last executing test programs: 10m45.307758234s ago: executing program 0 (id=56): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) gettid() write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x0, 0x2400000}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 10m44.144994781s ago: executing program 0 (id=63): ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa4, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3573921e4f83d3e340891356f74695fc04dfa25f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) msgsnd(0x0, 0x0, 0xfd1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r5, 0x102, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x840) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7ff, 0x401, 0x3, 0x5, 0x0, 0xc1]}, &(0x7f0000000540)=0x78) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000f2b000/0x4000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000340)=ANY=[]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfca804a0, 0xd, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a7", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 10m43.586482854s ago: executing program 0 (id=68): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) gettid() write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 10m42.375905424s ago: executing program 0 (id=72): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000ac0)={[{@nobarrier}, {@user_xattr}, {@inlinecrypt}, {@oldalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@mblk_io_submit}, {@noblock_validity}, {@min_batch_time}, {@nombcache}, {@errors_remount}]}, 0x11, 0x56b, &(0x7f0000000440)="$eJzs3c1rHOUfAPDvbDbp6+/XFEpREQn0YKV20yS+VPBQj6LFgt7rkkxDyaZbspvSxILtwV68SBFELIgHb3r3WPwHvPgvFLRQpAQ9eInMZjbNy26ybTYv7X4+MOF5dmb3me/MfJ88s88uG0DPGsr+FCJejIivkogjEZHk64qRrxxa2m7h0Y3xbElicfHjv5LGdlm9+VrN5x3KKy9ExK9fRJwqrG+3Njc/Va5U0pm8Plyfvjpcm5s/fXm6PJlOpldGx8bOvjk2+s7bb3Ut1tcu/PPtR/feP/vliYVvfn5w9E4S5+Jwvm5lHFtwc2VlKIbyY9If59ZsONKFxvaSZLd3gKfSl+d5f2R9wJHoy7O+lR8P7OiuAdvs84hYBHpUIv+hRzXHAc17+y7dBz8zHr63dAO0Pv7i0nsjsb9xb3RwIVl1Z5Td7w52of2sjV/+vHsnW6J770MAbOrmrYg4Uyyu7/+SvP97emc62GZtG/o/2Dn3svHP6+vGPwOxnJv7G3/Xjn8Otcjdp7F5/hcedKGZtrLx37stx7/Lk1aDfXntf40xX39y6XIlzfq2/0fEyejfl9U3ms85u3B/sd26leO/bMnab44F8/14UNy3+jkT5Xp5KzGv9PBWxEstx7/J8vlPWpz/7Hhc6LCN4+ndV9qt2zz+7bX4Q8SrLc//4xmtZOP5yeHG9TDcvCrW+/v28d/atb/b8Wfn/+DG8Q8mK+dra0/exvf7/03brVsVf3R+/Q8knzTKA/lj18v1+sxIxEDy4frHRx8/t1lvbp/Ff/JE6/zf6Po/EBGfdhj/7WM/vdxR/Lt0/iee6Pw/eeH+B5991679zvq/Nxqlk/kjnfR/ne7gVo4dAAAAAAAA7DWFiDgcSaG0XC4USqWlz3cci4OFSrVWP3WpOntlIhrflR2M/kJzpvvIis9DjOSfh23WR9fUxyLiaER83XegUS+NVysTux08AAAAAAAAAAAAAAAAAAAA7BGH2nz/P/NH327vHbDt2v/kN/C82zT/u/FLT8Ce5P8/9C75D71L/kPvkv/Qu+Q/9C75D71L/kPvkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQVRfOn8+WxYVHN8az+sS1udmp6rXTE2ltqjQ9O14ar85cLU1Wq5OVtDRend7s9SrV6tWR0Zi9PlxPa/Xh2tz8xenq7JX6xcvT5cn0Ytq/I1EBAAAAAAAAAAAAAAAAAADAs6U2Nz9VrlTSGYXns/D7djdR3OrrFCNiDxwohdWF3e6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCx/wIAAP//sIc3PA==") socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) chdir(&(0x7f0000000240)='./file0\x00') 10m40.689292361s ago: executing program 0 (id=79): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x129081, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x3, 0x0, 0x0, 0x20080, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x2a3}, 0x0, 0x10008, 0x8, 0x0, 0x800000009, 0x60009, 0x1b, 0x0, 0x0, 0x0, 0x8000000cd}, 0x0, 0xffffffffffffffff, r0, 0x3) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x10005, 0x200000003, 0xfffffbff, 0xb, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') epoll_create(0x3) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x738b9e531a356e7c, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000340)=0x5) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) readv(r4, 0x0, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) 10m40.289274395s ago: executing program 0 (id=83): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2b, 'cpuset'}, {0x2b, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}]}, 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040", 0xf2) acct(&(0x7f00000000c0)='./file1\x00') close(0x3) 10m40.288730475s ago: executing program 32 (id=83): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2b, 'cpuset'}, {0x2b, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}]}, 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040", 0xf2) acct(&(0x7f00000000c0)='./file1\x00') close(0x3) 9m36.662568301s ago: executing program 3 (id=432): socket$nl_xfrm(0x10, 0x3, 0x6) 9m36.641206463s ago: executing program 3 (id=433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 9m36.320424991s ago: executing program 3 (id=434): r0 = syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3beb, &(0x7f0000000580)={0x0, 0xb8d9, 0x10, 0x0, 0xffffffff, 0x0, r0}, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) lseek(0xffffffffffffffff, 0x8, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000540)={0x4, 0x80, 0x2, 0x81, 0x81, 0x3c, 0x0, 0x9, 0x1208, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x2}, 0x1041, 0x0, 0x1, 0x6, 0x10000, 0x2, 0x6, 0x0, 0xfc, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) 9m36.201089768s ago: executing program 3 (id=435): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000ac0)={[{@nobarrier}, {@user_xattr}, {@inlinecrypt}, {@oldalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@mblk_io_submit}, {@noblock_validity}, {@min_batch_time}, {@nombcache}, {@errors_remount}]}, 0x11, 0x56b, &(0x7f0000000440)="$eJzs3c1rHOUfAPDvbDbp6+/XFEpREQn0YKV20yS+VPBQj6LFgt7rkkxDyaZbspvSxILtwV68SBFELIgHb3r3WPwHvPgvFLRQpAQ9eInMZjbNy26ybTYv7X4+MOF5dmb3me/MfJ88s88uG0DPGsr+FCJejIivkogjEZHk64qRrxxa2m7h0Y3xbElicfHjv5LGdlm9+VrN5x3KKy9ExK9fRJwqrG+3Njc/Va5U0pm8Plyfvjpcm5s/fXm6PJlOpldGx8bOvjk2+s7bb3Ut1tcu/PPtR/feP/vliYVvfn5w9E4S5+Jwvm5lHFtwc2VlKIbyY9If59ZsONKFxvaSZLd3gKfSl+d5f2R9wJHoy7O+lR8P7OiuAdvs84hYBHpUIv+hRzXHAc17+y7dBz8zHr63dAO0Pv7i0nsjsb9xb3RwIVl1Z5Td7w52of2sjV/+vHsnW6J770MAbOrmrYg4Uyyu7/+SvP97emc62GZtG/o/2Dn3svHP6+vGPwOxnJv7G3/Xjn8Otcjdp7F5/hcedKGZtrLx37stx7/Lk1aDfXntf40xX39y6XIlzfq2/0fEyejfl9U3ms85u3B/sd26leO/bMnab44F8/14UNy3+jkT5Xp5KzGv9PBWxEstx7/J8vlPWpz/7Hhc6LCN4+ndV9qt2zz+7bX4Q8SrLc//4xmtZOP5yeHG9TDcvCrW+/v28d/atb/b8Wfn/+DG8Q8mK+dra0/exvf7/03brVsVf3R+/Q8knzTKA/lj18v1+sxIxEDy4frHRx8/t1lvbp/Ff/JE6/zf6Po/EBGfdhj/7WM/vdxR/Lt0/iee6Pw/eeH+B5991679zvq/Nxqlk/kjnfR/ne7gVo4dAAAAAAAA7DWFiDgcSaG0XC4USqWlz3cci4OFSrVWP3WpOntlIhrflR2M/kJzpvvIis9DjOSfh23WR9fUxyLiaER83XegUS+NVysTux08AAAAAAAAAAAAAAAAAAAA7BGH2nz/P/NH327vHbDt2v/kN/C82zT/u/FLT8Ce5P8/9C75D71L/kPvkv/Qu+Q/9C75D71L/kPvkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQVRfOn8+WxYVHN8az+sS1udmp6rXTE2ltqjQ9O14ar85cLU1Wq5OVtDRend7s9SrV6tWR0Zi9PlxPa/Xh2tz8xenq7JX6xcvT5cn0Ytq/I1EBAAAAAAAAAAAAAAAAAADAs6U2Nz9VrlTSGYXns/D7djdR3OrrFCNiDxwohdWF3e6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCx/wIAAP//sIc3PA==") socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) chdir(&(0x7f0000000240)='./file0\x00') 9m35.430289033s ago: executing program 3 (id=441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xf, @empty, 0x8005b}}, 0x104, 0x6, 0xf06, 0x0, 0xb4, 0x5d, 0x1}, 0x9c) write$P9_RLINK(r1, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 9m34.61998877s ago: executing program 3 (id=448): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9m34.579296542s ago: executing program 33 (id=448): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m14.234581926s ago: executing program 4 (id=2729): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x105, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 5m12.751206382s ago: executing program 4 (id=2738): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x131}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m12.317243298s ago: executing program 4 (id=2744): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000067, 0x0) 5m12.316282008s ago: executing program 4 (id=2745): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m12.252208261s ago: executing program 4 (id=2747): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 5m12.171872696s ago: executing program 4 (id=2748): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002980)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001407f0000014624"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4m57.161347779s ago: executing program 34 (id=2748): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002980)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001407f0000014624"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 694.447779ms ago: executing program 1 (id=4818): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0/file0\x00') pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x9, 0x3fffffffc00, 0x5, 0x87f}) 694.231649ms ago: executing program 1 (id=4819): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@lazytime}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x569, &(0x7f0000000a40)="$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") writev(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="0e", 0x1, 0x8080c61) fallocate(0xffffffffffffffff, 0x3, 0x6, 0x8000c5d) 641.280123ms ago: executing program 2 (id=4822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0xfff9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 602.711495ms ago: executing program 7 (id=4824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 525.380999ms ago: executing program 1 (id=4826): r0 = syz_io_uring_setup(0x2ea, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) poll(&(0x7f0000000000)=[{r0, 0xd010}], 0x1, 0x9) 525.20014ms ago: executing program 7 (id=4827): fchdir(0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 522.24147ms ago: executing program 5 (id=4829): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000540)=ANY=[], 0x2) 484.678072ms ago: executing program 5 (id=4830): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0/file0\x00') pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x9, 0x3fffffffc00, 0x5, 0x87f}) 481.582012ms ago: executing program 7 (id=4831): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 464.888463ms ago: executing program 7 (id=4832): r0 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="20000000f1"], 0x0) 405.217807ms ago: executing program 5 (id=4833): openat(0xffffffffffffff9c, 0x0, 0x105842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) openat$incfs(0xffffffffffffffff, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) mkdirat(0xffffffffffffff9c, 0x0, 0x6b) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x8b189a, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/44, 0x6a) getdents64(0xffffffffffffffff, 0x0, 0x47) 404.960897ms ago: executing program 7 (id=4834): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) 404.627697ms ago: executing program 5 (id=4836): r0 = syz_io_uring_setup(0x315b, 0x0, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) 383.278878ms ago: executing program 2 (id=4837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) 383.103718ms ago: executing program 7 (id=4838): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x1c, "8ca036f8137909da54a9b001fc5e24a84fec3b250323e62c05144877"}, &(0x7f0000000340)=0x24) 361.128419ms ago: executing program 5 (id=4839): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(0x0, 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 308.691512ms ago: executing program 1 (id=4840): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x2) 308.489972ms ago: executing program 2 (id=4841): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000000)={0x0, 0x4036, 0x8, 0x2, 0x221, 0x0, r0}, 0x1) 308.386822ms ago: executing program 6 (id=4842): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, 0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0), 0x0) 304.296292ms ago: executing program 2 (id=4843): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1000000, &(0x7f0000000040)={[{@map_off}, {@showassoc}, {}, {}, {@showassoc}, {@hide}]}, 0x1, 0x3f1, &(0x7f00000015c0)="$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") mount(0x0, 0x0, 0x0, 0x41, 0x0) 291.131102ms ago: executing program 1 (id=4844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) 238.807146ms ago: executing program 5 (id=4845): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 238.445096ms ago: executing program 1 (id=4846): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) read(r1, &(0x7f0000000900)=""/198, 0xc6) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b46, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='\x00\x00 \x00\x91]\xc3\xfc.