104.322162][ T8252] loop0: detected capacity change from 0 to 1024 [ 104.339572][ T8252] EXT4-fs: Ignoring removed bh option [ 104.352288][ T10] IPVS: starting estimator thread 0... [ 104.358108][ T8255] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 104.398279][ T8252] EXT4-fs mount: 7 callbacks suppressed [ 104.398297][ T8252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.445818][ T8256] IPVS: using max 1920 ests per chain, 96000 per kthread [ 104.518445][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 104.530268][ T7402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.585666][ T8272] netlink: 'syz.0.1472': attribute type 29 has an invalid length. [ 104.614804][ T8272] netlink: 'syz.0.1472': attribute type 29 has an invalid length. [ 104.643249][ T8272] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1472'. [ 104.735466][ T28] audit: type=1400 audit(1770772486.206:1079): avc: denied { mount } for pid=8280 comm="syz.7.1466" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.759870][ T8285] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 104.809682][ T8285] bond1: entered promiscuous mode [ 104.815558][ T8285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.830856][ T28] audit: type=1400 audit(1770772486.306:1080): avc: denied { open } for pid=8291 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.854312][ T28] audit: type=1400 audit(1770772486.326:1081): avc: denied { kernel } for pid=8291 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.876482][ T28] audit: type=1400 audit(1770772486.326:1082): avc: denied { tracepoint } for pid=8291 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.896801][ T28] audit: type=1400 audit(1770772486.326:1083): avc: denied { write } for pid=8291 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.915620][ T8289] bond1: (slave bridge1): making interface the new active one [ 104.926607][ T8289] bridge1: entered promiscuous mode [ 104.933615][ T8289] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 105.059251][ T8300] SELinux: failed to load policy [ 105.111829][ T8310] netlink: 'syz.9.1479': attribute type 29 has an invalid length. [ 105.123444][ T8309] syz_tun: entered allmulticast mode [ 105.136186][ T8309] syz_tun: left allmulticast mode [ 105.155364][ T8310] netlink: 'syz.9.1479': attribute type 29 has an invalid length. [ 105.198976][ T8314] netlink: 'syz.1.1482': attribute type 4 has an invalid length. [ 105.202673][ T8310] netlink: 500 bytes leftover after parsing attributes in process `syz.9.1479'. [ 105.502796][ T28] audit: type=1400 audit(1770772486.976:1085): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.565625][ T28] audit: type=1400 audit(1770772486.976:1084): avc: denied { read write } for pid=7656 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.658066][ T28] audit: type=1400 audit(1770772486.976:1086): avc: denied { open } for pid=7656 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.691911][ T8337] loop8: detected capacity change from 0 to 1024 [ 105.719264][ T8337] EXT4-fs: Ignoring removed bh option [ 105.731732][ T28] audit: type=1400 audit(1770772486.976:1087): avc: denied { ioctl } for pid=7656 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.763939][ T8331] SELinux: failed to load policy [ 105.792290][ T8337] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.877279][ T8348] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 105.891469][ T8348] bond2: entered promiscuous mode [ 105.926134][ T8348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.929263][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.950257][ T8351] bond2: (slave bridge2): making interface the new active one [ 105.975565][ T8351] bridge2: entered promiscuous mode [ 105.982626][ T8351] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 106.301402][ T8346] loop9: detected capacity change from 0 to 32768 [ 106.377418][ T3299] loop9: p1 p2 p3 < p5 p6 > [ 106.385698][ T3299] loop9: p2 size 16775168 extends beyond EOD, truncated [ 106.427757][ T3299] loop9: p5 start 4294970168 is beyond EOD, truncated [ 106.441649][ T8346] loop9: p1 p2 p3 < p5 p6 > [ 106.453752][ T8346] loop9: p2 size 16775168 extends beyond EOD, truncated [ 106.496428][ T8346] loop9: p5 start 4294970168 is beyond EOD, truncated [ 106.742734][ T8396] netlink: 'syz.9.1511': attribute type 1 has an invalid length. [ 106.777761][ T8396] bond1: entered promiscuous mode [ 106.783035][ T8396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.791968][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 106.798950][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 106.808806][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 106.822969][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 106.859859][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 106.862076][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 106.872797][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 106.889028][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 106.943477][ T8400] bond1: (slave bridge1): making interface the new active one [ 107.005787][ T8400] bridge1: entered promiscuous mode [ 107.012305][ T8400] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 107.130273][ T8406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.146700][ T8406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.185262][ T8406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.212148][ T8406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.233138][ T8406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.269962][ T8406] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(13) [ 107.276631][ T8406] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.304995][ T8412] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 107.320141][ T8406] vhci_hcd vhci_hcd.0: Device attached [ 107.336427][ T8415] vhci_hcd: connection closed [ 107.336667][ T64] vhci_hcd vhci_hcd.9: stop threads [ 107.338916][ T8412] SELinux: failed to load policy [ 107.344903][ T64] vhci_hcd vhci_hcd.9: release socket [ 107.387697][ T64] vhci_hcd vhci_hcd.9: disconnect device [ 108.343042][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 108.343072][ T28] audit: type=1400 audit(1770772489.816:1219): avc: denied { create } for pid=8498 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.384659][ T8499] loop0: detected capacity change from 0 to 1024 [ 108.413343][ T8499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.455800][ T28] audit: type=1400 audit(1770772489.856:1220): avc: denied { create } for pid=8498 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.484978][ T28] audit: type=1400 audit(1770772489.876:1221): avc: denied { mounton } for pid=8498 comm="syz.0.1548" path="/55/file2" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.508690][ T7402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.511347][ T28] audit: type=1400 audit(1770772489.886:1222): avc: denied { connect } for pid=8501 comm="syz.8.