last executing test programs: 1m17.863775461s ago: executing program 1 (id=118): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0xd, 0x0, 0x4000000}, 0x20004000) 1m17.698357256s ago: executing program 1 (id=120): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000000)='./file7/file0/file0\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x1000) 1m17.651019241s ago: executing program 1 (id=122): madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014100400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028005000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff020000000000000000000000000001140004000000000000000000ebfffeffac1414aa0c0002800500010086000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 1m17.400217523s ago: executing program 1 (id=127): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_sctp(0x2, 0x5, 0x84) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m17.280378744s ago: executing program 1 (id=131): r0 = socket$pppl2tp(0x18, 0x1, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x4000000, 0x280, 0x2}) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) fchmod(r0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\a\x00'], 0x50) 1m17.026943856s ago: executing program 1 (id=141): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1081}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 1m17.026721416s ago: executing program 32 (id=141): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1081}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 1m14.601939803s ago: executing program 0 (id=191): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x1, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x8}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x24002850) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m14.559016567s ago: executing program 0 (id=192): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0xa4, 0xffb, 0x6, 0x2, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x2, 0x1000, 0xfffffff9, 0x3, 0x3, 0x2000, 0x4d, 0x0, 0x6, 0x9, 0x4, 0x7, 0x2504, 0x5, 0x763, 0xd, 0x1000d, 0xe, 0x2b12, 0x100, 0x81, 0x1c00, 0xd, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x211000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x80, 0x6, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x5, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4009, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x2, 0x2, 0x3, 0x4, 0x7, 0x4009, 0xe, 0x3, 0x100003, 0x8, 0x80000752, 0x0, 0x3, 0x0, 0x10001, 0x3, 0xffffffff, 0x10001, 0x5, 0x9, 0x8, 0xfdffffff, 0x2, 0x40, 0x1084, 0x2, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0xffff, 0x2, 0xb, 0x100002, 0xd9a, 0x12, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0x8, 0x0, 0xfffffff7, 0x4, 0x3d, 0x8, 0x209, 0x3, 0x401, 0x66d1, 0x8, 0x7, 0xfffffffe, 0x6, 0x5, 0xffffffff]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x138, 0x11, 0x148, 0x0, 0x0, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010001, 0xff000000, 0xff000000, 'veth1_to_hsr\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x1, 0x2, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfa3, 0xc64, 0x4, '\x00', 'syz1\x00'}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x41, [0x6, 0x5, 0x0, 0x4, 0x2, 0x4], 0x5, 0x4}, {0x2, [0x7, 0x2, 0x6, 0x4, 0x6, 0x1], 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1m14.501888862s ago: executing program 0 (id=193): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 1m14.458152686s ago: executing program 0 (id=195): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6Xku9firejG8chrh8ua1tq5A2l6KGvtaYzr+732/CCvMHkHBAAAAAAAAAAAAAAAAAAAAAAAbse+Yu+dvWmaLo/2z8nG+/fsKxNq/c2IYq+f0f5AW8X+QNl8Fln2+zuPt99PorY/0GCDn9r+Os2YubunDgAAAAAAAAAAAAAAAAAAAP8am2fmotPtnji9eebsejXon948MxMRecub33765WLUcxbLAepVtaBZplS60nFVlgyTs6SWUwZJfvBGs2j55OJoxpWcylmMy2fGOfPbumrB3od/+vDs+nCEh5Jh1Y1xThI7ntfZpD6NWrDx/2LAYcuF3Z+fyeDgTXIuZ1m2W/m5VyarohHR3HWq/zDI8uCbK2888MTm8CLICo8+tnTs8oWPf13vdPMj57rdudOb17P1Tvn1zhfbRDA/vGySyvXTKC+2RvVKaHaevHF0zy4jb9VbOsn3v7344AeXypaZysu0wzSyY5fGLW/vkJMUB/1se9dcEeTTHHU9mwf5czQxzvC75KZPy1NxWy/c/R+tdC6e+/GXW62q/JCwUQcAAAAAAAAAAAAAAAAAANwRlc+Kl8oP+87+XdXTR6c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c8b//38UxMzWtpZbC/7sx7DlWAy75vMBY65yxOW7eLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/RUAAP//wAtXdw==") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000500)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0x1b) 1m14.125393226s ago: executing program 0 (id=201): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m13.842252481s ago: executing program 0 (id=210): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) setns(r0, 0x0) 1m13.842067591s ago: executing program 33 (id=210): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) setns(r0, 0x0) 1m6.429168464s ago: executing program 3 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) 1m6.397971176s ago: executing program 3 (id=359): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 1m6.255121069s ago: executing program 3 (id=362): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000080)=0x20, 0x7ffff000) 1m6.232092851s ago: executing program 3 (id=363): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m6.197115124s ago: executing program 3 (id=364): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1m5.934969198s ago: executing program 3 (id=366): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1m5.934795538s ago: executing program 34 (id=366): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 41.393734071s ago: executing program 4 (id=979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r0, 0x0) 41.258994283s ago: executing program 4 (id=980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x22020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001220f50004"], 0x20) 41.246582864s ago: executing program 4 (id=981): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xd, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x4}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff000000, 0xffffff00, 0xffffff00]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40) 41.222717786s ago: executing program 4 (id=982): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x4) 41.166321871s ago: executing program 4 (id=984): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @empty, 0x407}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000040)="9e", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000380)="a732", 0x2, 0x3b00, 0x0, 0x0) 40.879214137s ago: executing program 4 (id=989): r0 = syz_io_uring_setup(0x189c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) r2 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x30000010}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 40.828290801s ago: executing program 35 (id=989): r0 = syz_io_uring_setup(0x189c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) r2 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x30000010}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.931065819s ago: executing program 6 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 4.807483391s ago: executing program 6 (id=1880): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='mountstats\x00') 4.087324885s ago: executing program 6 (id=1888): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) io_setup(0x7, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_destroy(r0) 3.268546818s ago: executing program 7 (id=1908): memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x8) 3.179044256s ago: executing program 6 (id=1909): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 2.999880073s ago: executing program 6 (id=1915): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4040}, 