\xd1+\xa3\xb9\xd5\xc1z\xcf\xc7M\x8a\x9c\x00\x00F', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674657000000008000140000000050b"], 0xf4}}, 0x0) 238.249156ms ago: executing program 2 (id=4847): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) 190.345078ms ago: executing program 6 (id=4848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) 175.25702ms ago: executing program 2 (id=4849): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 175.129719ms ago: executing program 6 (id=4850): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 120.332283ms ago: executing program 6 (id=4851): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0xd6c, 0x12) 279.45µs ago: executing program 6 (id=4852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) 0s ago: executing program 6 (id=4853): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000000)={0x0, 0x4036, 0x8, 0x2, 0x221, 0x0, r0}, 0x1) kernel console output (not intermixed with test programs): ntered forwarding state [ 466.700588][T15044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.712072][T15044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.725793][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.732893][T12123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.796025][T15194] loop2: detected capacity change from 0 to 1024 [ 466.843804][T15194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.053398][T15044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.747638][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.095350][T15245] x_tables: duplicate underflow at hook 1 [ 468.205747][T15259] loop5: detected capacity change from 0 to 1024 [ 468.217760][T15044] veth0_vlan: entered promiscuous mode [ 468.243135][T15044] veth1_vlan: entered promiscuous mode [ 468.255742][T15259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.277906][T15044] veth0_macvtap: entered promiscuous mode [ 468.417364][T15044] veth1_macvtap: entered promiscuous mode [ 468.766391][T15044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.775244][T15044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.808587][T12123] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.853038][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.871527][T12123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.942065][T12123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.950824][T12123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.544406][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3408'. [ 469.625570][T15299] loop7: detected capacity change from 0 to 512 [ 469.651928][T15299] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 469.700417][T15299] EXT4-fs (loop7): 1 truncate cleaned up [ 469.709821][T15299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.299893][T15310] loop1: detected capacity change from 0 to 1024 [ 470.371043][T15310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.909144][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.057571][T15321] syzkaller0: entered promiscuous mode [ 471.063135][T15321] syzkaller0: entered allmulticast mode [ 471.100935][T15327] loop5: detected capacity change from 0 to 512 [ 471.122936][T15327] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 471.168474][T15327] EXT4-fs (loop5): 1 truncate cleaned up [ 471.180733][T15327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.361766][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.136405][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.789077][T15358] loop7: detected capacity change from 0 to 1024 [ 472.822645][T15358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.102384][T15364] loop6: detected capacity change from 0 to 512 [ 473.214543][T15364] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 473.308084][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.331101][T15364] EXT4-fs (loop6): 1 truncate cleaned up [ 473.337213][T15364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.302011][T15364] Process accounting resumed [ 474.341327][T15394] loop2: detected capacity change from 0 to 512 [ 474.348881][T15394] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 474.366964][T15394] EXT4-fs (loop2): 1 truncate cleaned up [ 474.391471][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.408230][T15394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.560515][T15420] loop6: detected capacity change from 0 to 128 [ 477.427015][T15436] loop1: detected capacity change from 0 to 512 [ 477.433598][T15436] EXT4-fs: Ignoring removed orlov option [ 477.451800][T15436] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 477.482809][T12132] kworker/u8:14: attempt to access beyond end of device [ 477.482809][T12132] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 477.590200][T15438] loop7: detected capacity change from 0 to 512 [ 477.658983][T15438] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 477.749822][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.802682][T15438] EXT4-fs (loop7): 1 truncate cleaned up [ 477.894440][T15438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.926490][T15445] loop6: detected capacity change from 0 to 1024 [ 477.977836][T15445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.589263][T15450] netlink: 'syz.1.3444': attribute type 4 has an invalid length. [ 478.890941][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.050116][T15438] Process accounting resumed [ 480.129894][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.155577][T15514] loop1: detected capacity change from 0 to 512 [ 482.165651][T15514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 482.184216][T15514] EXT4-fs (loop1): 1 truncate cleaned up [ 482.200915][T15514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.883249][T15513] Process accounting resumed [ 482.943470][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.666046][T15539] loop6: detected capacity change from 0 to 128 [ 485.195810][T12132] kworker/u8:14: attempt to access beyond end of device [ 485.195810][T12132] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 485.262386][T15550] netlink: 'syz.6.3474': attribute type 4 has an invalid length. [ 485.505244][T15562] loop5: detected capacity change from 0 to 512 [ 485.591191][T15563] loop6: detected capacity change from 0 to 128 [ 485.602072][T15562] EXT4-fs: inline encryption not supported [ 486.574033][T15562] EXT4-fs (loop5): 1 orphan inode deleted [ 486.605505][ T30] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 486.828421][T15562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.860329][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7034: comm kworker/u8:1: Failed to release dquot type 1 [ 486.892365][T15562] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.941179][T15562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.183304][ T30] kworker/u8:1: attempt to access beyond end of device [ 487.183304][ T30] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 487.254235][T15570] loop5: detected capacity change from 0 to 1024 [ 487.313034][T15570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.144208][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.164108][T15585] loop6: detected capacity change from 0 to 1024 [ 488.317123][T15585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.410616][T15594] loop2: detected capacity change from 0 to 128 [ 489.061758][T15599] loop5: detected capacity change from 0 to 128 [ 492.114132][T15602] tipc: Enabling of bearer rejected, failed to enable media [ 492.131497][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.154600][T15602] syzkaller0: entered promiscuous mode [ 492.163223][T15602] syzkaller0: entered allmulticast mode [ 492.203313][T15607] loop2: detected capacity change from 0 to 1024 [ 492.234157][T15610] loop6: detected capacity change from 0 to 1024 [ 492.249374][T15607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.299813][T15610] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.432561][T15620] team0: Port device team_slave_0 removed [ 493.025677][T15629] syzkaller0: entered promiscuous mode [ 493.044635][T15629] syzkaller0: entered allmulticast mode [ 493.087409][T15634] loop7: detected capacity change from 0 to 1024 [ 493.126938][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.156271][T15634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.689027][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.694907][T15649] loop1: detected capacity change from 0 to 1024 [ 493.734747][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3503'. [ 493.745378][T15649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.087224][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.573842][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.666876][T15670] loop2: detected capacity change from 0 to 512 [ 494.673989][T15670] EXT4-fs: Ignoring removed orlov option [ 494.754130][T15670] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 495.722290][T15676] loop7: detected capacity change from 0 to 128 [ 497.219965][T15667] netlink: 'syz.2.3506': attribute type 4 has an invalid length. [ 497.913769][T15687] loop2: detected capacity change from 0 to 512 [ 497.920398][T15687] EXT4-fs: Ignoring removed orlov option [ 497.926735][T15687] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 497.981111][ T50] kworker/u8:3: attempt to access beyond end of device [ 497.981111][ T50] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 498.270441][T15689] loop7: detected capacity change from 0 to 1024 [ 498.390977][T15689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.526868][T15695] syzkaller0: entered promiscuous mode [ 498.678355][T15695] syzkaller0: entered allmulticast mode [ 498.779150][T15700] netlink: 'syz.2.3511': attribute type 4 has an invalid length. [ 499.931200][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3516'. [ 500.008443][T15702] syzkaller0: entered promiscuous mode [ 500.015474][T15702] syzkaller0: entered allmulticast mode [ 500.018419][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.182407][T15719] loop1: detected capacity change from 0 to 512 [ 500.193609][T15719] EXT4-fs: inline encryption not supported [ 500.231764][T15719] EXT4-fs (loop1): 1 orphan inode deleted [ 500.244131][T15719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.259285][ T2051] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 500.264282][T15719] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.282713][ T2051] EXT4-fs error (device loop1): ext4_release_dquot:7034: comm kworker/u8:6: Failed to release dquot type 1 [ 500.295188][T15719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.956529][T15742] loop1: detected capacity change from 0 to 1024 [ 501.066624][T15742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.647726][T15760] syzkaller0: entered promiscuous mode [ 501.669531][T15760] syzkaller0: entered allmulticast mode [ 502.107225][T15780] loop5: detected capacity change from 0 to 128 [ 502.809842][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.811728][T15804] syzkaller0: entered promiscuous mode [ 503.831647][T15804] syzkaller0: entered allmulticast mode [ 504.129907][T15807] syzkaller0: entered promiscuous mode [ 504.135651][T15807] syzkaller0: entered allmulticast mode [ 504.223829][T15816] loop6: detected capacity change from 0 to 128 [ 504.301522][ T41] kworker/u8:2: attempt to access beyond end of device [ 504.301522][ T41] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 504.394775][T15818] loop2: detected capacity change from 0 to 128 [ 504.744932][T15829] loop1: detected capacity change from 0 to 1024 [ 504.774047][T15829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.794738][ T28] audit: type=1400 audit(1770868403.018:859): avc: denied { mount } for pid=15834 comm="syz.6.3550" name="/" dev="configfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 506.228175][ T28] audit: type=1400 audit(1770868403.018:860): avc: denied { search } for pid=15834 comm="syz.6.3550" name="/" dev="configfs" ino=1496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 506.411725][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.421273][ T28] audit: type=1400 audit(1770868403.028:861): avc: denied { nlmsg_write } for pid=15834 comm="syz.6.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.443171][T12132] kworker/u8:14: attempt to access beyond end of device [ 506.443171][T12132] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 506.510881][T15846] loop5: detected capacity change from 0 to 128 [ 506.938973][T15848] syzkaller0: entered promiscuous mode [ 506.954944][T15848] syzkaller0: entered allmulticast mode [ 507.156854][T15858] loop1: detected capacity change from 0 to 1024 [ 507.201453][T15858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.236445][T12123] kworker/u8:11: attempt to access beyond end of device [ 508.236445][T12123] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 508.324210][T15873] loop6: detected capacity change from 0 to 512 [ 508.354635][T15873] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 508.520959][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.537011][T15873] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.3565: inode has both inline data and extents flags [ 508.551088][T15880] loop2: detected capacity change from 0 to 1024 [ 508.608448][T15885] loop5: detected capacity change from 0 to 128 [ 508.711722][T15880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.728001][T15873] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 508.730361][T15873] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3565: couldn't read orphan inode 17 (err -117) [ 509.261611][T15890] loop1: detected capacity change from 0 to 128 [ 509.554160][T15873] loop6: lost filesystem error report for type 5 error -117 [ 509.554751][T15873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.202140][T12132] kworker/u8:14: attempt to access beyond end of device [ 511.202140][T12132] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 511.282130][T15895] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3565: bg 0: block 65: padding at end of block bitmap is not set [ 511.312401][T15895] Quota error (device loop6): write_blk: dquota write failed [ 511.319830][T15895] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 511.329801][T15895] EXT4-fs error (device loop6): ext4_acquire_dquot:6998: comm syz.6.3565: Failed to acquire dquot type 0 [ 511.345383][T15897] Quota error (device loop6): do_check_range: Getting block 144 out of range 0-5 [ 511.428547][T12134] kworker/u8:15: attempt to access beyond end of device [ 511.428547][T12134] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 512.294883][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.692614][T15909] tipc: Started in network mode [ 512.697779][T15909] tipc: Node identity d26b2199cbc9, cluster identity 4711 [ 512.705721][T15909] tipc: Enabled bearer , priority 0 [ 512.715496][T15909] syzkaller0: entered promiscuous mode [ 512.721726][T15909] syzkaller0: entered allmulticast mode [ 512.768115][T15909] tipc: Resetting bearer [ 512.794982][T15908] tipc: Resetting bearer [ 512.809561][T15908] tipc: Disabling bearer [ 513.080114][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.135301][ T28] audit: type=1400 audit(1770868410.598:862): avc: denied { firmware_load } for pid=15917 comm="syz.1.3577" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 513.616226][T15929] loop7: detected capacity change from 0 to 512 [ 513.697196][T15929] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 513.770841][T15929] EXT4-fs (loop7): 1 truncate cleaned up [ 513.773176][T15934] loop6: detected capacity change from 0 to 1024 [ 513.815390][T15929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.820654][T15934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.417004][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.995478][T15954] loop2: detected capacity change from 0 to 128 [ 515.782375][T15957] loop5: detected capacity change from 0 to 128 [ 516.783547][T12132] kworker/u8:14: attempt to access beyond end of device [ 516.783547][T12132] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 517.581299][T15966] loop6: detected capacity change from 0 to 128 [ 517.972708][ T50] kworker/u8:3: attempt to access beyond end of device [ 517.972708][ T50] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 518.422211][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.536184][T15977] loop7: detected capacity change from 0 to 1024 [ 518.573463][T15977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.132644][ T2051] kworker/u8:6: attempt to access beyond end of device [ 519.132644][ T2051] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 519.166696][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.848268][T16000] loop2: detected capacity change from 0 