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.538493][ T28] audit: type=1400 audit(1770772489.926:1223): avc: denied { mount } for pid=8498 comm="syz.0.1548" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.566840][ T28] audit: type=1400 audit(1770772489.926:1224): avc: denied { read } for pid=8498 comm="syz.0.1548" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 108.589728][ T28] audit: type=1400 audit(1770772489.956:1225): avc: denied { unmount } for pid=7402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.784341][ T28] audit: type=1400 audit(1770772490.256:1226): avc: denied { create } for pid=8521 comm="syz.8.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.836861][ T28] audit: type=1400 audit(1770772490.256:1227): avc: denied { write } for pid=8521 comm="syz.8.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.869872][ T28] audit: type=1400 audit(1770772490.346:1228): avc: denied { create } for pid=8528 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.002680][ T8541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.056535][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 109.076146][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 109.103751][ T8543] validate_nla: 2 callbacks suppressed [ 109.103767][ T8543] netlink: 'syz.0.1576': attribute type 6 has an invalid length. [ 109.129022][ T8547] netlink: 'syz.9.1568': attribute type 4 has an invalid length. [ 109.141186][ T3439] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.141219][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 109.141238][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 109.167951][ T3439] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.178629][ T8543] netlink: 'syz.0.1576': attribute type 6 has an invalid length. [ 109.185858][ T3439] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.243091][ T3439] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.382014][ T8560] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 109.467563][ T8569] loop0: detected capacity change from 0 to 128 [ 109.716519][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1582'. [ 109.816440][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1582'. [ 109.835976][ T8587] netlink: 'syz.9.1582': attribute type 6 has an invalid length. [ 109.861969][ T3439] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.875917][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1582'. [ 109.887171][ T3439] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.905928][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1582'. [ 109.914976][ T3439] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.951263][ T8587] netlink: 'syz.9.1582': attribute type 6 has an invalid length. [ 109.978624][ T3439] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.201762][ T8621] netlink: 'syz.7.1597': attribute type 4 has an invalid length. [ 110.212141][ T8624] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 110.306338][ T8637] loop8: detected capacity change from 0 to 128 [ 110.410710][ T8643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.448025][ T8643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.471274][ T8643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.481621][ T8643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.490598][ T8643] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.510588][ T8643] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(13) [ 110.517246][ T8643] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.531867][ T8643] vhci_hcd vhci_hcd.0: Device attached [ 110.546839][ T8651] vhci_hcd: connection closed [ 110.546969][ T51] vhci_hcd vhci_hcd.8: stop threads [ 110.569002][ T51] vhci_hcd vhci_hcd.8: release socket [ 110.574497][ T51] vhci_hcd vhci_hcd.8: disconnect device [ 110.588252][ T8656] loop7: detected capacity change from 0 to 256 [ 110.623644][ T8656] FAT-fs (loop7): Directory bread(block 64) failed [ 110.633416][ T8656] FAT-fs (loop7): Directory bread(block 65) failed [ 110.650004][ T8656] FAT-fs (loop7): Directory bread(block 66) failed [ 110.668287][ T8656] FAT-fs (loop7): Directory bread(block 67) failed [ 110.687052][ T8656] FAT-fs (loop7): Directory bread(block 68) failed [ 110.708443][ T8656] FAT-fs (loop7): Directory bread(block 69) failed [ 110.735095][ T8656] FAT-fs (loop7): Directory bread(block 70) failed [ 110.757302][ T8656] FAT-fs (loop7): Directory bread(block 71) failed [ 110.795967][ T8656] FAT-fs (loop7): Directory bread(block 72) failed [ 110.818901][ T8656] FAT-fs (loop7): Directory bread(block 73) failed [ 110.826828][ T8675] loop0: detected capacity change from 0 to 512 [ 110.836284][ T8675] EXT4-fs: Ignoring removed i_version option [ 110.843200][ T8675] EXT4-fs: Ignoring removed bh option [ 110.875771][ T8679] netlink: 'syz.9.1613': attribute type 4 has an invalid length. [ 110.886840][ T8675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.936433][ T8675] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.958040][ T8686] loop7: detected capacity change from 0 to 128 [ 111.062960][ T8696] EXT4-fs (loop0): shut down requested (2) [ 111.165441][ T8710] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1621'. [ 111.175432][ T7402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.604983][ T8778] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1645'. [ 111.653023][ T8784] loop1: detected capacity change from 0 to 512 [ 111.692750][ T8784] EXT4-fs: Ignoring removed i_version option [ 111.719210][ T8784] EXT4-fs: Ignoring removed bh option [ 111.754137][ T8784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.769109][ T8784] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.913200][ T8784] EXT4-fs (loop1): shut down requested (2) [ 111.934747][ T8820] loop0: detected capacity change from 0 to 128 [ 111.957945][ T8820] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.978510][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.981074][ T8820] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.042890][ T7402] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.242920][ T8866] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 112.383769][ T8878] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 112.402356][ T8877] netlink: 'syz.8.1649': attribute type 4 has an invalid length. [ 112.570059][ T8890] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1652'. [ 112.653542][ T8894] loop8: detected capacity change from 0 to 512 [ 112.660230][ T8897] loop9: detected capacity change from 0 to 512 [ 112.688176][ T8894] EXT4-fs: Ignoring removed i_version option [ 112.722816][ T8897] xt_hashlimit: size too large, truncated to 1048576 [ 112.734796][ T8894] EXT4-fs: Ignoring removed bh