0x4048804) 2.924835829s ago: executing program 6 (id=1918): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.784262892s ago: executing program 7 (id=1923): r0 = io_uring_setup(0x6572, &(0x7f0000000100)={0x0, 0x76b4, 0x800, 0x0, 0xfffff7ff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) creat(&(0x7f0000000340)='./file0\x00', 0x10) close_range(r0, 0xffffffffffffffff, 0x0) connect$unix(r1, 0x0, 0x0) 2.088348294s ago: executing program 2 (id=1930): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="020114003cfe18000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}, {&(0x7f0000001680)=ANY=[], 0x1068}, {&(0x7f0000002c80)={0x1290, 0x21, 0x604, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x1120, 0x27, 0x0, 0x1, [@nested={0x111c, 0x7b, 0x0, 0x1, [@nested={0x1115, 0x142, 0x0, 0x1, [@generic="a9", @nested={0x1085, 0xa1, 0x0, 0x1, [@typed={0x7, 0x6e, 0x0, 0x0, @str='}+\x00'}, @generic="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", @typed={0x55, 0xb0, 0x0, 0x0, @binary="15ced90414b115e069ead497c3cdb5d55291571fb2be53a205aec44ba065c467720f89480f686fb1d1f7908b66ae9a6ff113404a159be39457d2c16e6c8d42eb9dc9262b2817af7a2175648bd45d33354a"}, @typed={0x6, 0xf5, 0x0, 0x0, @str='/\x00'}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x5e, 0x0, 0x0, @pid}]}, @nested={0x85, 0x14f, 0x0, 0x1, [@generic="cc070c2d23b31f92e3c22edbad38aedeb051ed691cb96159864d43bf3171bb4dd4085bab72fbd97f2c410c3184f19a4c84861fd02380d8e8d2f0320b5373f1d97170f0a5ad8aa80333487d69fd839c352aef63fe3e76e5af209496d43e84f252aafd128aab8da9cb783a1e5d6dd093b6f854f750d1445ffcbaf516fe9a63045a28"]}]}]}]}, @nested={0x89, 0x100, 0x0, 0x1, [@nested={0x5d, 0x14e, 0x0, 0x1, [@generic="808af2f172b5c72091bcdddcf185734b5f617991c9f3a6bfda3a269e41e2b0851ca5d712f4ed0c640e0962d0b717c70f07e93bed99b1872dcc5fe3b00a3ea59c98cb3fe8c7e7e3706b25335ad1acf16687093abf9ee3b9f0c0"]}, @generic="c48b102404dddaa4dfe0e60950f133a502aa167d04e55802093e85a4529173d7fc", @typed={0x4, 0x119}]}, @generic="29defb2619df844c5e8244fd5601e6a32d98952424b7076640c4e4a0b23404b30944ad4c9d6739be71cda998a53a5fc61d0032e7d4d0869fa3d703dadf6e67f2f389baa153e44ee0a339101206f4cdc6910fa94112cbd68124eef6c6a5fb81f284c4daad19e83cbbd29cbfb27b89b628a9ab69ef76708c87c650ec1d00c5f6a3ba70eafb77e780c1984830a09e3eb3acaa7aeb4ae6fb68e368f0e40af65b80033931888f220f972fc6660ed49c202d913c178afdca82753aa53a8eac7b54660a7c223790b09978519b1606793f21d5cd2c"]}, 0x1290}], 0x3, 0x0, 0x0, 0x9006}, 0x4000) 2.059173296s ago: executing program 2 (id=1932): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") 1.922077119s ago: executing program 7 (id=1935): r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 1.871428083s ago: executing program 2 (id=1937): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x103005, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.685786889s ago: executing program 8 (id=1942): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.644663453s ago: executing program 7 (id=1943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x8}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0xa}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.553792581s ago: executing program 7 (id=1944): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1.430091633s ago: executing program 8 (id=1945): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 1.389334696s ago: executing program 8 (id=1947): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='O', 0x1}], 0x1}, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x3, &(0x7f0000000400)="cd2293211e89651704bdd2da0f021da8d97e8e69e581ecfb4265db21ad35e14edfce66061496c3ed0f6e0953205a822428fd34787c45567ff7712540728c78e00f1db1613290f74658767d81c14f2af220f913997700efd10d9ce1d3e5e0bba2468543ac77ff716cfe945b784eb6a6687854d32b893b23792a6ea3cf6afa728a34c06132bce781765b") ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1.22991079s ago: executing program 8 (id=1948): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x1008008, &(0x7f0000000040)=ANY=[], 0x1, 0x2ee, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x40) fcntl$setlease(r0, 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1.001022481s ago: executing program 8 (id=1950): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500130008000000050005"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 970.067984ms ago: executing program 7 (id=1951): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x4000010) read$nci(r0, 0x0, 0x0) 916.006618ms ago: executing program 2 (id=1952): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) recvfrom$inet6(r0, &(0x7f00000001c0)=""/79, 0x4f, 0x100, &(0x7f0000000040)={0xa, 0x6, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2}, 0x1c) 723.234016ms ago: executing program 8 (id=1954): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 675.41117ms ago: executing program 5 (id=1955): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0xa7}, 0x106302, 0x1100, 0x20da, 0x0, 0xa, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 453.656479ms ago: executing program 5 (id=1956): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) close(0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 428.282392ms ago: executing program 5 (id=1957): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) 358.550018ms ago: executing program 5 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000800) 249.600618ms ago: executing program 5 (id=1959): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa3892272", 0x4c}], 0x1, 0x0, 0x0, 0x10040000}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 211.830481ms ago: executing program 5 (id=1960): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002120) 54.621175ms ago: executing program 2 (id=1961): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x48891}, 0x4000000) r2 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 0s ago: executing program 2 (id=1962): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _adv: batadv0: Interface activated: batadv_slave_0 [ 50.010773][ T4597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.033132][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.067757][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.099826][ T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.133002][ T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.248439][ T4913] loop4: detected capacity change from 0 to 512 [ 50.368465][ T4913] ------------[ cut here ]------------ [ 50.374864][ T4913] EA inode 11 i_nlink=2 [ 50.375318][ T4913] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.442/4913 [ 50.390884][ T4913] Modules linked in: [ 50.395761][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: syz.4.442 Not tainted syzkaller #0 PREEMPT(full) [ 50.410485][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.422425][ T4913] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 50.430188][ T4913] Code: c4 6f 99 ff 4c 8d 2d 9d f9 5d 05 49 8d 7e 40 e8 74 03 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 fe b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df 5e dc 03 66 66 66 66 66 66 2e [ 50.450104][ T4913] RSP: 0018:ffffc900017a7778 EFLAGS: 00010246 [ 50.457022][ T4913] RAX: ffff888104e24c78 RBX: ffff88811a8f9be8 RCX: ffffffff81bfe0b8 [ 50.465568][ T4913] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dda40 [ 50.477945][ T4913] RBP: 000000000000000b R08: 000188811a8f9b9b R09: 0000000000000000 [ 50.486444][ T4913] R10: ffffc900017a76a8 R11: 0001c900017a76a8 R12: ffff88811a8f9b98 [ 50.495313][ T4913] R13: ffffffff871dda40 R14: ffff88811a8f9b50 R15: 0000000000000001 [ 50.503681][ T4911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.504121][ T4913] FS: 00007f49c45d76c0(0000) GS:ffff8882ae8e3000(0000) knlGS:0000000000000000 [ 50.512520][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 50.512594][ T28] audit: type=1400 audit(1771355643.075:739): avc: denied { write } for pid=4910 comm="syz.6.441" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.525716][ T4911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.528944][ T4913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.568014][ T4913] CR2: 0000000034747865 CR3: 000000011c274000 CR4: 00000000003506f0 [ 50.576975][ T4913] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.585365][ T4913] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 50.595375][ T4913] Call Trace: [ 50.599135][ T4913] [ 50.602724][ T4913] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 50.608968][ T4913] ? errseq_check+0x2c/0x50 [ 50.614335][ T4913] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 50.620315][ T4913] ? ext4_truncate+0x92b/0xb00 [ 50.625535][ T4913] ext4_evict_inode+0xa1f/0xd60 [ 50.632825][ T4913] ? __pfx_ext4_evict_inode+0x10/0x10 [ 50.638704][ T4913] evict+0x2af/0x510 [ 50.643724][ T4913] ? __dquot_initialize+0x146/0x7c0 [ 50.649682][ T4913] iput+0x41a/0x580 [ 50.654000][ T4913] ext4_process_orphan+0x1a9/0x1c0 [ 50.660045][ T4913] ext4_orphan_cleanup+0x6a8/0xa00 [ 50.665734][ T4913] ext4_fill_super+0x3408/0x37c0 [ 50.671861][ T4913] ? set_blocksize+0x14c/0x270 [ 50.677058][ T4913] ? setup_bdev_super+0x30e/0x370 [ 50.682885][ T4913] ? __pfx_ext4_fill_super+0x10/0x10 [ 50.688734][ T4913] get_tree_bdev_flags+0x291/0x300 [ 50.694483][ T4913] ? __pfx_ext4_fill_super+0x10/0x10 [ 50.700255][ T4913] get_tree_bdev+0x1f/0x30 [ 50.709948][ T4913] ext4_get_tree+0x1c/0x30 [ 50.714765][ T4913] vfs_get_tree+0x57/0x1d0 [ 50.719704][ T4913] do_new_mount+0x288/0x8d0 [ 50.724855][ T4913] path_mount+0x4d0/0xbc0 [ 50.730023][ T4913] __se_sys_mount+0x28c/0x2e0 [ 50.735848][ T4913] __x64_sys_mount+0x67/0x80 [ 50.740705][ T4913] x64_sys_call+0x2d61/0x3020 [ 50.749973][ T4913] do_syscall_64+0x12c/0x370 [ 50.755615][ T4913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.762013][ T4913] RIP: 0033:0x7f49c5b7d8ca [ 50.766655][ T4913] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.787224][ T4913] RSP: 002b:00007f49c45d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.796788][ T4913] RAX: ffffffffffffffda RBX: 00007f49c45d6ee0 RCX: 00007f49c5b7d8ca [ 50.808454][ T4913] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f49c45d6ea0 [ 50.816958][ T4913] RBP: 00002000000009c0 R08: 00007f49c45d6ee0 R09: 0000000000800718 [ 50.825524][ T4913] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 50.838784][ T4913] R13: 00007f49c45d6ea0 R14: 000000000000048d R15: 0000200000000200 [ 50.848645][ T4913] [ 50.852142][ T4913] ---[ end trace 0000000000000000 ]--- [ 50.871783][ T4913] EXT4-fs (loop4): 1 orphan inode deleted [ 50.908028][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.000927][ T28] audit: type=1400 audit(1771355643.565:740): avc: denied { create } for pid=4960 comm="syz.7.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.040235][ T28] audit: type=1400 audit(1771355643.595:741): avc: denied { sys_admin } for pid=4960 comm="syz.7.453" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 51.094882][ T4958] loop5: detected capacity change from 0 to 512 [ 51.137011][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.199330][ T4958] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 51.211987][ T4958] System zones: 0-2, 18-18, 34-34 [ 51.217985][ T4958] EXT4-fs (loop5): too many log groups per flexible block group [ 51.239603][ T4958] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 51.249153][ T4958] EXT4-fs (loop5): mount failed [ 51.261558][ T28] audit: type=1400 audit(1771355643.825:742): avc: denied { read } for pid=4975 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.335012][ T28] audit: type=1400 audit(1771355643.905:743): avc: denied { shutdown } for pid=4981 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.356113][ T28] audit: type=1400 audit(1771355643.905:744): avc: denied { setopt } for pid=4981 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.376495][ T28] audit: type=1400 audit(1771355643.905:745): avc: denied { read } for pid=4981 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.423313][ T28] audit: type=1400 audit(1771355643.985:746): avc: denied { create } for pid=4986 comm="syz.6.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.452537][ T4944] syz.2.449 (4944) used greatest stack depth: 9656 bytes left [ 51.464021][ T28] audit: type=1400 audit(1771355643.995:747): avc: denied { connect } for pid=4986 comm="syz.6.459" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.582771][ T28] audit: type=1400 audit(1771355644.155:748): avc: denied { setopt } for pid=4999 comm="syz.6.465" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.056651][ T5028] SELinux: policydb string does not match my string SE Linux [ 52.064848][ T5028] SELinux: failed to load policy [ 52.212052][ T5040] loop6: detected capacity change from 0 to 512 [ 52.234376][ T5040] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.266878][ T5040] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 52.284229][ T5040] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.480: bad orphan inode 131083 [ 52.307112][ T5040] loop6: lost filesystem error report for type 5 error -117 [ 52.307999][ T5040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.333486][ T5040] EXT4-fs (loop6): Online defrag not supported for non-extent files [ 52.431956][ T5056] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 52.447353][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.481318][ T5063] netlink: 'syz.7.490': attribute type 64 has an invalid length. [ 52.489782][ T5058] loop4: detected capacity change from 0 to 2048 [ 52.516336][ T5063] netlink: 16 bytes leftover after parsing attributes in process `syz.7.490'. [ 52.544478][ T5058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.564005][ T5063] netlink: 'syz.7.490': attribute type 64 has an invalid length. [ 52.571896][ T5063] netlink: 16 bytes leftover after parsing attributes in process `syz.7.490'. [ 52.603071][ T5058] EXT4-fs (loop4): shut down requested (2) [ 52.640551][ T5085] loop7: detected capacity change from 0 to 512 [ 52.683968][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.734046][ T5085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.783469][ T5085] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.820408][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.915836][ T5113] loop2: detected capacity change from 0 to 512 [ 53.018560][ T5126] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 53.027472][ T5113] EXT4-fs (loop2): 1 orphan inode deleted [ 53.040224][ T5113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.131149][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.143264][ T5132] syzkaller1: entered promiscuous mode [ 53.148815][ T5132] syzkaller1: entered allmulticast mode [ 53.365601][ T5151] netlink: 116 bytes leftover after parsing attributes in process `syz.7.517'. [ 53.405464][ T1032] IPVS: starting estimator thread 0... [ 53.494591][ T5169] loop6: detected capacity change from 0 to 512 [ 53.517311][ T5169] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 53.527324][ T5157] IPVS: using max 2496 ests per chain, 124800 per kthread [ 53.543935][ T5169] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.522: bad orphan inode 16 [ 53.563657][ T5169] loop6: lost filesystem error report for type 5 error -117 [ 53.563883][ T5169] ext4_test_bit(bit=15, block=4) = 0 [ 53.576552][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 53.576570][ C0] EXT4-fs (loop6): initial