to 128 [ 521.361312][ T2051] kworker/u8:6: attempt to access beyond end of device [ 521.361312][ T2051] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 521.755379][T16011] loop2: detected capacity change from 0 to 512 [ 521.762508][T16011] EXT4-fs: Ignoring removed orlov option [ 521.768673][T16011] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 522.670111][T16011] netlink: 'syz.2.3599': attribute type 4 has an invalid length. [ 523.507483][T16028] loop2: detected capacity change from 0 to 1024 [ 523.559197][T16028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.598432][T16031] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 523.721153][T16031] bond1 (unregistering): Released all slaves [ 524.132907][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.231794][T16045] loop1: detected capacity change from 0 to 128 [ 524.702836][ T28] audit: type=1326 audit(1770868422.148:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 525.002804][T16051] x_tables: duplicate underflow at hook 1 [ 525.180032][ T28] audit: type=1326 audit(1770868422.198:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 525.757624][ T28] audit: type=1326 audit(1770868422.198:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 525.837588][ T41] kworker/u8:2: attempt to access beyond end of device [ 525.837588][ T41] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 525.906988][ T28] audit: type=1326 audit(1770868422.228:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 525.972715][ T28] audit: type=1326 audit(1770868422.248:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 526.016441][ T28] audit: type=1326 audit(1770868422.248:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 526.065114][ T28] audit: type=1326 audit(1770868422.268:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 526.100486][ T28] audit: type=1326 audit(1770868422.268:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 526.145455][T16071] loop2: detected capacity change from 0 to 128 [ 526.147750][ T28] audit: type=1326 audit(1770868422.278:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 526.176363][ T28] audit: type=1326 audit(1770868422.298:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.2.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 526.180810][T16071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 526.240477][T16071] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.044116][T13929] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 527.068803][T16092] loop5: detected capacity change from 0 to 4096 [ 527.101551][T16092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.114377][T16084] syzkaller0: entered promiscuous mode [ 527.119845][T16084] syzkaller0: entered allmulticast mode [ 527.327686][T16099] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 527.473459][T16106] loop2: detected capacity change from 0 to 128 [ 527.911781][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.056939][T16135] loop6: detected capacity change from 0 to 128 [ 530.754567][T16145] loop2: detected capacity change from 0 to 1024 [ 531.036563][T16145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.060189][ T41] kworker/u8:2: attempt to access beyond end of device [ 531.060189][ T41] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 531.963376][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 531.963393][ T28] audit: type=1400 audit(1770868429.378:877): avc: denied { create } for pid=16154 comm="syz.6.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 531.999804][ T28] audit: type=1400 audit(1770868429.378:878): avc: denied { read } for pid=16154 comm="syz.6.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 532.040684][ T50] ip6gretap0: left allmulticast mode [ 532.046190][ T50] ip6gretap0: left promiscuous mode [ 532.057129][ T50] bridge0: port 3(ip6gretap0) entered disabled state [ 532.662582][ T28] audit: type=1400 audit(1770868429.388:879): avc: denied { add_name } for pid=16143 comm="syz.2.3643" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.693746][ T50] bridge_slave_1: left allmulticast mode [ 532.716463][ T50] bridge_slave_1: left promiscuous mode [ 532.731490][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.750272][ T28] audit: type=1400 audit(1770868429.688:880): avc: denied { name_bind } for pid=16160 comm="syz.7.3647" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 532.773664][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.824584][ T50] ip6gretap0: left allmulticast mode [ 532.829893][ T50] ip6gretap0: left promiscuous mode [ 532.842708][ T50] bridge0: port 3(ip6gretap0) entered disabled state [ 532.850872][ T50] bridge_slave_1: left allmulticast mode [ 532.856506][ T50] bridge_slave_1: left promiscuous mode [ 532.862692][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.360286][T16173] loop2: detected capacity change from 0 to 128 [ 533.405611][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.458619][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.539904][ T50] bond0 (unregistering): Released all slaves [ 533.584480][ T50] bond1 (unregistering): Released all slaves [ 534.390649][T16186] loop5: detected capacity change from 0 to 512 [ 534.399029][T16186] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 534.423111][T16186] EXT4-fs (loop5): 1 truncate cleaned up [ 534.430139][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.443738][T16186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.459321][ T50] bond0 (unregistering): Released all slaves [ 534.467617][T16178] macsec0: entered promiscuous mode [ 534.520665][T16178] macsec0: entered allmulticast mode [ 534.525979][T16178] veth1_macvtap: entered allmulticast mode [ 534.984804][ T50] hsr_slave_0: left promiscuous mode [ 535.000694][ T50] hsr_slave_1: left promiscuous mode [ 535.016198][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.098464][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.120503][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.569637][ T50] hsr_slave_0: left promiscuous mode [ 535.799227][ T50] hsr_slave_1: left promiscuous mode [ 535.888732][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.910624][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.925581][ T50] veth1_macvtap: left promiscuous mode [ 535.931402][ T50] veth0_macvtap: left promiscuous mode [ 535.945901][ T50] veth1_vlan: left promiscuous mode [ 535.951394][ T50] veth0_vlan: left promiscuous mode [ 536.085020][T16229] loop1: detected capacity change from 0 to 128 [ 536.552884][ T50] team0 (unregistering): Port device team_slave_1 removed [ 536.616828][ T50] team0 (unregistering): Port device team_slave_0 removed [ 536.773963][T16200] Process accounting resumed [ 536.799164][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.969354][ T50] team0 (unregistering): Port device team_slave_1 removed [ 537.542492][T16251] loop2: detected capacity change from 0 to 512 [ 537.549251][T16251] EXT4-fs: Ignoring removed orlov option [ 537.560336][T16251] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 537.684360][T16255] netlink: 'syz.2.3670': attribute type 4 has an invalid length. [ 537.698702][ T50] team0 (unregistering): Port device team_slave_0 removed [ 537.731023][T12121] kworker/u8:10: attempt to access beyond end of device [ 537.731023][T12121] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 538.079265][T16231] syzkaller0: entered promiscuous mode [ 538.192966][T16231] syzkaller0: entered allmulticast mode [ 538.206103][T16258] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.216631][T16258] bridge0: entered allmulticast mode [ 538.671256][T16265] loop1: detected capacity change from 0 to 128 [ 538.959191][T16261] bridge_slave_1: left allmulticast mode [ 539.032067][T16261] bridge_slave_1: left promiscuous mode [ 539.044707][T16261] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.123161][T16267] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.132133][T16267] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.143282][T16267] bridge0: entered allmulticast mode [ 539.167707][T16271] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.177206][T16271] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.347582][T16275] loop5: detected capacity change from 0 to 128 [ 539.430040][ T3444] kworker/u8:7: attempt to access beyond end of device [ 539.430040][ T3444] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 539.446515][T16271] bridge0: entered allmulticast mode [ 539.549196][T16272] bridge_slave_1: left allmulticast mode [ 539.555830][T16272] bridge_slave_1: left promiscuous mode [ 539.567234][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.585250][T16272] bridge_slave_0: left allmulticast mode [ 539.591192][T16272] bridge_slave_0: left promiscuous mode [ 539.602317][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.850630][T16273] bridge_slave_1: left allmulticast mode [ 539.860394][T16273] bridge_slave_1: left promiscuous mode [ 539.881861][T16273] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.381165][T16273] bridge_slave_0: left allmulticast mode [ 540.388242][T16273] bridge_slave_0: left promiscuous mode [ 540.395276][T16273] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.422381][T16300] loop2: detected capacity change from 0 to 512 [ 540.437875][T16300] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 540.501718][T16300] EXT4-fs (loop2): 1 truncate cleaned up [ 540.507946][T16300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.931999][T16314] macsec0: entered promiscuous mode [ 540.958812][T16314] macsec0: entered allmulticast mode [ 540.964514][T16314] veth1_macvtap: entered allmulticast mode [ 541.153169][ T28] audit: type=1326 audit(1770868438.618:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.182733][ T28] audit: type=1326 audit(1770868438.618:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.242491][ T28] audit: type=1326 audit(1770868438.708:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.266810][ T28] audit: type=1326 audit(1770868438.728:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.290363][ T28] audit: type=1326 audit(1770868438.728:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.296408][T16320] x_tables: duplicate underflow at hook 1 [ 541.314247][ T28] audit: type=1326 audit(1770868438.728:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.360319][ T28] audit: type=1326 audit(1770868438.758:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.390289][ T28] audit: type=1326 audit(1770868438.818:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.414334][ T28] audit: type=1326 audit(1770868438.818:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16319 comm="syz.1.3692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa24eb1bf79 code=0x7ffc0000 [ 541.528439][T16328] syzkaller0: entered promiscuous mode [ 541.541032][T16328] syzkaller0: entered allmulticast mode [ 541.972807][ T28] audit: type=1400 audit(1770868439.438:890): avc: denied { read write } for pid=16345 comm="syz.7.3701" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.996981][T16346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.041910][T16346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.277364][T16357] loop6: detected capacity change from 0 to 512 [ 542.284986][T16357] EXT4-fs: Ignoring removed orlov option [ 542.335723][T16353] x_tables: duplicate underflow at hook 1 [ 542.345441][T16357] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 542.687951][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.905845][T16359] syzkaller0: entered promiscuous mode [ 542.940711][T16359] syzkaller0: entered allmulticast mode [ 543.210516][T16357] netlink: 'syz.6.3703': attribute type 4 has an invalid length. [ 544.748942][T16391] ip6gretap0: left allmulticast mode [ 544.770417][T16391] ip6gretap0: left promiscuous mode [ 544.791773][T16391] bridge0: port 3(ip6gretap0) entered disabled state [ 544.846946][T16391] bridge_slave_0: left allmulticast mode [ 544.862886][T16391] bridge_slave_0: left promiscuous mode [ 544.873191][T16391] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.043273][T16391] bridge_slave_1: left allmulticast mode [ 545.051338][T16391] bridge_slave_1: left promiscuous mode [ 545.066255][T16391] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.086215][T16391] bond0: (slave bond_slave_0): Releasing backup interface [ 545.095584][T16410] netlink: 'syz.6.3716': attribute type 10 has an invalid length. [ 545.115559][T16391] bond0: (slave bond_slave_1): Releasing backup interface [ 545.134120][T16391] team0: Port device team_slave_1 removed [ 545.142595][T16391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.154362][T16391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.179382][T16391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.189883][T16391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.288981][T16391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.590668][T16409] bond0: (slave bond_slave_0): Releasing backup interface [ 545.630698][T16409] bond0: (slave bond_slave_1): Releasing backup interface [ 545.690742][T16409] team0: Port device team_slave_0 removed [ 545.826835][T16409] team0: Port device team_slave_1 removed [ 545.871965][T16409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.900278][T16409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.919516][T16409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.930468][T16409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.945642][T16409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 546.013562][T16436] loop2: detected capacity change from 0 to 128 [ 546.043345][T16436] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.061495][T16436] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.245378][T16445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 546.351968][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 546.351995][ T28] audit: type=1400 audit(1770868443.818:904): avc: denied { read } for pid=16435 comm="syz.2.3721" path="socket:[42726]" dev="sockfs" ino=42726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 546.606942][T16440] netlink: 'syz.6.3722': attribute type 10 has an invalid length. [ 546.918752][T13929] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 547.011256][T16469] syzkaller0: entered promiscuous mode [ 547.028859][T16469] syzkaller0: entered allmulticast mode [ 548.181288][T16505] bridge0: entered allmulticast mode [ 548.558476][T16513] syzkaller0: entered promiscuous mode [ 548.606080][T16513] syzkaller0: entered allmulticast mode [ 549.216094][T16539] loop5: detected capacity change from 0 to 4096 [ 549.291043][T16539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.451151][T16546] bond0: (slave bond_slave_0): Releasing backup interface [ 549.473203][T16546] bond0: (slave bond_slave_1): Releasing backup interface [ 549.485905][T16546] team0: Port device team_slave_0 removed [ 549.495333][T16546] team0: Port device team_slave_1 removed [ 549.509436][T16546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.517613][T16546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.526452][T16546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.533920][T16546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.543625][T16546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 549.600615][T16548] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 549.915616][T16560] loop1: detected capacity change from 0 to 128 [ 550.481913][T16562] loop7: detected capacity change from 0 to 128 [ 551.581394][T12132] kworker/u8:14: attempt to access beyond end of device [ 551.581394][T12132] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 551.797700][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.891630][T16568] syzkaller0: entered promiscuous mode [ 551.897193][T16568] syzkaller0: entered allmulticast mode [ 551.982288][T16573] loop5: detected capacity change from 0 to 128 [ 552.024459][T16573] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 552.087188][T16573] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.894912][T13748] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 553.705693][T16595] loop1: detected capacity change from 0 to 512 [ 553.712444][T16595] EXT4-fs: Ignoring removed orlov option [ 553.730142][T16595] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 553.808873][T16597] netlink: 'syz.1.3765': attribute type 4 has an invalid length. [ 554.768263][T16611] loop5: detected capacity change from 0 to 512 [ 554.798554][T16611] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 554.869544][T16611] EXT4-fs (loop5): 1 truncate cleaned up [ 554.895262][T16611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.968184][T16638] Process accounting resumed [ 556.017118][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.161105][T16647] loop5: detected capacity change from 0 to 128 [ 556.963063][ T28] audit: type=1400 audit(1770868454.428:905): avc: denied { sys_admin } for pid=16677 comm="syz.1.3791" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 557.189639][T16683] loop1: detected capacity change from 0 to 1024 [ 557.228231][T16683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.290764][T16686] syzkaller0: entered promiscuous mode [ 557.296344][T16686] syzkaller0: entered allmulticast mode [ 557.810984][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.012115][T16701] loop7: detected capacity change from 0 to 128 [ 558.335696][T16719] syzkaller0: entered promiscuous mode [ 558.372237][T16719] syzkaller0: entered allmulticast mode [ 558.514234][T16726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.530604][T16726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.158315][T16743] loop2: detected capacity change from 0 to 128 [ 559.278765][ T28] audit: type=1400 audit(1770868456.738:906): avc: denied { create } for pid=16762 comm="syz.6.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 559.315199][T16758] loop5: detected capacity change from 0 to 1024 [ 559.336553][ T28] audit: type=1400 audit(1770868456.738:907): avc: denied { write } for pid=16762 comm="syz.6.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 559.359634][ T28] audit: type=1400 audit(1770868456.738:908): avc: denied { ioctl } for pid=16762 comm="syz.6.3819" path="socket:[41981]" dev="sockfs" ino=41981 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 559.414238][T16758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.770476][ T28] audit: type=1326 audit(1770868457.188:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cb39bf79 code=0x7ffc0000 [ 559.814920][T16780] x_tables: duplicate underflow at hook 1 [ 559.899559][ T28] audit: type=1326 audit(1770868457.188:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47cb39bf79 code=0x7ffc0000 [ 560.046513][ T28] audit: type=1326 audit(1770868457.198:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cb39bf79 code=0x7ffc0000 [ 560.086828][ T28] audit: type=1326 audit(1770868457.198:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cb39bf79 code=0x7ffc0000 [ 560.190272][ T28] audit: type=1326 audit(1770868457.198:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f47cb39bf79 code=0x7ffc0000 [ 560.212342][T16784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.235660][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.243066][T16784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.253268][ T28] audit: type=1326 audit(1770868457.198:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.7.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cb39bf79 code=0x7ffc0000 [ 560.302204][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 560.315782][T16790] loop7: detected capacity change from 0 to 128 [ 560.374647][ T3444] kworker/u8:7: attempt to access beyond end of device [ 560.374647][ T3444] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 560.388928][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3824'. [ 560.567269][T16808] loop2: detected capacity change from 0 to 1024 [ 560.648181][T16816] loop7: detected capacity change from 0 to 128 [ 560.755292][T16808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.189260][T16822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 562.528776][ T41] kworker/u8:2: attempt to access beyond end of device [ 562.528776][ T41] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 562.554146][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.713468][T16848] loop2: detected capacity change from 0 to 512 [ 562.763300][T16848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 562.826082][T16848] EXT4-fs (loop2): 1 truncate cleaned up [ 562.852124][T16848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.047565][T16859] loop6: detected capacity change from 0 to 128 [ 564.652055][ T50] kworker/u8:3: attempt to access beyond end of device [ 564.652055][ T50] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 564.873933][T16873] Process accounting resumed [ 564.945477][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.988353][T16930] syzkaller0: entered promiscuous mode [ 565.994980][T16930] syzkaller0: entered allmulticast mode [ 566.720038][T12134] ip6gretap0: left allmulticast mode [ 566.733289][T12134] ip6gretap0: left promiscuous mode [ 566.759200][T12134] bridge0: port 3(ip6gretap0) entered disabled state [ 566.771089][T12134] bridge_slave_1: left allmulticast mode [ 566.779513][T12134] bridge_slave_1: left promiscuous mode [ 566.809898][T12134] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.024062][T12134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.034143][T12134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.043960][T12134] bond0 (unregistering): Released all slaves [ 567.067620][T16965] macsec0: entered promiscuous mode [ 567.076363][T16965] macsec0: entered allmulticast mode [ 567.082794][T16965] veth1_macvtap: entered allmulticast mode [ 567.133564][T12134] tipc: Left network mode [ 567.148034][T12134] hsr_slave_0: left promiscuous mode [ 567.627642][T12134] hsr_slave_1: left promiscuous mode [ 567.633625][T12134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.699580][T12134] team0 (unregistering): Port device team_slave_1 removed [ 567.750446][T12134] team0 (unregistering): Port device team_slave_0 removed [ 567.853252][T16974] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 567.862729][T16974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 567.934412][T16991] loop1: detected capacity change from 0 to 128 [ 567.948232][T16991] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 568.020992][T16991] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.825051][T17005] loop2: detected capacity change from 0 to 512 [ 568.831731][T17005] EXT4-fs: Ignoring removed orlov option [ 569.012393][T17005] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 570.042510][T17009] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 570.817304][T17009] bond1 (unregistering): Released all slaves [ 570.826336][T14135] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 570.876207][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 570.876223][ T28] audit: type=1326 audit(1770868468.338:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 570.910395][ T28] audit: type=1326 audit(1770868468.348:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 570.938368][ T28] audit: type=1326 audit(1770868468.398:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 571.001975][ T28] audit: type=1326 audit(1770868468.398:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 571.077111][ T28] audit: type=1326 audit(1770868468.428:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 571.125874][ T28] audit: type=1326 audit(1770868468.428:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 571.175634][ T28] audit: type=1326 audit(1770868468.428:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 571.225731][ T28] audit: type=1326 audit(1770868468.428:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 571.274986][ T28] audit: type=1326 audit(1770868468.428:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356128bf79 code=0x7ffc0000 [ 572.081338][T17037] loop1: detected capacity change from 0 to 512 [ 572.088306][T17037] EXT4-fs: Ignoring removed orlov option [ 572.141264][T17037] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 572.841585][T17042] syzkaller0: entered promiscuous mode [ 572.887220][T17042] syzkaller0: entered allmulticast mode [ 572.994420][T17037] netlink: 'syz.1.3912': attribute type 4 has an invalid length. [ 573.292960][T17051] loop6: detected capacity change from 0 to 512 [ 573.324342][T17051] EXT4-fs: Ignoring removed orlov option [ 573.360559][T17051] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 573.908886][T17061] loop2: detected capacity change from 0 to 128 [ 574.104054][ T28] audit: type=1326 audit(1770868471.498:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.6.3919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e823fbf79 code=0x7ffc0000 [ 575.476745][ T3444] kworker/u8:7: attempt to access beyond end of device [ 575.476745][ T3444] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 575.678181][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 575.980963][T17097] loop2: detected capacity change from 0 to 512 [ 576.070749][T17097] EXT4-fs: Ignoring removed orlov option [ 576.082788][T17097] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 576.218350][T17112] loop2: detected capacity change from 0 to 512 [ 576.230364][T17112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 576.253311][T17112] EXT4-fs (loop2): 1 truncate cleaned up [ 576.259444][T17112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.841749][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.929898][T17139] loop2: detected capacity change from 0 to 512 [ 576.939484][T17139] EXT4-fs: Ignoring removed orlov option [ 576.953213][T17139] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 577.828433][T17154] syzkaller0: entered promiscuous mode [ 577.835683][T17154] syzkaller0: entered allmulticast mode [ 577.878260][T17152] loop5: detected capacity change from 0 to 512 [ 577.884911][T17152] EXT4-fs: Ignoring removed orlov option [ 577.894663][T17152] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 577.957658][T17160] netlink: 'syz.5.3947': attribute type 4 has an invalid length. [ 578.331414][T17176] loop2: detected capacity change from 0 to 512 [ 578.351338][T17176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 578.451391][T17176] EXT4-fs (loop2): 1 truncate cleaned up [ 578.490737][T17176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.695812][T17201] netlink: 'syz.6.3962': attribute type 2 has an invalid length. [ 578.703619][T17201] netlink: 'syz.6.3962': attribute type 8 has an invalid length. [ 578.711448][T17201] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3962'. [ 578.953421][T17211] loop5: detected capacity change from 0 to 128 [ 580.313189][T17228] loop7: detected capacity change from 0 to 512 [ 580.319884][T17228] EXT4-fs: Ignoring removed orlov option [ 580.415816][T17228] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 580.444407][T12132] kworker/u8:14: attempt to access beyond end of device [ 580.444407][T12132] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 580.483804][T17230] netlink: 'syz.7.3969': attribute type 4 has an invalid length. [ 580.507863][T17226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.842565][T17226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.914479][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3971'. [ 581.138358][T17252] loop5: detected capacity change from 0 to 512 [ 581.267496][T17252] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 581.314681][T17252] EXT4-fs (loop5): 1 truncate cleaned up [ 581.335844][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.350704][T17252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.980710][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 581.980726][ T28] audit: type=1400 audit(1770868479.448:939): avc: denied { write } for pid=17278 comm="syz.2.3984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 582.369284][T17290] loop2: detected capacity change from 0 to 128 [ 582.614010][T17292] loop1: detected capacity change from 0 to 512 [ 582.763933][T17292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 583.024577][T17252] Process accounting resumed [ 583.222693][T17292] EXT4-fs (loop1): 1 truncate cleaned up [ 583.228785][T17292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.268935][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.626924][T17335] loop7: detected capacity change from 0 to 128 [ 584.780973][T12132] kworker/u8:14: attempt to access beyond end of device [ 584.780973][T12132] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 585.208979][ T28] audit: type=1400 audit(1770868482.668:940): avc: denied { name_bind } for pid=17363 comm="syz.2.4011" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 585.478738][T17383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4019'. [ 585.665065][T17376] Process accounting resumed [ 585.693147][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.696055][T17418] loop7: detected capacity change from 0 to 4096 [ 586.706812][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.717265][T17420] bridge0: entered allmulticast mode [ 586.764724][T17418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.800395][T17423] bridge_slave_1: left allmulticast mode [ 586.829844][T17423] bridge_slave_1: left promiscuous mode [ 586.840481][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.060074][T17424] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 587.069528][T17428] syzkaller0: entered promiscuous mode [ 587.083499][T17428] syzkaller0: entered allmulticast mode [ 587.363187][T17437] loop5: detected capacity change from 0 to 512 [ 587.373126][T17437] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 587.556123][T17437] EXT4-fs (loop5): 1 truncate cleaned up [ 587.603181][T17437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.943453][ T3444] ip6gretap0: left allmulticast mode [ 587.948870][ T3444] ip6gretap0: left promiscuous mode [ 587.954520][ T3444] bridge0: port 3(ip6gretap0) entered disabled state [ 587.968723][ T3444] bridge_slave_1: left allmulticast mode [ 587.980682][ T3444] bridge_slave_1: left promiscuous mode [ 587.995566][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.995978][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.135580][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.168488][ T3444] bond0 (unregistering): Released all slaves [ 588.213309][ T28] audit: type=1400 audit(1770868485.668:941): avc: denied { read } for pid=3036 comm="dhcpcd" name="n37" dev="tmpfs" ino=15592 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 588.267332][ T28] audit: type=1400 audit(1770868485.668:942): avc: denied { open } for pid=3036 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=15592 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 588.299621][T17467] syzkaller0: entered promiscuous mode [ 588.332742][T17467] syzkaller0: entered allmulticast mode [ 588.340309][ T28] audit: type=1400 audit(1770868485.668:943): avc: denied { getattr } for pid=3036 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=15592 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 588.423021][ T3444] hsr_slave_0: left promiscuous mode [ 589.490271][ T3444] hsr_slave_1: left promiscuous mode [ 589.506784][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.525895][ T28] audit: type=1400 audit(1770868486.988:944): avc: denied { create } for pid=17468 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.574503][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.640833][ T28] audit: type=1400 audit(1770868486.988:945): avc: denied { write } for pid=17468 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=15642 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.725916][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 589.751825][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 589.763594][ T28] audit: type=1400 audit(1770868486.988:946): avc: denied { append } for pid=17468 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=15642 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.863471][ T28] audit: type=1400 audit(1770868487.068:947): avc: denied { unlink } for pid=17494 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=15642 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 589.897000][T17434] Process accounting resumed [ 589.921075][T17484] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 589.930424][T17484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 590.101318][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.395286][T17506] loop7: detected capacity change from 0 to 128 [ 591.451381][T17530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4054'. [ 591.871831][T12134] kworker/u8:15: attempt to access beyond end of device [ 591.871831][T12134] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 592.217984][T17570] loop5: detected capacity change from 0 to 512 [ 592.225221][T17570] EXT4-fs: Ignoring removed orlov option [ 592.238881][T17570] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 593.134112][T17570] netlink: 'syz.5.4057': attribute type 4 has an invalid length. [ 595.466139][T17618] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 595.528396][T17618] bond1 (unregistering): Released all slaves [ 595.564990][T17625] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 595.574517][T17625] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 596.432547][T17689] loop2: detected capacity change from 0 to 128 [ 598.024968][T12132] kworker/u8:14: attempt to access beyond end of device [ 598.024968][T12132] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 599.134850][T17734] syzkaller0: entered promiscuous mode [ 599.142809][T17734] syzkaller0: entered allmulticast mode [ 599.710575][T17755] loop2: detected capacity change from 0 to 4096 [ 599.777764][T17755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.948132][T17761] loop5: detected capacity change from 0 to 512 [ 600.230988][T17764] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 600.241843][T17761] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 600.311115][T17761] EXT4-fs (loop5): 1 truncate cleaned up [ 600.326663][T17761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.424909][T17767] loop6: detected capacity change from 0 to 128 [ 600.566889][ T30] kworker/u8:1: attempt to access beyond end of device [ 600.566889][ T30] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 600.581881][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.624289][T17798] loop6: detected capacity change from 0 to 128 [ 601.631750][T17799] loop1: detected capacity change from 0 to 128 [ 601.795583][T17768] Process accounting resumed [ 601.847731][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.894437][T17804] loop2: detected capacity change from 0 to 128 [ 601.895565][T17805] syz_tun: entered allmulticast mode [ 601.926044][ T28] audit: type=1400 audit(1770868499.388:948): avc: denied { setopt } for pid=17803 comm="syz.5.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 601.949829][ T30] kworker/u8:1: attempt to access beyond end of device [ 601.949829][ T30] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 602.456848][T12123] kworker/u8:11: attempt to access beyond end of device [ 602.456848][T12123] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 602.471022][ T41] kworker/u8:2: attempt to access beyond end of device [ 602.471022][ T41] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 602.488242][T17837] syz_tun: entered allmulticast mode [ 602.793571][T17847] syz_tun: entered allmulticast mode [ 602.913792][T17856] loop6: detected capacity change from 0 to 128 [ 603.051033][ T41] kworker/u8:2: attempt to access beyond end of device [ 603.051033][ T41] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 603.463791][T17866] syzkaller0: entered promiscuous mode [ 603.792755][T17873] loop6: detected capacity change from 0 to 128 [ 604.120760][T17866] syzkaller0: entered allmulticast mode [ 605.444976][T17885] loop1: detected capacity change from 0 to 128 [ 606.068091][T12132] kworker/u8:14: attempt to access beyond end of device [ 606.068091][T12132] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 606.106200][T12123] kworker/u8:11: attempt to access beyond end of device [ 606.106200][T12123] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 606.409171][T17921] loop7: detected capacity change from 0 to 128 [ 607.076316][T17936] syzkaller0: entered promiscuous mode [ 607.111575][T17936] syzkaller0: entered allmulticast mode [ 608.023078][ T3444] kworker/u8:7: attempt to access beyond end of device [ 608.023078][ T3444] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 608.929551][T18010] syzkaller0: entered promiscuous mode [ 608.941259][T18010] syzkaller0: entered allmulticast mode [ 609.130477][T18021] loop7: detected capacity change from 0 to 128 [ 609.255856][T18026] syz_tun: entered allmulticast mode [ 609.527926][T18034] loop6: detected capacity change from 0 to 128 [ 609.556777][T18034] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 609.599484][T18034] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.146182][T12132] kworker/u8:14: attempt to access beyond end of device [ 610.146182][T12132] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 610.359988][T18063] loop1: detected capacity change from 0 to 512 [ 610.390142][T18065] syzkaller0: entered promiscuous mode [ 610.399976][T18063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 610.409933][T18065] syzkaller0: entered allmulticast mode [ 610.427489][T15044] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 610.441944][T18063] EXT4-fs (loop1): 1 truncate cleaned up [ 610.454666][T18063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.506158][T18074] loop6: detected capacity change from 0 to 128 [ 610.630483][ T41] kworker/u8:2: attempt to access beyond end of device [ 610.630483][ T41] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 610.638050][T18083] loop2: detected capacity change from 0 to 512 [ 610.671111][T18083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 610.733129][T18083] EXT4-fs (loop2): 1 truncate cleaned up [ 610.739218][T18083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.127141][T18100] loop6: detected capacity change from 0 to 128 [ 611.358986][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.458696][T18124] macsec0: entered promiscuous mode [ 611.471096][T18124] macsec0: entered allmulticast mode [ 611.480102][T18124] veth1_macvtap: entered allmulticast mode [ 611.490205][T18122] loop5: detected capacity change from 0 to 128 [ 611.772433][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.859089][ T30] kworker/u8:1: attempt to access beyond end of device [ 611.859089][ T30] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 612.270954][T18158] netlink: 'syz.2.4236': attribute type 4 has an invalid length. [ 612.296846][T12123] kworker/u8:11: attempt to access beyond end of device [ 612.296846][T12123] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 613.763629][T18175] netlink: 'syz.7.4243': attribute type 4 has an invalid length. [ 615.229231][T18188] syz_tun: entered allmulticast mode [ 615.326996][T18196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4252'. [ 615.342880][T18197] netlink: 'syz.6.4253': attribute type 2 has an invalid length. [ 615.355696][T18197] netlink: 'syz.6.4253': attribute type 8 has an invalid length. [ 615.375235][T18197] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4253'. [ 615.585740][ T28] audit: type=1400 audit(1770868512.978:949): avc: denied { ioctl } for pid=18203 comm="syz.5.4257" path="socket:[47066]" dev="sockfs" ino=47066 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 615.671877][T18216] loop7: detected capacity change from 0 to 512 [ 616.026146][T18217] loop6: detected capacity change from 0 to 512 [ 616.032850][T18217] EXT4-fs: Ignoring removed orlov option [ 616.068002][ T28] audit: type=1400 audit(1770868513.128:950): avc: denied { connect } for pid=18200 comm="syz.7.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 616.088056][ T28] audit: type=1400 audit(1770868513.128:951): avc: denied { ioctl } for pid=18200 comm="syz.7.4254" path="socket:[48289]" dev="sockfs" ino=48289 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 616.118120][T18217] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 616.226854][T18216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 616.239381][T18216] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.285004][T18223] netlink: 'syz.6.4256': attribute type 4 has an invalid length. [ 616.475092][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 616.743315][T18239] loop5: detected capacity change from 0 to 128 [ 616.803103][T12123] kworker/u8:11: attempt to access beyond end of device [ 616.803103][T12123] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 616.940651][T18247] netlink: 'syz.5.4269': attribute type 2 has an invalid length. [ 616.958765][T18247] netlink: 'syz.5.4269': attribute type 8 has an invalid length. [ 616.976797][T18247] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4269'. [ 618.010486][T18277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.045825][T18277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.194492][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4277'. [ 618.863309][T18298] loop6: detected capacity change from 0 to 128 [ 619.642789][T18308] loop5: detected capacity change from 0 to 512 [ 619.649376][T18308] EXT4-fs: Ignoring removed orlov option [ 619.970259][T18308] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 620.782845][T18315] loop7: detected capacity change from 0 to 512 [ 620.881545][ T41] kworker/u8:2: attempt to access beyond end of device [ 620.881545][ T41] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 620.994827][T18318] netlink: 'syz.5.4285': attribute type 4 has an invalid length. [ 621.222168][T18315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 621.234790][T18315] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.406520][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 621.455085][T18329] netlink: 'syz.1.4293': attribute type 2 has an invalid length. [ 621.480311][T18329] netlink: 'syz.1.4293': attribute type 8 has an invalid length. [ 621.505204][T18329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4293'. [ 621.925966][T18339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.935644][T18339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.131130][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4295'. [ 622.770189][T18369] loop7: detected capacity change from 0 to 512 [ 622.944234][T18368] loop6: detected capacity change from 0 to 128 [ 623.453205][T18369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 623.465830][T18369] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.258203][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 624.642490][ T28] audit: type=1400 audit(1770868522.088:952): avc: denied { write } for pid=18407 comm="syz.1.4314" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 624.671159][T12132] kworker/u8:14: attempt to access beyond end of device [ 624.671159][T12132] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 625.353606][T18438] loop5: detected capacity change from 0 to 512 [ 625.353975][ T28] audit: type=1400 audit(1770868522.818:953): avc: denied { bind } for pid=18443 comm="syz.1.