option [ 112.798935][ T8894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.873811][ T8894] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.959528][ T8913] EXT4-fs (loop8): shut down requested (2) [ 113.106112][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.122492][ T8923] loop7: detected capacity change from 0 to 128 [ 113.130835][ T8923] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.143772][ T8923] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.229846][ T5073] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.325668][ T8939] EXT4-fs: Ignoring removed orlov option [ 113.347313][ T8939] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.374732][ T8942] netlink: 'syz.8.1676': attribute type 4 has an invalid length. [ 113.394893][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 113.394912][ T28] audit: type=1400 audit(2000000000.040:1285): avc: denied { execute } for pid=8943 comm="syz.7.1677" name="file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.466012][ T8939] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1675: corrupted in-inode xattr: e_value size too large [ 113.500313][ T28] audit: type=1400 audit(2000000000.140:1286): avc: denied { mount } for pid=8949 comm="syz.9.1680" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.553786][ T8939] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.560227][ T8939] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1675: couldn't read orphan inode 15 (err -117) [ 113.585932][ T8939] loop0: lost filesystem error report for type 5 error -117 [ 113.588919][ T8939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.629202][ T8954] xt_hashlimit: size too large, truncated to 1048576 [ 113.653747][ T8939] Invalid ELF header magic: != ELF [ 113.659446][ T28] audit: type=1400 audit(2000000000.300:1287): avc: denied { read open } for pid=8937 comm="syz.0.1675" path="/82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.739505][ T7402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.752010][ T28] audit: type=1400 audit(2000000000.300:1288): avc: denied { write } for pid=8937 comm="syz.0.1675" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.789654][ T28] audit: type=1400 audit(2000000000.300:1289): avc: denied { sys_module } for pid=8937 comm="syz.0.1675" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.812643][ T28] audit: type=1400 audit(2000000000.300:1290): avc: denied { module_load } for pid=8937 comm="syz.0.1675" path="/82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 113.872029][ T28] audit: type=1400 audit(2000000000.490:1291): avc: denied { write } for pid=8959 comm="syz.9.1683" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.899815][ T28] audit: type=1400 audit(2000000000.490:1292): avc: denied { ioctl } for pid=8959 comm="syz.9.1683" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.926180][ T8931] mmap: syz.1.1673 (8931) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.942705][ T8950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.987700][ T8950] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.034151][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.135878][ T28] audit: type=1400 audit(2000000000.780:1293): avc: denied { setopt } for pid=8974 comm="syz.7.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.176110][ T28] audit: type=1400 audit(2000000000.820:1294): avc: denied { write } for pid=8974 comm="syz.7.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.273167][ T23] kernel read not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 114.399395][ T9006] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.460164][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1695'. [ 114.493888][ T9015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.523725][ T9015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.534804][ T9015] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 114.547485][ T9015] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 114.628429][ T9031] set_capacity_and_notify: 4 callbacks suppressed [ 114.628453][ T9031] loop1: detected capacity change from 0 to 512 [ 114.734386][ T9031] xt_hashlimit: size too large, truncated to 1048576 [ 115.074689][ T6102] kernel read not supported for file /vcs (pid: 6102 comm: kworker/1:7) [ 115.173422][ T9114] loop8: detected capacity change from 0 to 1024 [ 115.200752][ T9114] EXT4-fs: Ignoring removed orlov option [ 115.260975][ T9114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.430081][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.441537][ T9144] loop7: detected capacity change from 0 to 256 [ 115.450607][ T9144] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.687554][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1712'. [ 115.915068][ T9162] SELinux: failed to load policy [ 116.110561][ T9175] loop9: detected capacity change from 0 to 256 [ 116.133802][ T9175] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.397542][ T9188] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 116.418222][ T9188] SELinux: failed to load policy [ 116.494998][ T9195] xt_hashlimit: size too large, truncated to 1048576 [ 116.518821][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1730'. [ 117.409747][ T9197] loop9: detected capacity change from 0 to 512 [ 117.679309][ T9236] netlink: 'syz.1.1744': attribute type 3 has an invalid length. [ 117.697663][ T9197] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.711265][ T9236] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 117.711313][ T9236] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1744'. [ 117.732747][ T9197] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.839043][ T7656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.998763][ T9251] loop9: detected capacity change from 0 to 512 [ 118.005646][ T9251] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.023699][ T9251] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 118.119624][ T9251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 118.205522][ T9251] EXT4-fs (loop9): orphan cleanup on readonly fs [ 118.250648][ T9251] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1749: bg 0: block 361: padding at end of block bitmap is not set [ 118.318646][ T9251] loop9: lost filesystem error report for type 5 error -117 [ 118.318913][ T9251] EXT4-fs (loop9): Remounting filesystem read-only [ 118.342209][ T9251] EXT4-fs (loop9): 1 truncate cleaned up [ 118.365242][ T9251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 118.435752][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 118.435774][ T28] audit: type=1400 audit(2000000004.169:1342): avc: denied { write } for pid=9246 comm="syz.9.