error at time 1771355646: ext4_orphan_get:1417 [ 53.576615][ C0] EXT4-fs (loop6): last error at time 1771355646: ext4_orphan_get:1417 [ 53.607862][ T5169] EXT4-fs (loop6): 1 orphan inode deleted [ 53.614778][ T5169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.674481][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.094617][ T5206] loop5: detected capacity change from 0 to 2048 [ 54.121626][ T5206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.142801][ T5206] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.270894][ T5218] loop4: detected capacity change from 0 to 512 [ 54.307117][ T5218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.375549][ T5218] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.604853][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.649620][ T5233] hub 2-0:1.0: USB hub found [ 54.668651][ T5233] hub 2-0:1.0: 8 ports detected [ 54.822652][ T5248] batadv_slave_0: entered promiscuous mode [ 54.822798][ T1815] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 54.830171][ T5247] batadv_slave_0: left promiscuous mode [ 54.892616][ T1815] EXT4-fs (loop5): Remounting filesystem read-only [ 55.032744][ T5272] loop6: detected capacity change from 0 to 128 [ 55.052021][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.060842][ T5272] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.132209][ T5272] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.141838][ T5278] loop5: detected capacity change from 0 to 512 [ 55.170844][ T5278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.242255][ T5278] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.260151][ T5284] loop7: detected capacity change from 0 to 764 [ 55.292406][ T5284] iso9660: Unknown parameter 'iocharsturkish' [ 55.333600][ T50] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.457189][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.626581][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 55.839501][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 55.839517][ T28] audit: type=1400 audit(1771355648.405:777): avc: denied { override_creds } for pid=5317 comm="syz.7.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.912402][ T28] audit: type=1400 audit(1771355648.475:778): avc: denied { create } for pid=5320 comm="syz.7.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.946301][ T5327] loop6: detected capacity change from 0 to 128 [ 55.951819][ T28] audit: type=1400 audit(1771355648.485:779): avc: denied { bind } for pid=5320 comm="syz.7.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.978741][ T5327] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.021910][ T28] audit: type=1400 audit(1771355648.485:780): avc: denied { write } for pid=5320 comm="syz.7.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.031896][ T5331] loop7: detected capacity change from 0 to 1024 [ 56.070916][ T5327] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.094938][ T5331] EXT4-fs: inline encryption not supported [ 56.119018][ T5331] EXT4-fs: Ignoring removed bh option [ 56.128100][ T56] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.182603][ T5331] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.216544][ T28] audit: type=1400 audit(1771355648.785:781): avc: denied { read write } for pid=5342 comm="syz.6.582" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.297209][ T28] audit: type=1400 audit(1771355648.785:782): avc: denied { open } for pid=5342 comm="syz.6.582" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.328325][ T28] audit: type=1400 audit(1771355648.785:783): avc: denied { execute } for pid=5342 comm="syz.6.582" path="/83/cpu.stat" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.328990][ T5331] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 56.493197][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.521116][ T28] audit: type=1400 audit(1771355649.085:784): avc: denied { read } for pid=5358 comm="syz.5.591" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.550388][ T28] audit: type=1400 audit(1771355649.085:785): avc: denied { open } for pid=5358 comm="syz.5.591" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.768780][ T5368] loop5: detected capacity change from 0 to 256 [ 56.770951][ T28] audit: type=1400 audit(1771355649.095:786): avc: denied { write } for pid=5358 comm="syz.5.591" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.843372][ T5368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.863921][ T5368] FAT-fs (loop5): Filesystem has been set read-only [ 56.871461][ T5368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 56.882386][ T5368] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 57.162451][ T5378] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 57.180884][ T5374] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.250682][ T5374] SELinux: failed to load policy [ 57.327106][ T5391] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 57.817151][ T5422] loop2: detected capacity change from 0 to 512 [ 57.848352][ T5422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.889228][ T5422] EXT4-fs (loop2): 1 truncate cleaned up [ 57.904966][ T5422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.033410][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.075419][ T5430] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.200787][ T5441] loop7: detected capacity change from 0 to 128 [ 58.346041][ T5450] netlink: 16 bytes leftover after parsing attributes in process `syz.6.628'. [ 58.397329][ T5450] netlink: 16 bytes leftover after parsing attributes in process `syz.6.628'. [ 58.647495][ T5497] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.649: iget: bad i_size value: 38620345925642 [ 58.673663][ T5497] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.681223][ T5497] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.649: couldn't read orphan inode 15 (err -117) [ 58.690463][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 58.690496][ C0] EXT4-fs (loop7): initial error at time 1771355651: ext4_orphan_get:1391: inode 15 [ 58.690526][ C0] EXT4-fs (loop7): last error at time 1771355651: ext4_orphan_get:1391: inode 15 [ 58.792286][ T5497] loop7: lost filesystem error report for type 5 error -117 [ 58.794560][ T5497] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.831569][ T5497] EXT4-fs (loop7): shut down requested (0) [ 58.875117][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 58.987035][ T5520] EXT4-fs: Ignoring removed orlov option [ 59.006298][ T5524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.016856][ T5509] EXT4-fs (loop5): 1 orphan inode deleted [ 59.041844][ T5509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.061640][ T5524] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 59.084525][ T5524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 59.092705][ T5524] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 59.093154][ T5520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.102295][ T5524] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 59.124932][ T5524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.158913][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.169883][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.175012][ T5533] set_capacity_and_notify: 4 callbacks suppressed [ 59.175101][ T5533] loop2: detected capacity change from 0 to 1024 [ 59.198202][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.208809][ T5533] EXT4-fs: Ignoring removed orlov option [ 59.225382][ T5537] loop5: detected capacity change from 0 to 512 [ 59.238546][ T5537] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.258990][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'. [ 