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 625.379732][T18438] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 625.406498][T18438] EXT4-fs (loop5): 1 truncate cleaned up [ 625.415473][T18438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.353086][T18453] Process accounting resumed [ 626.432079][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.088140][T18504] netlink: 'syz.7.4340': attribute type 4 has an invalid length. [ 627.597157][T18507] loop5: detected capacity change from 0 to 128 [ 627.639601][T18507] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.694078][T18507] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.920881][T18523] loop2: detected capacity change from 0 to 512 [ 627.931080][T18523] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 627.974000][T18523] EXT4-fs (loop2): 1 truncate cleaned up [ 627.989186][T18523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.012660][T13748] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 629.181935][T18523] Process accounting resumed [ 629.245516][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.350700][T18551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4354'. [ 629.431811][T18553] loop2: detected capacity change from 0 to 128 [ 629.460795][T18553] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 629.510401][T18553] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.505834][T13929] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 630.949089][T18594] netlink: 'syz.2.4366': attribute type 4 has an invalid length. [ 632.283677][T18624] loop6: detected capacity change from 0 to 128 [ 632.737366][T18627] loop2: detected capacity change from 0 to 128 [ 632.876687][ T41] kworker/u8:2: attempt to access beyond end of device [ 632.876687][ T41] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 634.024338][ T3444] kworker/u8:7: attempt to access beyond end of device [ 634.024338][ T3444] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 634.238535][T18650] loop5: detected capacity change from 0 to 512 [ 634.290904][T18650] EXT4-fs: Ignoring removed mblk_io_submit option [ 634.349106][T18650] EXT4-fs: journaled quota format not specified [ 635.329867][T18662] loop1: detected capacity change from 0 to 128 [ 635.405939][ T2051] kworker/u8:6: attempt to access beyond end of device [ 635.405939][ T2051] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 636.441383][T18682] loop7: detected capacity change from 0 to 128 [ 636.552056][T18679] loop6: detected capacity change from 0 to 512 [ 636.647628][T18679] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 636.778006][T18679] EXT4-fs (loop6): 1 truncate cleaned up [ 636.871144][T18679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.930947][ T3444] kworker/u8:7: attempt to access beyond end of device [ 637.930947][ T3444] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 637.993633][T18698] loop5: detected capacity change from 0 to 512 [ 638.031891][T18698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.070685][T18698] ext4 filesystem being mounted at /275/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.112446][ T28] audit: type=1400 audit(1770868535.568:954): avc: denied { read } for pid=18697 comm="syz.5.4398" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 638.201309][ T28] audit: type=1400 audit(1770868535.568:955): avc: denied { open } for pid=18697 comm="syz.5.4398" path="/dev/input/event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 638.240334][ T28] audit: type=1400 audit(1770868535.568:956): avc: denied { ioctl } for pid=18697 comm="syz.5.4398" path="/dev/input/event2" dev="devtmpfs" ino=248 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 638.460786][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.463234][T18726] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4407'. [ 638.893000][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.653938][T18765] loop6: detected capacity change from 0 to 512 [ 639.747500][T18765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 639.853006][T18765] EXT4-fs (loop6): 1 truncate cleaned up [ 639.910729][T18765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.129112][T18786] loop7: detected capacity change from 0 to 512 [ 640.137990][T18786] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 640.148929][T18786] EXT4-fs (loop7): 1 truncate cleaned up [ 640.150364][T18787] netlink: 'syz.1.4427': attribute type 2 has an invalid length. [ 640.155389][T18786] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.167160][T18787] netlink: 'syz.1.4427': attribute type 8 has an invalid length. [ 640.242858][T18787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4427'. [ 640.293818][T18799] loop5: detected capacity change from 0 to 512 [ 640.323249][T18799] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 640.380997][T18799] EXT4-fs (loop5): 1 truncate cleaned up [ 640.387100][T18799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.026173][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.187113][T18786] Process accounting resumed [ 641.391916][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.453621][T18834] netlink: 'syz.6.4439': attribute type 4 has an invalid length. [ 643.737596][T18798] Process accounting resumed [ 643.947584][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.203279][ T28] audit: type=1400 audit(1770868541.658:957): avc: denied { write } for pid=18866 comm="syz.1.4454" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 645.510421][T18897] loop2: detected capacity change from 0 to 512 [ 645.559528][T18897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 645.667182][T18897] EXT4-fs (loop2): 1 truncate cleaned up [ 645.686751][T18897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.770311][T18906] loop6: detected capacity change from 0 to 512 [ 645.777554][T18906] EXT4-fs: Ignoring removed orlov option [ 645.796105][T18906] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 647.554707][T18934] loop1: detected capacity change from 0 to 128 [ 648.252191][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.615546][T18960] loop2: detected capacity change from 0 to 128 [ 649.381164][T18976] loop6: detected capacity change from 0 to 512 [ 649.400487][T18976] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 649.436138][T18976] EXT4-fs (loop6): 1 truncate cleaned up [ 649.460528][T18976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.614856][T18984] Process accounting resumed [ 650.822995][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.027021][T12123] kworker/u8:11: attempt to access beyond end of device [ 651.027021][T12123] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 652.133559][ T2051] kworker/u8:6: attempt to access beyond end of device [ 652.133559][ T2051] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 652.161095][T19041] loop2: detected capacity change from 0 to 512 [ 652.234493][T19041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.248668][T19041] ext4 filesystem being mounted at /272/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.127631][T18987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.314436][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.325736][T19077] loop6: detected capacity change from 0 to 512 [ 653.369041][T19077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.382048][T19077] ext4 filesystem being mounted at /204/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.824001][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.844501][T19102] loop7: detected capacity change from 0 to 512 [ 654.860276][T19102] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 654.892019][T19102] EXT4-fs (loop7): 1 truncate cleaned up [ 654.898022][T19102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.250338][ T28] audit: type=1400 audit(1770868552.558:958): avc: denied { associate } for pid=19112 comm="syz.6.4512" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 655.426836][ T28] audit: type=1400 audit(1770868552.588:959): avc: denied { connect } for pid=19106 comm="syz.1.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 655.539447][ T28] audit: type=1400 audit(1770868552.588:960): avc: denied { write } for pid=19106 comm="syz.1.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 655.845879][ T28] audit: type=1400 audit(1770868553.298:961): avc: denied { allowed } for pid=19129 comm="syz.6.4519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 656.212338][ T28] audit: type=1400 audit(1770868553.678:962): avc: denied { create } for pid=19154 comm="syz.6.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 656.286519][T19158] loop2: detected capacity change from 0 to 128 [ 657.746498][T19105] Process accounting resumed [ 657.759276][ T28] audit: type=1400 audit(1770868555.218:963): avc: denied { ioctl } for pid=19169 comm="syz.1.4530" path="socket:[51237]" dev="sockfs" ino=51237 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 657.869001][ T28] audit: type=1400 audit(1770868555.328:964): avc: denied { accept } for pid=19169 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 657.981814][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.306731][ T28] audit: type=1400 audit(1770868555.328:965): avc: denied { read } for pid=19169 comm="syz.1.4530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 658.601569][ T41] kworker/u8:2: attempt to access beyond end of device [ 658.601569][ T41] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 658.792773][T19202] loop1: detected capacity change from 0 to 512 [ 658.820354][T19202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.833599][T19202] ext4 filesystem being mounted at /300/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.721005][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.926332][T19214] loop2: detected capacity change from 0 to 128 [ 660.010802][T19217] loop1: detected capacity change from 0 to 512 [ 660.055358][T19217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 660.091659][T19217] EXT4-fs (loop1): 1 truncate cleaned up [ 660.107190][T19217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.655186][ T3444] kworker/u8:7: attempt to access beyond end of device [ 660.655186][ T3444] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 660.918651][T19237] loop6: detected capacity change from 0 to 512 [ 660.936046][T19237] EXT4-fs: test_dummy_encryption option not supported [ 661.936053][T19217] Process accounting resumed [ 662.010898][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.479297][T19269] loop1: detected capacity change from 0 to 128 [ 663.222919][ T2051] kworker/u8:6: attempt to access beyond end of device [ 663.222919][ T2051] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 664.227577][T19310] loop2: detected capacity change from 0 to 128 [ 664.249677][T19310] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 664.264020][T19310] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.278670][T19313] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4568'. [ 664.492239][T19327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.505849][T19327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.133685][T13929] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 665.265004][T19355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4589'. [ 666.533576][T19381] syzkaller0: entered promiscuous mode [ 666.539084][T19381] syzkaller0: entered allmulticast mode [ 667.649888][ T28] audit: type=1400 audit(1770868565.108:966): avc: denied { setopt } for pid=19409 comm="syz.2.4607" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.666980][T19428] loop5: detected capacity change from 0 to 512 [ 668.687339][T19428] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 668.818640][T19435] loop6: detected capacity change from 0 to 512 [ 668.825743][T19435] EXT4-fs: Ignoring removed orlov option [ 669.368550][T19435] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 669.399514][T19428] EXT4-fs (loop5): 1 truncate cleaned up [ 669.481796][T19442] netlink: 'syz.6.4613': attribute type 4 has an invalid length. [ 669.539848][T19428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.764691][T19450] loop1: detected capacity change from 0 to 512 [ 669.800675][T19450] EXT4-fs: Ignoring removed oldalloc option [ 669.973657][T19450] EXT4-fs (loop1): 1 truncate cleaned up [ 669.979741][T19450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.211160][T19455] loop7: detected capacity change from 0 to 128 [ 670.678308][T19457] loop2: detected capacity change from 0 to 512 [ 670.853948][T19457] EXT4-fs: Ignoring removed oldalloc option [ 671.407604][T12132] kworker/u8:14: attempt to access beyond end of device [ 671.407604][T12132] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 671.440926][T19457] EXT4-fs (loop2): 1 truncate cleaned up [ 671.474943][T19457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.670754][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.183918][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.227718][T19490] loop5: detected capacity change from 0 to 128 [ 673.262208][T19490] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 673.309559][T19490] ext4 filesystem being mounted at /321/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 673.342074][ T28] audit: type=1400 audit(1770868570.808:967): avc: denied { create } for pid=19488 comm="syz.5.4632" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 673.827877][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.884779][T13748] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 674.016393][T19503] loop2: detected capacity change from 0 to 128 [ 674.047430][T19503] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 674.083768][T19507] loop5: detected capacity change from 0 to 512 [ 674.204527][T19511] netlink: 'syz.7.4635': attribute type 4 has an invalid length. [ 674.292019][T19503] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 674.307246][T19507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.377509][ T28] audit: type=1400 audit(1770868571.838:968): avc: denied { watch watch_reads } for pid=19506 comm="syz.5.4637" path="/323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 674.430269][T19503] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.4636: checksumming directory block 0 [ 674.549008][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.642989][T13929] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 674.935964][T19520] loop2: detected capacity change from 0 to 128 [ 674.963090][T19520] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 674.974024][T19522] loop5: detected capacity change from 0 to 1024 [ 674.999692][T19522] EXT4-fs: inline encryption not supported [ 675.041791][T19522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.060452][T19526] loop6: detected capacity change from 0 to 1764 [ 675.067039][ T28] audit: type=1400 audit(1770868572.528:969): avc: denied { read write } for pid=19527 comm="syz.2.4644" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 675.081300][T19522] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 675.091346][ T28] audit: type=1400 audit(1770868572.528:970): avc: denied { open } for pid=19527 comm="syz.2.4644" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 675.130634][ T28] audit: type=1400 audit(1770868572.528:971): avc: denied { remove_name } for pid=19521 comm="syz.5.4641" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 675.153306][ T28] audit: type=1400 audit(1770868572.528:972): avc: denied { rename } for pid=19521 comm="syz.5.4641" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 675.175588][ T28] audit: type=1400 audit(1770868572.528:973): avc: denied { unlink } for pid=19521 comm="syz.5.4641" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 675.230021][T19532] loop2: detected capacity change from 0 to 764 [ 675.240909][ T28] audit: type=1400 audit(1770868572.688:974): avc: denied { ioctl } for pid=19521 comm="syz.5.4641" path="/325/file1/file0/file0" dev="loop5" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 675.269465][T19522] EXT4-fs (loop5): Remounting filesystem read-only [ 675.297664][T19535] loop1: detected capacity change from 0 to 1024 [ 675.317276][T19532] rock: directory entry would overflow storage [ 675.330949][T19532] rock: sig=0x5245, size=8, remaining=5 [ 675.351458][T19535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 675.368646][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.382687][T19539] loop6: detected capacity change from 0 to 512 [ 675.390486][ T28] audit: type=1400 audit(1770868572.738:975): avc: denied { mount } for pid=19525 comm="syz.6.4643" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 675.420977][T19535] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.449600][T19539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.475695][T19542] loop2: detected capacity change from 0 to 512 [ 675.489874][ T28] audit: type=1400 audit(1770868572.788:976): avc: denied { unmount } for pid=15044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 675.522331][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 675.539307][T19542] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4649: bg 0: block 5: invalid block bitmap [ 675.558250][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.577514][T19542] loop2: lost filesystem error report for type 5 error -117 [ 675.577621][T19542] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 675.614630][T19542] loop2: lost filesystem error report for type 5 error -117 [ 675.614779][T19542] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4649: invalid indirect mapped block 3 (level 2) [ 675.654525][T19542] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 675.654837][T19542] EXT4-fs (loop2): 1 orphan inode deleted [ 675.705520][T19546] loop5: detected capacity change from 0 to 1024 [ 675.713588][T19546] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 675.724034][T19546] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 675.724268][T19542] EXT4-fs (loop2): 1 truncate cleaned up [ 675.733860][T19546] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 675.757068][T19546] EXT4-fs error (device loop5): ext4_get_journal_inode:5861: inode #5: comm syz.5.4648: unexpected bad inode w/o EXT4_IGET_BAD [ 675.764148][T19542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.771231][T19556] loop6: detected capacity change from 0 to 512 [ 675.788992][T19552] loop1: detected capacity change from 0 to 512 [ 675.798261][T19546] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 675.800880][T19546] EXT4-fs (loop5): no journal found [ 675.834623][T19556] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 675.849916][T19552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.857301][T19558] FAT-fs (loop7): codepage cp862 not found [ 675.876542][T19546] EXT4-fs (loop5): can't get journal size [ 675.887615][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.896989][T19556] EXT4-fs (loop6): 1 truncate cleaned up [ 675.911328][T19546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 675.919832][T19556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.940783][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.949809][T19546] EXT4-fs error (device loop5): __ext4_remount:6801: comm syz.5.4648: Abort forced by user [ 675.960480][T19546] EXT4-fs (loop5): Remounting filesystem read-only [ 675.969952][T19546] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 676.009576][T19570] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.4654: corrupted inode contents [ 676.031722][T19565] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 676.066483][T19573] EXT4-fs: test_dummy_encryption option not supported [ 676.070431][T19570] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 676.084314][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.102747][T19565] EXT4-fs (loop2): 1 truncate cleaned up [ 676.108790][T19565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.120850][T19570] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 676.129358][T19570] loop1: lost filesystem error report for type 5 error -117 [ 676.139197][T19570] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.4654: corrupted inode contents [ 676.171521][T19570] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 676.171699][T19570] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.4654: mark_inode_dirty error [ 676.209372][T19570] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 676.209689][T19570] EXT4-fs (loop1): 1 orphan inode deleted [ 676.235445][T19580] Attempt to read inode for relocated directory [ 676.243516][T19578] FAT-fs (loop7): codepage cp950 not found [ 676.246404][T19570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.277946][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.327794][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.337833][T19585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 676.353221][T19585] EXT4-fs (loop2): 1 truncate cleaned up [ 676.361683][T19585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.379519][T19588] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 676.433554][T19595] EXT4-fs: Ignoring removed orlov option [ 676.439280][T19595] EXT4-fs: test_dummy_encryption option not supported [ 676.442772][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.460114][T19588] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4665: bg 0: block 104: invalid block bitmap [ 676.475771][T19598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 676.501175][T19588] loop7: lost filesystem error report for type 5 error -117 [ 676.508923][T19588] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 676.509367][T19598] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4668: Invalid block bitmap block 0 in block_group 0 [ 676.535665][T19588] loop7: lost filesystem error report for type 5 error -117 [ 676.539104][T19598] loop1: lost filesystem error report for type 5 error -117 [ 676.546917][T19598] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 676.555081][T19600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.563002][T19598] loop1: lost filesystem error report for type 5 error -117 [ 676.575779][T19598] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.4668: attempt to clear invalid blocks 983261 len 1 [ 676.586466][T19588] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4665: invalid indirect mapped block 1 (level 1) [ 676.596409][T19598] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 676.596543][T19598] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.4668: Invalid inode table block 0 in block_group 0 [ 676.639609][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.639877][T19600] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 676.650311][T19588] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 676.658115][T19598] loop1: lost filesystem error report for type 5 error -117 [ 676.659937][T19600] EXT4-fs: old and new quota format mixing [ 676.670843][T19588] EXT4-fs (loop7): 1 truncate cleaned up [ 676.680982][T19598] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 676.695978][T19588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.726782][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.729785][T19598] loop1: lost filesystem error report for type 5 error -117 [ 676.752197][T19598] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 676.768440][T19598] loop1: lost filesystem error report for type 5 error -117 [ 676.768580][T19598] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.4668: Invalid inode table block 0 in block_group 0 [ 676.792135][T19612] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4672: Invalid inode bitmap blk 4 in block_group 0 [ 676.817395][T19598] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 676.817765][T19612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.827244][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.869365][T19614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 676.870904][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.881947][T19614] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.901842][T19598] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.4668: mark_inode_dirty error [ 676.913237][T19598] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 676.919929][T19598] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 676.940728][T19598] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.4668: Invalid inode table block 0 in block_group 0 [ 676.953944][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 676.978115][T19598] EXT4-fs (loop1): 1 truncate cleaned up [ 676.997542][T19598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.020025][T19629] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 677.021921][T19624] FAT-fs (loop7): codepage cp737 not found [ 677.049996][T19627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.070201][T19627] EXT4-fs error (device loop6): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.6.4678: path /239/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 677.104557][T19598] EXT4-fs (loop1): shut down requested (2) [ 677.118744][T15044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.138120][T19635] EXT4-fs: Ignoring removed nomblk_io_submit option [ 677.161252][T19635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 677.169403][T19635] System zones: 0-1, 3-36 [ 677.200987][T13929] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 677.212761][T19635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.243532][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.266145][T19646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.291850][T19646] EXT4-fs (loop2): shut down requested (1) [ 677.337529][T13929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.350811][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.389996][T19657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.421250][T19665] EXT4-fs: Ignoring removed nobh option [ 677.433179][T19660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.446905][T19665] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 677.469745][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.479223][T19665] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 677.484726][T19657] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 677.501301][T19671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.510143][T19657] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 1 with error 28 [ 677.531456][T19665] EXT4-fs (loop5): 1 truncate cleaned up [ 677.537556][T19657] EXT4-fs (loop6): This should not happen!! Data will be lost [ 677.537556][T19657] [ 677.538942][T19676] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 677.547782][T19657] EXT4-fs (loop6): Total free blocks count 0 [ 677.557105][T19665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.561276][T19657] EXT4-fs (loop6): Free/Dirty block details [ 677.597129][T19657] EXT4-fs (loop6): free_blocks=2415919504 [ 677.604225][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.610791][T19657] EXT4-fs (loop6): dirty_blocks=32 [ 677.652586][T19657] EXT4-fs (loop6): Block reservation details [ 677.670651][T19657] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 677.721444][T19686] EXT4-fs (loop7): orphan cleanup on readonly fs [ 677.731883][T12132] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 677.733665][T19686] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 677.754583][T19686] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 677.769647][T19686] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4700: attempt to clear invalid blocks 2 len 1 [ 677.783513][T19686] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 677.783885][T19686] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4700: invalid indirect mapped block 1819239214 (level 0) [ 677.807630][T19686] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 677.807789][T19686] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4700: invalid indirect mapped block 1819239214 (level 1) [ 677.820876][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.865416][T19686] EXT4-fs (loop7): 1 truncate cleaned up [ 677.876907][T19702] EXT4-fs: Ignoring removed bh option [ 677.882849][T19702] EXT4-fs: dax option not supported [ 677.893527][T19686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 677.931658][T19704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.958024][T19704] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.021583][T19712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.034882][T19704] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.4705: lblock 23 mapped to illegal pblock 18 (length 1) [ 678.051332][T19686] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 678.069930][T19686] EXT4-fs error (device loop7): __ext4_remount:6801: comm syz.7.4700: Abort forced by user [ 678.079990][T19704] EXT4-fs (loop5): Remounting filesystem read-only [ 678.114572][T14135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.125798][T19686] EXT4-fs (loop7): Remounting filesystem read-only [ 678.154490][T19686] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 678.172611][T13748] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.187538][T19729] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 678.207533][T13182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.228221][T19728] FAT-fs (loop6): IO charset euc-jp not found [ 678.234970][T19729] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4718: bg 0: block 104: invalid block bitmap [ 678.250519][T19729] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 678.259373][T19729] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4718: invalid indirect mapped block 1 (level 1) [ 678.276180][T19729] EXT4-fs (loop2): 1 truncate cleaned up [ 678.350771][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4726'. [ 678.379921][T19748] EXT4-fs: quotafile must be on filesystem root [ 678.395804][T19747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.434570][T19747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.567596][T19766] EXT4-fs: inline encryption not supported [ 678.638518][T19771] EXT4-fs: Ignoring removed orlov option [ 678.764549][T19771] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 678.820452][T19766] EXT4-fs: Ignoring removed orlov option [ 678.854309][T19771] System zones: 0-2, 18-18, 34-35 [ 678.867016][T19782] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 678.904001][T19771] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.921597][T19766] EXT4-fs (loop2): can't enable nombcache during remount [ 678.963757][T19766] EXT4-fs: Ignoring removed orlov option [ 679.020600][T19766] EXT4-fs (loop2): can't enable nombcache during remount [ 679.110206][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 679.110222][ T28] audit: type=1400 audit(1770868576.568:1003): avc: denied { kexec_image_load } for pid=19793 comm="syz.6.