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.502037][ T28] audit: type=1400 audit(2000000004.219:1343): avc: denied { name_bind } for pid=9259 comm="syz.8.1754" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 118.595284][ T28] audit: type=1400 audit(2000000004.329:1344): avc: denied { mount } for pid=9263 comm="syz.8.1756" name="/" dev="hugetlbfs" ino=23545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 118.626105][ T7656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 118.646165][ T9262] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 118.684607][ T9262] SELinux: failed to load policy [ 118.937255][ T28] audit: type=1400 audit(2000000004.679:1345): avc: denied { setopt } for pid=9279 comm="syz.7.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.975631][ T28] audit: type=1400 audit(2000000004.709:1346): avc: denied { connect } for pid=9279 comm="syz.7.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.318882][ T28] audit: type=1400 audit(2000000005.059:1347): avc: denied { setopt } for pid=9290 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.429654][ T28] audit: type=1400 audit(2000000005.169:1348): avc: denied { read } for pid=9296 comm="syz.9.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 119.493237][ T9300] xt_hashlimit: size too large, truncated to 1048576 [ 119.725955][ T28] audit: type=1400 audit(2000000005.459:1349): avc: denied { setattr } for pid=9315 comm="syz.0.1777" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.782529][ T28] audit: type=1400 audit(2000000005.489:1350): avc: denied { connect } for pid=9317 comm="syz.8.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.877022][ T9329] loop8: detected capacity change from 0 to 512 [ 119.895802][ T9329] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.942338][ T9329] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.967912][ T9329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 119.991057][ T9329] EXT4-fs (loop8): orphan cleanup on readonly fs [ 120.013114][ T28] audit: type=1400 audit(2000000005.749:1351): avc: denied { mount } for pid=9336 comm="syz.0.1786" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.035545][ T9329] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1782: bg 0: block 361: padding at end of block bitmap is not set [ 120.087526][ T9329] loop8: lost filesystem error report for type 5 error -117 [ 120.087782][ T9329] EXT4-fs (loop8): Remounting filesystem read-only [ 120.135568][ T9329] EXT4-fs (loop8): 1 truncate cleaned up [ 120.163813][ T9329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 120.227630][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 120.228360][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1789'. [ 120.303244][ T9352] xt_hashlimit: size too large, truncated to 1048576 [ 120.681769][ T9369] loop9: detected capacity change from 0 to 512 [ 120.697392][ T9369] EXT4-fs: Ignoring removed bh option [ 120.741536][ T9369] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 120.762453][ T9369] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 120.798521][ T9369] EXT4-fs (loop9): failed to open journal device unknown-block(8,224) -6 [ 120.860247][ T9378] loop7: detected capacity change from 0 to 512 [ 120.918139][ T9378] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.942613][ T9378] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 120.996107][ T9378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 121.016044][ T9378] EXT4-fs (loop7): orphan cleanup on readonly fs [ 121.096569][ T9378] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1801: bg 0: block 361: padding at end of block bitmap is not set [ 121.205823][ T9378] loop7: lost filesystem error report for type 5 error -117 [ 121.206728][ T9378] EXT4-fs (loop7): Remounting filesystem read-only [ 121.233218][ T9378] EXT4-fs (loop7): 1 truncate cleaned up [ 121.273968][ T9378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 121.425992][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 121.484174][ T9404] loop7: detected capacity change from 0 to 512 [ 121.596817][ T9404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.627314][ T9417] loop8: detected capacity change from 0 to 512 [ 121.634159][ T9417] EXT4-fs: Ignoring removed bh option [ 121.644259][ T9417] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 121.652824][ T9417] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 121.661882][ T9417] EXT4-fs (loop8): failed to open journal device unknown-block(8,224) -6 [ 121.724645][ T9404] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.905215][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.214841][ T9444] loop1: detected capacity change from 0 to 512 [ 122.260636][ T9447] loop7: detected capacity change from 0 to 512 [ 122.276133][ T9444] EXT4-fs: Ignoring removed bh option [ 122.295468][ T9444] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 122.309671][ T9444] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 122.325921][ T9444] EXT4-fs (loop1): failed to open journal device unknown-block(8,224) -6 [ 122.326322][ T9447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.387788][ T9447] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 122.411723][ T9447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 122.453804][ T9454] 9p: Unknown uid 00000000004294967295 [ 122.478107][ T9447] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 122.495918][ T9447] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 122.505185][ T9447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.671518][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.964644][ T9484] loop1: detected capacity change from 0 to 512 [ 123.031020][ T9484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.065946][ T9484] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.164089][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.254049][ T9491] loop8: detected capacity change from 0 to 512 [ 123.276066][ T9491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.322120][ T9491] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 123.350473][ T9491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 123.359162][ T9491] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 123.368997][ T9491] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 123.378300][ T9491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 123.458607][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.725860][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 123.725880][ T28] audit: type=1400 audit(2000000009.459:1363): avc: denied { write } for pid=9523 comm="syz.9.1858" lport=55056 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 123.788356][ T9512] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1854'. [ 123.827994][ T28] audit: type=1400 audit(2000000009.459:1364): avc: denied { setopt } for pid=9523 comm="syz.9.1858" lport=55056 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 123.836110][ T9512] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 