59.259729][ T5537] EXT4-fs (loop5): 1 truncate cleaned up [ 59.268132][ T5542] netlink: 'syz.6.666': attribute type 20 has an invalid length. [ 59.281956][ T5542] netlink: 'syz.6.666': attribute type 21 has an invalid length. [ 59.285870][ T5533] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.308457][ T5537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.330656][ T5544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5544 comm=syz.6.668 [ 59.331288][ T5533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.390873][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.421747][ T5533] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.664: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 59.480847][ T5533] EXT4-fs error (device loop2): ext4_check_all_de:660: inode #12: block 7: comm syz.2.664: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 59.582759][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.434260][ T5633] loop4: detected capacity change from 0 to 2048 [ 60.818799][ T5657] loop5: detected capacity change from 0 to 512 [ 60.825924][ T5657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.843609][ T5657] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 60.851947][ T5657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 60.860107][ T5657] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 60.869772][ T5657] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 60.878926][ T5657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 60.899995][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.979253][ T5663] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 61.228610][ T5684] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 61.311988][ T5686] netlink: 'syz.7.727': attribute type 2 has an invalid length. [ 61.488369][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.731'. [ 61.511525][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 61.511539][ T28] audit: type=1326 audit(1771355910.080:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49c5b1da19 code=0x7fc00000 [ 61.512525][ T5698] netlink: 'syz.6.731': attribute type 18 has an invalid length. [ 61.551804][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 61.677065][ T28] audit: type=1400 audit(1771355910.250:804): avc: denied { bind } for pid=5701 comm="syz.6.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.810812][ T28] audit: type=1400 audit(1771355910.380:805): avc: denied { read } for pid=5712 comm="syz.2.739" lport=41534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.854901][ T28] audit: type=1400 audit(1771355910.420:806): avc: denied { execute_no_trans } for pid=5721 comm="syz.6.741" path="/113/file1" dev="tmpfs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.930619][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 61.962254][ T28] audit: type=1400 audit(1771355910.480:807): avc: denied { create } for pid=5728 comm="syz.2.744" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.002123][ T28] audit: type=1400 audit(1771355910.480:808): avc: denied { write } for pid=5728 comm="syz.2.744" name="file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.050813][ T28] audit: type=1400 audit(1771355910.480:809): avc: denied { open } for pid=5728 comm="syz.2.744" path="/125/file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.093040][ T28] audit: type=1400 audit(1771355910.490:810): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.258053][ T28] audit: type=1400 audit(1771355910.830:811): avc: denied { setopt } for pid=5771 comm="syz.6.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.678618][ T5813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.760'. [ 62.689306][ T5769] loop2: detected capacity change from 0 to 32768 [ 62.732431][ T3305] loop2: p1 p2 p3 < p5 p6 > [ 62.737575][ T3305] loop2: p1 size 242222080 extends beyond EOD, truncated [ 62.776928][ T3305] loop2: p2 start 4294967295 is beyond EOD, truncated [ 62.809460][ T5769] loop2: p1 p2 p3 < p5 p6 > [ 62.828350][ T5769] loop2: p1 size 242222080 extends beyond EOD, truncated [ 62.855147][ T5836] netlink: 20 bytes leftover after parsing attributes in process `syz.6.765'. [ 62.872877][ T5769] loop2: p2 start 4294967295 is beyond EOD, truncated [ 62.883255][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 62.888139][ T5836] netlink: 20 bytes leftover after parsing attributes in process `syz.6.765'. [ 62.962618][ T5843] loop2: detected capacity change from 0 to 1024 [ 63.021512][ T5843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.086969][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.087185][ T4142] udevd[4142]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 63.104555][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 63.107924][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 63.177685][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 63.190974][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 63.201722][ T4142] udevd[4142]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 63.211008][ T28] audit: type=1400 audit(1771355911.750:812): avc: denied { ioctl } for pid=5859 comm="syz.7.775" path="socket:[13317]" dev="sockfs" ino=13317 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.242328][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 63.256185][ T5862] sctp: [Deprecated]: syz.4.776 (pid 5862) Use of int in maxseg socket option. [ 63.256185][ T5862] Use struct sctp_assoc_value instead [ 63.269595][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.778'. [ 63.273107][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.402788][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 63.419844][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 63.745469][ T5892] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 63.821299][ T9] IPVS: starting estimator thread 0... [ 63.922965][ T5894] IPVS: using max 2400 ests per chain, 120000 per kthread [ 63.974515][ T41] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.002352][ T41] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.051335][ T41] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.090464][ T41] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.162116][ T23] IPVS: starting estimator thread 0... [ 64.208082][ T5931] loop2: detected capacity change from 0 to 4096 [ 64.228583][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.252201][ T5929] IPVS: using max 2208 ests per chain, 110400 per kthread [ 64.317481][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.345879][ T5937] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 64.437158][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.807'. [ 64.446422][ T5941] netlink: 'syz.5.807': attribute type 18 has an invalid length. [ 64.454367][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.807'. [ 64.608587][ T5953] loop5: detected capacity change from 0 to 512 [ 64.639803][ T5953] EXT4-fs (loop5): 1 orphan inode deleted [ 64.664501][ T5953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.695200][ T5953] EXT4-fs (loop5): shut down requested (0) [ 64.718074][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.823930][ T5966] loop7: detected capacity change from 0 to 128 [ 65.089176][ T5980] syzkaller1: entered promiscuous mode [ 65.124470][ T5980] syzkaller1: entered allmulticast mode [ 65.357886][ T5997] tipc: Started in network mode [ 65.374487][ T5997] tipc: Node identity 4, cluster identity 4711 [ 65.398150][ T5997] tipc: Node number set to 4 [ 65.465602][ T6003] loop5: detected capacity change from 0 to 2048 [ 65.630030][ T6001] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.676690][ T6001] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 