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 679.159734][T19800] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 679.238821][T19800] syz.2.4744: attempt to access beyond end of device [ 679.238821][T19800] loop2: rw=8388611, sector=137, nr_sectors = 7 limit=128 [ 679.256142][T19800] syz.2.4744: attempt to access beyond end of device [ 679.256142][T19800] loop2: rw=8390659, sector=144, nr_sectors = 897 limit=128 [ 679.257671][ T28] audit: type=1400 audit(1770868576.718:1004): avc: denied { create } for pid=19806 comm="syz.1.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 679.337862][ T28] audit: type=1400 audit(1770868576.718:1005): avc: denied { create } for pid=19803 comm="syz.7.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 679.370738][T19812] EXT4-fs (loop5): orphan cleanup on readonly fs [ 679.378998][T19812] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 679.400069][T19812] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 679.414930][T19812] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4753: attempt to clear invalid blocks 2 len 1 [ 679.424665][T19814] EXT4-fs (loop6): orphan cleanup on readonly fs [ 679.428083][T19812] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4753: invalid indirect mapped block 1819239214 (level 0) [ 679.448634][T19814] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 679.467930][T19812] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4753: invalid indirect mapped block 1819239214 (level 1) [ 679.621920][ T28] audit: type=1400 audit(1770868576.998:1006): avc: denied { bind } for pid=19806 comm="syz.1.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 679.658248][T19812] EXT4-fs (loop5): 1 truncate cleaned up [ 679.670892][T19814] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 679.758502][T19812] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 679.788721][ T28] audit: type=1400 audit(1770868576.998:1007): avc: denied { connect } for pid=19806 comm="syz.1.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 679.817867][T19814] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.4752: attempt to clear invalid blocks 2 len 1 [ 679.875391][ T28] audit: type=1400 audit(1770868576.998:1008): avc: denied { write } for pid=19806 comm="syz.1.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 679.900820][T19814] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4752: invalid indirect mapped block 1819239214 (level 0) [ 679.908943][T19812] EXT4-fs error (device loop5): __ext4_remount:6801: comm syz.5.4753: Abort forced by user [ 679.925047][ T28] audit: type=1400 audit(1770868577.178:1009): avc: denied { unmount } for pid=13929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 679.946926][T19812] EXT4-fs (loop5): Remounting filesystem read-only [ 679.953724][T19833] set_capacity_and_notify: 40 callbacks suppressed [ 679.953787][T19833] loop2: detected capacity change from 0 to 1024 [ 679.955584][T19814] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4752: invalid indirect mapped block 1819239214 (level 1) [ 679.969440][T19833] EXT4-fs: Ignoring removed orlov option [ 679.987710][T19812] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 680.018616][T19814] EXT4-fs (loop6): 1 truncate cleaned up [ 680.037991][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4761'. [ 680.100370][ T28] audit: type=1400 audit(1770868577.548:1010): avc: denied { setattr } for pid=19832 comm="syz.2.4760" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 680.164914][T19848] loop5: detected capacity change from 0 to 128 [ 680.197795][T19847] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.4760: failed to insert inode 15: doubly allocated? [ 680.224227][T19848] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 680.273721][T19851] loop7: detected capacity change from 0 to 1024 [ 680.310640][T19851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 680.311079][T19847] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 680.518518][T19851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 680.639427][ T28] audit: type=1400 audit(1770868577.978:1011): avc: denied { append } for pid=19857 comm="syz.5.4768" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 680.663542][T19847] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 680.719036][T19851] System zones: 0-1, 3-36 [ 681.577500][T19895] loop6: detected capacity change from 0 to 512 [ 681.608478][T19895] EXT4-fs (loop6): orphan cleanup on readonly fs [ 681.627485][T19895] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 681.677890][T19895] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 681.692638][T19895] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.4785: attempt to clear invalid blocks 2 len 1 [ 681.705753][T19895] fserror_report: 8 callbacks suppressed [ 681.705768][T19895] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 681.714597][T19895] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4785: invalid indirect mapped block 1819239214 (level 0) [ 681.784419][T19904] loop2: detected capacity change from 0 to 128 [ 681.839526][T19904] FAT-fs (loop2): Directory bread(block 414) failed [ 681.887256][T19904] FAT-fs (loop2): Directory bread(block 415) failed [ 681.901679][T19895] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 681.901956][T19895] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4785: invalid indirect mapped block 1819239214 (level 1) [ 681.961491][T19904] FAT-fs (loop2): Directory bread(block 416) failed [ 681.990621][T19904] FAT-fs (loop2): Directory bread(block 417) failed [ 682.005539][T19895] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 682.006342][T19895] EXT4-fs (loop6): 1 truncate cleaned up [ 682.038340][T19904] FAT-fs (loop2): Directory bread(block 418) failed [ 682.090557][T19904] FAT-fs (loop2): Directory bread(block 419) failed [ 682.116946][T19904] FAT-fs (loop2): Directory bread(block 420) failed [ 682.154435][T19904] FAT-fs (loop2): Directory bread(block 421) failed [ 682.181708][ T28] audit: type=1400 audit(1770868579.648:1012): avc: denied { ioctl } for pid=19915 comm="syz.1.4793" path="socket:[52124]" dev="sockfs" ino=52124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 682.207126][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4793'. [ 682.218268][T19904] FAT-fs (loop2): Directory bread(block 414) failed [ 682.221134][T19916] syz_tun: entered promiscuous mode [ 682.250314][T19904] FAT-fs (loop2): Directory bread(block 415) failed [ 682.542772][T19933] loop5: detected capacity change from 0 to 512 [ 682.592091][T19933] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4800: bg 0: block 393: padding at end of block bitmap is not set [ 682.668566][T19933] fserror_report: 7 callbacks suppressed [ 682.668580][T19933] loop5: lost filesystem error report for type 5 error -117 [ 682.751237][T19933] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 682.931935][T19933] loop5: lost filesystem error report for type 5 error -117 [ 682.932965][T19933] EXT4-fs (loop5): 2 truncates cleaned up [ 683.035529][T19943] loop6: detected capacity change from 0 to 512 [ 683.080946][T19943] EXT4-fs (loop6): orphan cleanup on readonly fs [ 683.100561][T19943] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 683.109377][T19933] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.4800: path /353/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 683.133397][T19943] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 683.167066][T19946] loop2: detected capacity change from 0 to 1024 [ 683.201774][T19946] EXT4-fs: inline encryption not supported [ 683.209877][T19943] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.4804: attempt to clear invalid blocks 2 len 1 [ 683.231757][T19943] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 683.298480][T19943] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4804: invalid indirect mapped block 1819239214 (level 0) [ 683.330441][T19943] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 683.330954][T19954] loop7: detected capacity change from 0 to 128 [ 683.360309][T19943] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4804: invalid indirect mapped block 1819239214 (level 1) [ 683.376961][T19958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4811'. [ 683.380467][T19943] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 683.392110][T19943] EXT4-fs (loop6): 1 truncate cleaned up [ 683.466473][T19967] loop5: detected capacity change from 0 to 512 [ 683.537237][T19967] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.551751][T19967] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 3: comm syz.5.4814: lblock 8 mapped to illegal pblock 3 (length 26) [ 683.574598][T19987] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 683.589247][T19967] EXT4-fs (loop5): Remounting filesystem read-only [ 683.601135][T19987] EXT4-fs (loop6): 1 truncate cleaned up [ 683.726136][T19998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.889217][T20033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 683.917408][T20033] EXT4-fs (loop5): 1 truncate cleaned up [ 683.984149][T20054] netlink: 'syz.6.4848': attribute type 1 has an invalid length. [ 683.994931][T20054] netlink: 'syz.6.4848': attribute type 2 has an invalid length. [ 684.004818][T20053] EXT4-fs: Ignoring removed nobh option [ 684.010910][T20053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 684.053658][T20057] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4849: bg 0: block 5: invalid block bitmap [ 684.059911][T20048] infiniband syz1: set active [ 684.070761][T20048] infiniband syz1: added syz_tun [ 684.088382][T20048] RDS/IB: syz1: added [ 684.092426][T20048] smc: adding ib device syz1 with port count 1 [ 684.098583][T20048] smc: ib device syz1 port 1 has no pnetid [ 684.103502][T20057] loop2: lost filesystem error report for type 5 error -117 [ 684.128333][T20057] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 684.171459][T20057] loop2: lost filesystem error report for type 5 error -117 [ 684.171629][T20057] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4849: invalid indirect mapped block 3 (level 2) [ 684.192319][T20057] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 684.192655][T20057] EXT4-fs (loop2): 1 orphan inode deleted [ 684.207909][T20057] EXT4-fs (loop2): 1 truncate cleaned up [ 684.240857][T20057] ================================================================== [ 684.249000][T20057] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 684.258120][T20057] [ 684.260437][T20057] write to 0xffffc90000e7b7f0 of 1 bytes by task 20048 on cpu 1: [ 684.268134][T20057] rwsem_down_write_slowpath+0x3eb/0xa80 [ 684.273762][T20057] down_write+0xab/0xc0 [ 684.277911][T20057] kernfs_activate+0x50/0x220 [ 684.282576][T20057] kernfs_add_one+0x212/0x280 [ 684.287240][T20057] __kernfs_create_file+0x145/0x180 [ 684.292427][T20057] sysfs_add_file_mode_ns+0x132/0x1b0 [ 684.297794][T20057] internal_create_group+0x441/0x9e0 [ 684.303081][T20057] sysfs_create_groups+0x3f/0xf0 [ 684.308019][T20057] ib_setup_port_attrs+0xed2/0x14c0 [ 684.313215][T20057] add_one_compat_dev+0x297/0x390 [ 684.318231][T20057] enable_device_and_get+0x1cd/0x260 [ 684.323505][T20057] ib_register_device+0xb41/0xcc0 [ 684.328517][T20057] rxe_register_device+0x175/0x190 [ 684.333624][T20057] rxe_add+0x8c7/0x8e0 [ 684.337677][T20057] rxe_net_add+0x62/0xb0 [ 684.341911][T20057] rxe_newlink+0xc6/0x180 [ 684.346223][T20057] nldev_newlink+0x3a8/0x430 [ 684.350796][T20057] rdma_nl_rcv+0x477/0x5b0 [ 684.355199][T20057] netlink_unicast+0x5c0/0x690 [ 684.359962][T20057] netlink_sendmsg+0x5c8/0x6f0 [ 684.364796][T20057] ____sys_sendmsg+0x5af/0x600 [ 684.369630][T20057] ___sys_sendmsg+0x195/0x1e0 [ 684.374292][T20057] __x64_sys_sendmsg+0xd4/0x160 [ 684.379127][T20057] x64_sys_call+0x194c/0x3020 [ 684.383795][T20057] do_syscall_64+0x12c/0x370 [ 684.388379][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.394255][T20057] [ 684.396561][T20057] read to 0xffffc90000e7b7f0 of 1 bytes by task 20057 on cpu 0: [ 684.404177][T20057] rwsem_down_write_slowpath+0x45e/0xa80 [ 684.409808][T20057] down_write+0xab/0xc0 [ 684.413964][T20057] kernfs_activate+0x50/0x220 [ 684.418625][T20057] kernfs_add_one+0x212/0x280 [ 684.423285][T20057] __kernfs_create_file+0x145/0x180 [ 684.428476][T20057] sysfs_add_file_mode_ns+0x132/0x1b0 [ 684.433838][T20057] internal_create_group+0x441/0x9e0 [ 684.439124][T20057] sysfs_create_groups+0x3f/0xf0 [ 684.444059][T20057] kobject_add_internal+0x4a7/0x780 [ 684.449249][T20057] kobject_init_and_add+0x14a/0x1f0 [ 684.454435][T20057] ext4_register_sysfs+0x97/0x250 [ 684.459447][T20057] ext4_fill_super+0x372e/0x3800 [ 684.464377][T20057] get_tree_bdev_flags+0x291/0x300 [ 684.469479][T20057] get_tree_bdev+0x1f/0x30 [ 684.473889][T20057] ext4_get_tree+0x1c/0x30 [ 684.478296][T20057] vfs_get_tree+0x57/0x1d0 [ 684.482699][T20057] do_new_mount+0x288/0x8d0 [ 684.487194][T20057] path_mount+0x4d0/0xbc0 [ 684.491516][T20057] __se_sys_mount+0x28c/0x2e0 [ 684.496187][T20057] __x64_sys_mount+0x67/0x80 [ 684.500771][T20057] x64_sys_call+0x2d61/0x3020 [ 684.505449][T20057] do_syscall_64+0x12c/0x370 [ 684.510048][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.515942][T20057] [ 684.518250][T20057] value changed: 0x00 -> 0x01 [ 684.522904][T20057] [ 684.525216][T20057] Reported by Kernel Concurrency Sanitizer on: [ 684.531360][T20057] CPU: 0 UID: 0 PID: 20057 Comm: syz.2.4849 Not tainted syzkaller #0 PREEMPT(full) [ 684.540719][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 684.550763][T20057] ==================================================================