123.920138][ T28] audit: type=1326 audit(2000000009.539:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 123.995873][ T28] audit: type=1326 audit(2000000009.539:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 124.065900][ T28] audit: type=1326 audit(2000000009.539:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 124.136145][ T28] audit: type=1326 audit(2000000009.539:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 124.205964][ T28] audit: type=1326 audit(2000000009.539:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 124.244659][ T9546] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 124.279869][ T28] audit: type=1326 audit(2000000009.539:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 124.386561][ T9546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.449786][ T28] audit: type=1326 audit(2000000009.539:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 124.476904][ T9550] bond3: (slave geneve2): making interface the new active one [ 124.500794][ T9550] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 124.554795][ T28] audit: type=1326 audit(2000000009.539:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.0.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd968bf79 code=0x7ffc0000 [ 124.596190][ T9560] loop1: detected capacity change from 0 to 1024 [ 124.609066][ T9558] netlink: 'syz.7.1871': attribute type 2 has an invalid length. [ 124.617078][ T9558] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1871'. [ 124.652631][ T9560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.664822][ T9560] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.676471][ T9560] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.1872: lblock 0 mapped to illegal pblock 0 (length 6) [ 124.700070][ T9560] EXT4-fs (loop1): Remounting filesystem read-only [ 124.747767][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.822493][ T9570] netlink: 'syz.7.1876': attribute type 4 has an invalid length. [ 124.830781][ T9570] netlink: 'syz.7.1876': attribute type 4 has an invalid length. [ 124.946323][ T9575] SELinux: failed to load policy [ 125.881987][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 125.894847][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 125.962206][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 125.974042][ T9610] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1892'. [ 126.004348][ T9610] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 126.020376][ T9612] netlink: 'syz.1.1893': attribute type 5 has an invalid length. [ 126.042342][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'. [ 126.058262][ T9618] loop0: detected capacity change from 0 to 512 [ 126.071614][ T9612] geneve3: entered promiscuous mode [ 126.077294][ T9612] geneve3: entered allmulticast mode [ 126.083186][ T9618] EXT4-fs: Ignoring removed oldalloc option [ 126.093002][ T51] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 126.139764][ T8848] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 126.165103][ T9618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1895: Parent and EA inode have the same ino 15 [ 126.179305][ T8848] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 126.195903][ T9618] loop0: lost filesystem error report for type 5 error -117 [ 126.208944][ T9618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1895: Parent and EA inode have the same ino 15 [ 126.228662][ T51] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 126.252337][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1899'. [ 126.272536][ T9630] loop1: detected capacity change from 0 to 2048 [ 126.288657][ T9630] EXT4-fs: Ignoring removed nobh option [ 126.300989][ T9628] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1899'. [ 126.316169][ T9618] loop0: lost filesystem error report for type 5 error -117 [ 126.317646][ T9618] EXT4-fs (loop0): 1 orphan inode deleted [ 126.336987][ T9630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.354825][ T9630] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.371950][ T9630] EXT4-fs (loop1): shut down requested (1) [ 126.380803][ T9618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.401749][ T9636] loop7: detected capacity change from 0 to 256 [ 126.422512][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.439138][ T9636] vfat: Unknown parameter 'nnonumtail' [ 126.500255][ T7402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.965428][ T9686] netlink: 'syz.8.1923': attribute type 34 has an invalid length. [ 126.967673][ T5757] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 127.012914][ T5757] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.032056][ T9685] loop1: detected capacity change from 0 to 4096 [ 127.066294][ T9685] EXT4-fs: test_dummy_encryption option not supported [ 127.085687][ T9685] hid-generic 0000:0000:0000.0005: pid 9685 passed too short report [ 127.120444][ T9694] syzkaller1: entered promiscuous mode [ 127.143577][ T9694] syzkaller1: entered allmulticast mode [ 127.887378][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'. [ 128.379788][ T9093] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.396927][ T9093] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.422006][ T9093] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.449348][ T5757] IPVS: starting estimator thread 0... [ 128.462543][ T9093] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.555817][ T9752] IPVS: using max 1968 ests per chain, 98400 per kthread [ 128.699308][ T9765] netlink: 'syz.0.1954': attribute type 1 has an invalid length. [ 128.860730][ T9773] loop8: detected capacity change from 0 to 512 [ 128.900418][ T9773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.920517][ T9773] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.986642][ T5114] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.342651][ T9791] __nla_validate_parse: 3 callbacks suppressed [ 129.342671][ T9791] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1963'. [ 129.402054][ T9793] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 129.407983][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 129.408077][ T28] audit: type=1400 audit(2000000015.139:1459): avc: denied { relabelfrom } for pid=9792 comm="syz.9.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 129.442019][ T28] audit: type=1400 audit(2000000015.139:1460): avc: denied { relabelto } for pid=9792 comm="syz.9.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 129.543040][ T9799] loop9: detected capacity change from 0 to 2048 [ 129.578706][ T9799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.608053][ T28] audit: type=1400 audit(2000000015.349:1461): avc: denied { mounton } for pid=9798 comm="syz.9.1967" path="/132/file1/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.693554][ T28] audit: type=1400 audit(2000000015.429:1462): avc: denied { rmdir } for pid=7656 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.717913][ T28] audit: type=1400 audit(2000000015.459:1463): avc: denied { unlink } for pid=7656 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 129.817458][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1974'. [ 129.826487][ T28] audit: type=1400 audit(2000000015.559:1464): avc: denied { ioctl } for pid=9813 comm="syz.8.1974" path="socket:[25626]" dev="sockfs" ino=25626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.996933][ T28] audit: type=1400 audit(2000000015.729:1465): avc: denied { create } for pid=9822 comm="syz.1.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.026195][ T7656] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.075676][ T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.093338][ T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.217377][ T28] audit: type=1326 audit(2000000015.959:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 130.253676][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1985'. [ 130.283087][ T28] audit: type=1326 audit(2000000015.959:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 130.320885][ T9836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.366243][ T28] audit: type=1326 audit(2000000015.959:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.8.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999bb1bf79 code=0x7ffc0000 [ 130.446566][ T9844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.453848][ T9844] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 130.466234][ T9844] bond2: (slave gre1): Error -95 calling set_mac_address [ 130.504656][ T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.516922][ T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.605393][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1989'. [ 130.641480][ T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.652218][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1989'. [ 130.679986][ T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.916713][ T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.950505][ T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.995867][ T9878] tipc: Started in network mode [ 131.000827][ T9878] tipc: Node identity 405d, cluster identity 4711 [ 131.015977][ T9878] tipc: Enabling of bearer rejected, failed to enable media [ 131.074203][ T9837] chnl_net:caif_netlink_parms(): no params data found [ 131.208936][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.227328][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2003'. [ 131.247416][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.261730][ T9837] bridge_slave_0: entered allmulticast mode [ 131.386734][ T9837] bridge_slave_0: entered promiscuous mode [ 131.403629][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.415805][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.423167][ T9837] bridge_slave_1: entered allmulticast mode [ 131.434134][ T9837] bridge_slave_1: entered promiscuous mode [ 131.540149][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.549876][ T51] bridge_slave_1: left allmulticast mode [ 131.555612][ T51] bridge_slave_1: left promiscuous mode [ 131.561920][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.727343][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 131.746049][ T51] bridge_slave_0: left allmulticast mode [ 131.761580][ T51] bridge_slave_0: left promiscuous mode [ 131.772677][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.050356][ T51] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 132.059754][ T51] bridge1 (unregistering): left promiscuous mode [ 132.074637][ T9932] loop1: detected capacity change from 0 to 1024 [ 132.095359][ T9932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.235674][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.251708][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.275312][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.288489][ T51] bond0 (unregistering): Released all slaves [ 132.298404][ T51] bond1 (unregistering): Released all slaves [ 132.317481][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.375489][ T51] hsr_slave_0: left promiscuous mode [ 132.383505][ T51] hsr_slave_1: left promiscuous mode [ 132.409833][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.433096][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.440815][ T9952] loop7: detected capacity change from 0 to 512 [ 132.450360][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.455151][ T9952] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 132.475131][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.493089][ T9952] EXT4-fs (loop7): 1 truncate cleaned up [ 132.500152][ T9952] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.513736][ T51] veth1_macvtap: left promiscuous mode [ 132.524410][ T51] veth0_macvtap: left promiscuous mode [ 132.530350][ T51] veth1_vlan: left promiscuous mode [ 132.536094][ T51] veth0_vlan: left promiscuous mode [ 132.551668][ T5073] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.612950][ T9954] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2021'. [ 132.712924][ T51] team0 (unregistering): Port device team_slave_1 removed [ 132.727638][ T51] team0 (unregistering): Port device team_slave_0 removed [ 132.812145][ T9837] team0: Port device team_slave_0 added [ 132.828469][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2020'. [ 132.839716][ T9837] team0: Port device team_slave_1 added [ 132.845866][ T9955] netlink: 'syz.8.2020': attribute type 5 has an invalid length. [ 132.856130][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2020'. [ 132.875637][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.882857][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.909117][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.950340][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.967660][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.062265][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.297870][ T51] IPVS: stop unused estimator thread 0... [ 133.310561][ T9837] hsr_slave_0: entered promiscuous mode [ 133.322597][ T9837] hsr_slave_1: entered promiscuous mode [ 133.334180][ T9837] debugfs: 'hsr0' already exists in 'hsr' [ 133.345841][ T9837] Cannot create hsr debugfs directory [ 133.683998][T10032] netlink: 'syz.1.2039': attribute type 20 has an invalid length. [ 133.705891][T10032] netlink: 'syz.1.2039': attribute type 21 has an invalid length. [ 134.096689][ T9837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.118012][ T9837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.133789][ T9837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.148440][ T9837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.239697][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.256697][ T9837] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.276199][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.283448][ T9093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.313312][T10094] loop0: detected capacity change from 0 to 512 [ 134.321713][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.328986][ T9093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.338430][T10094] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.405943][T10094] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 134.421676][T10094] EXT4-fs (loop0): 1 truncate cleaned up [ 134.425963][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 134.426015][ T28] audit: type=1326 audit(2000000276.154:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.7.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f07544cbf79 code=0x7ffc0000 [ 134.435818][T10094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.503247][T10094] __nla_validate_parse: 1 callbacks suppressed [ 134.503268][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2045'. [ 134.522630][ T28] audit: type=1326 audit(2000000276.154:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.7.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07544cbf79 code=0x7ffc0000 [ 134.531615][T10094] netlink: 'syz.0.2045': attribute type 7 has an invalid length. [ 134.554877][T10094] netlink: 'syz.0.2045': attribute type 8 has an invalid length. [ 134.564364][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.576300][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 134.594382][ T28] audit: type=1326 audit(2000000276.154:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.7.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07544cbf79 code=0x7ffc0000 [ 134.669860][ T7402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.676126][ T28] audit: type=1326 audit(2000000276.154:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10098 comm="syz.7.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07544cbf79 code=0x7ffc0000 [ 134.758528][T10130] loop0: detected capacity change from 0 to 128 [ 134.788292][T10130] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.842101][T10130] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.943589][ T9097] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.990598][ T9837] veth0_vlan: entered promiscuous mode [ 135.014972][ T9837] veth1_vlan: entered promiscuous mode [ 135.065325][ T9837] veth0_macvtap: entered promiscuous mode [ 135.075464][ T9837] veth1_macvtap: entered promiscuous mode [ 135.110463][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.133629][T10165] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2058'. [ 135.140752][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.153195][ T9095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.180493][ T9095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.213638][ T9095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.241827][ T9095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.300823][ T28] audit: type=1400 audit(2000000277.034:1519): avc: denied { mounton } for pid=9837 comm="syz-executor" path="/root/syzkaller.oCiXl6/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 135.332497][ T28] audit: type=1400 audit(2000000277.034:1520): avc: denied { mounton } for pid=9837 comm="syz-executor" path="/root/syzkaller.oCiXl6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 135.383163][ T28] audit: type=1400 audit(2000000277.034:1521): avc: denied { mounton } for pid=9837 comm="syz-executor" path="/root/syzkaller.oCiXl6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 135.448922][ T28] audit: type=1400 audit(2000000277.064:1522): avc: denied { mounton } for pid=9837 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 135.492198][ T28] audit: type=1400 audit(2000000277.064:1523): avc: denied { mount } for pid=9837 comm="syz-executor" name="/" dev="gadgetfs" ino=4626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 135.643816][T10219] loop5: detected capacity change from 0 to 1024 [ 135.695112][T10219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.791530][ T9837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.925866][T10231] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2071'. [ 136.023670][T10263] xt_hashlimit: size too large, truncated to 1048576 [ 136.135606][T10277] batadv0: entered promiscuous mode [ 136.163915][T10277] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 136.225888][ T28] audit: type=1400 audit(2000000789.951:1524): avc: denied { create } for pid=10289 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.458370][T10302] loop0: detected capacity change from 0 to 1024 [ 136.466024][T10302] EXT4-fs: inline encryption not supported [ 136.472134][T10302] EXT4-fs: Ignoring removed nobh option [ 136.479725][T10302] EXT4-fs: Ignoring removed bh option [ 136.524780][T10302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.637818][ T7402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.839520][ T9093] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.889132][T10342] loop8: detected capacity change from 0 to 128 [ 136.910355][T10342] EXT4-fs: Ignoring removed nobh option [ 136.931531][T10342] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.964948][T10342] ext4 filesystem being mounted at /287/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.031751][ T5114] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.311884][T10396] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2104'. [ 137.943204][ T56] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 138.227357][T10449] loop5: detected capacity change from 0 to 4096 [ 138.234858][T10449] EXT4-fs: Ignoring removed oldalloc option [ 138.241294][T10449] EXT4-fs: Ignoring removed orlov option [ 138.248220][T10449] EXT4-fs: inline encryption not supported [ 138.254632][T10449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.268731][T10449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.297844][ T9837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.793972][ T2996] ================================================================== [ 138.802196][ T2996] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 138.810114][ T2996] [ 138.812463][ T2996] write to 0xffff8881075c0f00 of 4 bytes by task 3298 on cpu 0: [ 138.820124][ T2996] d_make_discardable+0x4f/0xa0 [ 138.825018][ T2996] simple_unlink+0x68/0x80 [ 138.829464][ T2996] shmem_unlink+0x12d/0x140 [ 138.834005][ T2996] vfs_unlink+0x1c7/0x490 [ 138.838377][ T2996] filename_unlinkat+0x1e2/0x410 [ 138.843343][ T2996] __se_sys_unlink+0x2b/0xe0 [ 138.847952][ T2996] __x64_sys_unlink+0x1f/0x30 [ 138.853017][ T2996] x64_sys_call+0x2eb6/0x3020 [ 138.857727][ T2996] do_syscall_64+0x12c/0x370 [ 138.862352][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.868268][ T2996] [ 138.870613][ T2996] read to 0xffff8881075c0f00 of 4 bytes by task 2996 on cpu 1: [ 138.878172][ T2996] step_into_slowpath+0xea/0x4c0 [ 138.883127][ T2996] path_lookupat+0x330/0x500 [ 138.887730][ T2996] filename_lookup+0x190/0x390 [ 138.892511][ T2996] do_readlinkat+0x74/0x2f0 [ 138.897044][ T2996] __x64_sys_readlink+0x47/0x60 [ 138.901915][ T2996] x64_sys_call+0x2b51/0x3020 [ 138.906617][ T2996] do_syscall_64+0x12c/0x370 [ 138.911289][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.917221][ T2996] [ 138.919560][ T2996] value changed: 0x08300080 -> 0x00004080 [ 138.925298][ T2996] [ 138.927642][ T2996] Reported by Kernel Concurrency Sanitizer on: [ 138.933833][ T2996] CPU: 1 UID: 0 PID: 2996 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 138.942711][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.952786][ T2996] ================================================================== [ 139.001406][ T3539] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.289840][ T9093] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.386746][ T9093] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.481291][ T9093] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.548748][ T9093] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.612429][ T9093] bridge_slave_1: left allmulticast mode [ 139.618473][ T9093] bridge_slave_1: left promiscuous mode [ 139.624160][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.632613][ T9093] bridge_slave_0: left allmulticast mode [ 139.638416][ T9093] bridge_slave_0: left promiscuous mode [ 139.644072][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.728267][ T9093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.738364][ T9093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.748209][ T9093] bond0 (unregistering): Released all slaves [ 139.800156][ T9093] hsr_slave_0: left promiscuous mode [ 139.806969][ T9093] hsr_slave_1: left promiscuous mode [ 139.813998][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.821958][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.830139][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.837876][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.848958][ T9093] veth1_macvtap: left promiscuous mode [ 139.854509][ T9093] veth0_macvtap: left promiscuous mode [ 139.860278][ T9093] veth1_vlan: left promiscuous mode [ 139.865589][ T9093] veth0_vlan: left promiscuous mode [ 139.940926][ T9093] team0 (unregistering): Port device team_slave_1 removed [ 139.952736][ T9093] team0 (unregistering): Port device team_slave_0 removed [ 140.240475][ T9093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.252982][ T9093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.302524][ T9093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.313042][ T9093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.361756][ T9093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.372750][ T9093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.429535][ T9093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.440008][ T9093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.505375][ T9093] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.515979][ T9093] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.549860][ T9093] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.561127][ T9093] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.609120][ T9093] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.620804][ T9093] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.672374][ T9093] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.682881][ T9093] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.765473][ T9093] bridge_slave_1: left allmulticast mode [ 140.771539][ T9093] bridge_slave_1: left promiscuous mode [ 140.777499][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.785611][ T9093] bridge_slave_0: left allmulticast mode [ 140.791749][ T9093] bridge_slave_0: left promiscuous mode [ 140.798014][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.807042][ T9093] bridge_slave_1: left allmulticast mode [ 140.812730][ T9093] bridge_slave_1: left promiscuous mode [ 140.818867][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.826942][ T9093] bridge_slave_0: left allmulticast mode [ 140.832627][ T9093] bridge_slave_0: left promiscuous mode [ 140.838935][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.017208][ T9093] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 141.025382][ T9093] bridge1 (unregistering): left promiscuous mode [ 141.067958][ T9093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.078047][ T9093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.087557][ T9093] bond0 (unregistering): Released all slaves [ 141.095391][ T9093] bond1 (unregistering): Released all slaves [ 141.104080][ T9093] bond2 (unregistering): Released all slaves [ 141.113169][ T9093] bond3 (unregistering): Released all slaves [ 141.160034][ T9093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.170101][ T9093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.179968][ T9093] bond0 (unregistering): Released all slaves [ 141.231665][ T9093] tipc: Left network mode [ 141.239542][ T9093] hsr_slave_0: left promiscuous mode [ 141.246683][ T9093] hsr_slave_1: left promiscuous mode [ 141.252451][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.260508][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.269770][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.277569][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.292024][ T9093] hsr_slave_0: left promiscuous mode [ 141.297874][ T9093] hsr_slave_1: left promiscuous mode [ 141.303629][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.311346][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.319268][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.327090][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.340838][ T9093] veth1_macvtap: left promiscuous mode [ 141.346526][ T9093] veth0_macvtap: left promiscuous mode [ 141.352080][ T9093] veth1_vlan: left promiscuous mode [ 141.358267][ T9093] veth0_vlan: left promiscuous mode [ 141.364150][ T9093] veth1_macvtap: left promiscuous mode [ 141.370114][ T9093] veth0_macvtap: left promiscuous mode [ 141.375698][ T9093] veth1_vlan: left promiscuous mode [ 141.383849][ T9093] veth0_vlan: left promiscuous mode [ 141.494475][ T9093] team0 (unregistering): Port device team_slave_1 removed [ 141.504084][ T9093] team0 (unregistering): Port device team_slave_0 removed [ 141.568216][ T9093] team0 (unregistering): Port device team_slave_1 removed [ 141.578154][ T9093] team0 (unregistering): Port device team_slave_0 removed [ 142.069817][ T9093] IPVS: stop unused estimator thread 0... [ 142.075914][ T9093] IPVS: stop unused estimator thread 0...