32 with error 28 [ 65.702153][ T6001] EXT4-fs (loop5): This should not happen!! Data will be lost [ 65.702153][ T6001] [ 65.711820][ T6001] EXT4-fs (loop5): Total free blocks count 0 [ 65.722652][ T6001] EXT4-fs (loop5): Free/Dirty block details [ 65.728706][ T6001] EXT4-fs (loop5): free_blocks=2415919504 [ 65.734597][ T6001] EXT4-fs (loop5): dirty_blocks=32 [ 65.739787][ T6001] EXT4-fs (loop5): Block reservation details [ 65.746013][ T6001] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 65.792907][ T6013] loop5: detected capacity change from 0 to 512 [ 65.833137][ T6013] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.079373][ T6029] loop5: detected capacity change from 0 to 8192 [ 66.273791][ T6051] loop6: detected capacity change from 0 to 1024 [ 66.371254][ T6062] loop2: detected capacity change from 0 to 1024 [ 66.394710][ T6062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.751996][ T6088] loop4: detected capacity change from 0 to 764 [ 66.776187][ T6088] Symlink component flag not implemented [ 66.786937][ T6088] Symlink component flag not implemented (116) [ 66.808172][ T6090] loop6: detected capacity change from 0 to 2048 [ 66.811747][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 66.811758][ T28] audit: type=1400 audit(1771355915.380:859): avc: denied { remount } for pid=6087 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.868607][ T6090] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.182439][ T28] audit: type=1400 audit(1771355915.760:860): avc: denied { ioctl } for pid=6108 comm="syz.5.877" path="socket:[13679]" dev="sockfs" ino=13679 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.275237][ T2227] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 67.297869][ T28] audit: type=1400 audit(1771355915.850:861): avc: denied { listen } for pid=6114 comm="syz.7.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.329895][ T2227] EXT4-fs (loop6): Remounting filesystem read-only [ 67.373564][ T28] audit: type=1400 audit(1771355915.950:862): avc: denied { map } for pid=6121 comm="syz.5.885" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.422441][ T28] audit: type=1400 audit(1771355915.950:863): avc: denied { execute } for pid=6121 comm="syz.5.885" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.517499][ T6139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.571517][ T6139] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.878: bg 0: block 217: padding at end of block bitmap is not set [ 67.744801][ T4105] EXT4-fs unmount: 11 callbacks suppressed [ 67.744830][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.776876][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.833338][ T28] audit: type=1400 audit(1771355916.400:864): avc: denied { map } for pid=6151 comm="syz.7.894" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.872208][ T6145] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.133400][ T6177] netlink: 'syz.5.902': attribute type 3 has an invalid length. [ 68.155032][ T6179] syzkaller1: entered promiscuous mode [ 68.167335][ T6177] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.902'. [ 68.176911][ T6179] syzkaller1: entered allmulticast mode [ 68.313510][ T6189] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.322328][ T28] audit: type=1400 audit(1771355916.890:865): avc: denied { write } for pid=6186 comm="syz.7.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.492212][ T1815] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 68.539378][ T1815] EXT4-fs (loop2): Remounting filesystem read-only [ 68.621562][ T28] audit: type=1400 audit(1771355917.190:866): avc: denied { write } for pid=6206 comm="syz.7.915" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.675626][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.942163][ T6229] Illegal XDP return value 4294967274 on prog (id 98) dev N/A, expect packet loss! [ 69.047263][ T6235] FAT-fs (loop5): Directory bread(block 199916) failed [ 69.081523][ T6235] FAT-fs (loop5): Directory bread(block 199917) failed [ 69.102288][ T6235] FAT-fs (loop5): Directory bread(block 199918) failed [ 69.111524][ T6235] FAT-fs (loop5): Directory bread(block 199919) failed [ 69.132200][ T6235] FAT-fs (loop5): Directory bread(block 199920) failed [ 69.142202][ T6235] FAT-fs (loop5): Directory bread(block 199921) failed [ 69.149177][ T6235] FAT-fs (loop5): Directory bread(block 199922) failed [ 69.176264][ T6235] FAT-fs (loop5): Directory bread(block 199923) failed [ 69.248991][ T6235] FAT-fs (loop5): FAT read failed (blocknr 128) [ 69.474551][ T6260] set_capacity_and_notify: 3 callbacks suppressed [ 69.474569][ T6260] loop6: detected capacity change from 0 to 512 [ 69.509805][ T28] audit: type=1400 audit(1771355918.080:867): avc: denied { remount } for pid=6259 comm="syz.6.938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 69.564230][ T6262] loop6: detected capacity change from 0 to 512 [ 69.613210][ T6262] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.939: invalid indirect mapped block 4294967295 (level 1) [ 69.642154][ T6262] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.642349][ T6262] EXT4-fs (loop6): Remounting filesystem read-only [ 69.658017][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 69.658053][ C1] EXT4-fs (loop6): initial error at time 1771355918: ext4_free_branches:1023: inode 11 [ 69.658083][ C1] EXT4-fs (loop6): last error at time 1771355918: ext4_free_branches:1023: inode 11 [ 69.683737][ T6262] EXT4-fs (loop6): 2 truncates cleaned up [ 69.690018][ T6262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.773076][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.247928][ T6294] loop4: detected capacity change from 0 to 1024 [ 70.293584][ T6294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.318301][ T6290] loop5: detected capacity change from 0 to 8192 [ 70.325661][ T6294] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.952: missing EA_INODE flag [ 70.343223][ T6290] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.354645][ T6294] EXT4-fs (loop4): Remounting filesystem read-only [ 70.418316][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.482568][ T6302] sctp: [Deprecated]: syz.5.955 (pid 6302) Use of int in max_burst socket option deprecated. [ 70.482568][ T6302] Use struct sctp_assoc_value instead [ 70.498170][ T28] audit: type=1400 audit(1771355919.060:868): avc: denied { setopt } for pid=6300 comm="syz.5.955" lport=55402 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.703147][ T6317] loop7: detected capacity change from 0 to 1024 [ 70.727810][ T6317] EXT4-fs: Ignoring removed orlov option [ 70.769620][ T6317] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.820464][ T6317] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.905931][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.223951][ T6347] loop7: detected capacity change from 0 to 8192 [ 71.695552][ T6374] netlink: 'syz.6.986': attribute type 6 has an invalid length. [ 71.818800][ T1815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.891399][ T1815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.975188][ T1815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.049439][ T1815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.192643][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 72.213952][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.997'. [ 72.224784][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 72.224795][ T28] audit: type=1400 audit(1771355920.800:873): avc: denied { read } for pid=6402 comm="syz.2.997" path="socket:[14160]" dev="sockfs" ino=14160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.333370][ T1815] bridge_slave_1: left allmulticast mode [ 72.355319][ T1815] bridge_slave_1: left promiscuous mode [ 72.363400][ T1815] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.389480][ T1815] bridge_slave_0: left allmulticast mode [ 72.405449][ T1815] bridge_slave_0: left promiscuous mode [ 72.417810][ T1815] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.584798][ T1815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.594895][ T1815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.616735][ T1815] bond0 (unregistering): Released all slaves [ 72.707194][ T1815] hsr_slave_0: left promiscuous mode [ 72.725366][ T1815] hsr_slave_1: left promiscuous mode [ 72.741875][ T28] audit: type=1400 audit(1771355921.310:874): avc: denied { create } for pid=6442 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.765028][ T1815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.790287][ T1815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.804971][ T1815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.816515][ T28] audit: type=1400 audit(1771355921.340:875): avc: denied { ioctl } for pid=6442 comm="syz.2.1006" path="socket:[15376]" dev="sockfs" ino=15376 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.850919][ T1815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.881649][ T1815] veth1_macvtap: left promiscuous mode [ 72.890555][ T1815] veth0_macvtap: left promiscuous mode [ 72.898419][ T1815] veth1_vlan: left promiscuous mode [ 72.906020][ T1815] veth0_vlan: left promiscuous mode [ 73.024229][ T1815] team0 (unregistering): Port device team_slave_1 removed [ 73.038952][ T1815] team0 (unregistering): Port device team_slave_0 removed [ 73.122716][ T6386] chnl_net:caif_netlink_parms(): no params data found [ 73.201655][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.231803][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.261524][ T6489] loop6: detected capacity change from 0 to 512 [ 73.271103][ T6386] bridge_slave_0: entered allmulticast mode [ 73.307096][ T6386] bridge_slave_0: entered promiscuous mode [ 73.319643][ T6489] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 73.349792][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.361729][ T6489] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 73.383381][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.395519][ T6386] bridge_slave_1: entered allmulticast mode [ 73.413438][ T6489] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1013: Corrupt directory, running e2fsck is recommended [ 73.427797][ T6386] bridge_slave_1: entered promiscuous mode [ 73.445378][ T6489] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 73.482242][ T6489] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1013: corrupted in-inode xattr: e_name out of bounds [ 73.498620][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.532145][ T6489] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.533951][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.537843][ T6489] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1013: couldn't read orphan inode 15 (err -117) [ 73.543114][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 73.543129][ C0] EXT4-fs (loop6): initial error at time 1771355922: ext4_iget_extra_inode:5025: inode 15 [ 73.543173][ C0] EXT4-fs (loop6): last error at time 1771355922: ext4_iget_extra_inode:5025: inode 15 [ 73.596319][ T6489] loop6: lost filesystem error report for type 5 error -117 [ 73.607676][ T6489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.627996][ T6386] team0: Port device team_slave_0 added [ 73.638634][ T6386] team0: Port device team_slave_1 added [ 73.670869][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.687141][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.723071][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.734743][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.741720][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.746887][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.767885][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.833966][ T6514] sock: sock_set_timeout: `syz.7.1018' (pid 6514) tries to set negative timeout [ 73.873316][ T6517] loop6: detected capacity change from 0 to 256 [ 73.890236][ T6386] hsr_slave_0: entered promiscuous mode [ 73.904321][ T28] audit: type=1400 audit(1771355922.480:876): avc: denied { setopt } for pid=6520 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.932896][ T6386] hsr_slave_1: entered promiscuous mode [ 73.939783][ T6386] debugfs: 'hsr0' already exists in 'hsr' [ 73.945923][ T6386] Cannot create hsr debugfs directory [ 73.958147][ T6517] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.968868][ T28] audit: type=1400 audit(1771355922.480:877): avc: denied { listen } for pid=6520 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.990591][ T28] audit: type=1400 audit(1771355922.480:878): avc: denied { accept } for pid=6520 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.164502][ T28] audit: type=1400 audit(1771355922.740:879): avc: denied { mount } for pid=6534 comm="syz.2.1024" name="/" dev="gadgetfs" ino=4887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.209596][ T28] audit: type=1400 audit(1771355922.740:880): avc: denied { mounton } for pid=6534 comm="syz.2.1024" path="/178/file0" dev="gadgetfs" ino=4887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 74.272625][ T6386] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 74.283459][ T28] audit: type=1400 audit(1771355922.790:881): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.306139][ T6386] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 74.331121][ T6386] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 74.351332][ T28] audit: type=1400 audit(1771355922.820:882): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.375686][ T6386] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 74.512784][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.541221][ T6386] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.560879][ T1815] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.567992][ T1815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.587459][ T845] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.594535][ T845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.677621][ T6386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.689018][ T6386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.769615][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.953148][ T6386] veth0_vlan: entered promiscuous mode [ 74.960779][ T6386] veth1_vlan: entered promiscuous mode [ 74.975945][ T6601] loop7: detected capacity change from 0 to 512 [ 74.986346][ T6601] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.992435][ T6386] veth0_macvtap: entered promiscuous mode [ 75.000012][ T6601] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 75.002969][ T6386] veth1_macvtap: entered promiscuous mode [ 75.009235][ T6601] EXT4-fs (loop7): orphan cleanup on readonly fs [ 75.020626][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.021711][ T6601] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.043674][ T6601] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 75.050716][ T6601] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 75.060687][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.072130][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 75.078774][ C0] EXT4-fs (loop7): initial error at time 1771355923: mb_free_blocks:2047: inode 12: block 14 [ 75.088979][ C0] EXT4-fs (loop7): last error at time 1771355923: mb_free_blocks:2047: inode 12: block 14 [ 75.096385][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100748][ T6601] EXT4-fs (loop7): Remounting filesystem read-only [ 75.114462][ T6601] EXT4-fs (loop7): 1 truncate cleaned up [ 75.120748][ T6601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.147548][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.169340][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.182110][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.239611][ T6616] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.1049'. [ 75.250771][ T6616] netlink: zone id is out of range [ 75.262762][ T6616] netlink: zone id is out of range [ 75.277258][ T6616] netlink: set zone limit has 8 unknown bytes [ 75.283918][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.428979][ T6633] netlink: 399 bytes leftover after parsing attributes in process `syz.8.1056'. [ 75.438667][ T6633] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 75.460970][ T6633] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 75.554964][ T6643] netlink: 'syz.6.1061': attribute type 10 has an invalid length. [ 75.582609][ T6643] syz_tun: entered promiscuous mode [ 75.595863][ T6643] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 75.788435][ T6667] loop6: detected capacity change from 0 to 512 [ 75.833344][ T6667] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1071: inode has both inline data and extents flags [ 75.893223][ T6667] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.893415][ T6667] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1071: couldn't read orphan inode 15 (err -117) [ 75.902608][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 75.902630][ C1] EXT4-fs (loop6): initial error at time 1771355924: ext4_orphan_get:1391: inode 15 [ 75.902663][ C1] EXT4-fs (loop6): last error at time 1771355924: ext4_orphan_get:1391: inode 15 [ 75.945124][ T6676] loop5: detected capacity change from 0 to 512 [ 75.967013][ T6676] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.982134][ T6667] loop6: lost filesystem error report for type 5 error -117 [ 75.986041][ T6667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.006303][ T6676] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1074: bad orphan inode 16 [ 76.032126][ T6676] loop5: lost filesystem error report for type 5 error -117 [ 76.032278][ T6676] ext4_test_bit(bit=15, block=4) = 0 [ 76.044879][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 76.044898][ C1] EXT4-fs (loop5): initial error at time 1771355924: ext4_orphan_get:1417 [ 76.044920][ C1] EXT4-fs (loop5): last error at time 1771355924: ext4_orphan_get:1417 [ 76.068619][ T6676] EXT4-fs (loop5): 1 orphan inode deleted [ 76.068624][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.086622][ T6676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.113950][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.137601][ T6679] netlink: 'syz.6.1075': attribute type 12 has an invalid length. [ 76.163083][ T6679] netlink: 'syz.6.1075': attribute type 16 has an invalid length. [ 76.171159][ T6679] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1075'. [ 76.223398][ T6688] team0: Device vlan2 is already an upper device of the team interface [ 76.273402][ T6690] netlink: 'syz.2.1080': attribute type 3 has an invalid length. [ 76.287059][ T6690] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1080'. [ 76.361797][ T6699] loop5: detected capacity change from 0 to 2048 [ 76.403192][ T6699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.487069][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.603184][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 76.618770][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 76.634965][ T6719] geneve2: entered promiscuous mode [ 76.640212][ T6719] geneve2: entered allmulticast mode [ 76.718194][ T10] Process accounting resumed [ 76.723125][ T1815] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.736617][ T1815] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.755483][ T1815] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.776528][ T1815] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.888286][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1099'. [ 76.907310][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1099'. [ 77.008152][ T6720] Process accounting resumed [ 77.049303][ T6752] 9p: Bad value for 'rfdno' [ 77.185530][ T6766] team0: Device vlan2 is already an upper device of the team interface [ 77.393732][ T6779] loop8: detected capacity change from 0 to 1764 [ 77.545193][ T6787] loop8: detected capacity change from 0 to 1024 [ 77.602940][ T6787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.642192][ T6787] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.676075][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 77.676089][ T28] audit: type=1400 audit(1771355926.250:894): avc: denied { read write } for pid=6786 comm="syz.8.1118" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.706485][ T6786] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.1118: lblock 0 mapped to illegal pblock 0 (length 1) [ 77.730084][ T28] audit: type=1400 audit(1771355926.280:895): avc: denied { open } for pid=6786 comm="syz.8.1118" path="/16/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.756940][ T6801] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1125'. [ 77.766443][ T28] audit: type=1400 audit(1771355926.280:896): avc: denied { map } for pid=6786 comm="syz.8.1118" path="/16/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.771356][ T6786] EXT4-fs (loop8): Remounting filesystem read-only [ 77.789299][ T28] audit: type=1400 audit(1771355926.280:897): avc: denied { execute } for pid=6786 comm="syz.8.1118" path="/16/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.807675][ T6803] team0: Device vlan2 is already an upper device of the team interface [ 77.861461][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.970605][ T6817] loop6: detected capacity change from 0 to 512 [ 78.072305][ T6817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.131450][ T6817] ext4 filesystem being mounted at /192/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.212520][ T28] audit: type=1400 audit(1771355926.780:898): avc: denied { remount } for pid=6816 comm="syz.6.1131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.256488][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.273897][ T28] audit: type=1400 audit(1771355926.850:899): avc: denied { ioctl } for pid=6840 comm="syz.5.1140" path="socket:[16308]" dev="sockfs" ino=16308 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.427716][ T6848] loop8: detected capacity change from 0 to 8192 [ 78.482293][ T3305] loop8: p1 p2 p4 < > [ 78.486400][ T3305] loop8: partition table partially beyond EOD, truncated [ 78.494537][ T3305] loop8: p1 start 16777216 is beyond EOD, truncated [ 78.502705][ T3305] loop8: p2 size 515840 extends beyond EOD, truncated [ 78.512622][ T3305] loop8: p4 start 16777216 is beyond EOD, truncated [ 78.521530][ T6848] loop8: p1 p2 p4 < > [ 78.525686][ T6848] loop8: partition table partially beyond EOD, truncated [ 78.533215][ T6848] loop8: p1 start 16777216 is beyond EOD, truncated [ 78.540117][ T6848] loop8: p2 size 515840 extends beyond EOD, truncated [ 78.549808][ T6848] loop8: p4 start 16777216 is beyond EOD, truncated [ 78.637296][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 79.179051][ T6896] loop6: detected capacity change from 0 to 4096 [ 79.189996][ T6896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.272956][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.314569][ T28] audit: type=1326 audit(1771355927.890:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381892c629 code=0x7ffc0000 [ 79.368471][ T28] audit: type=1326 audit(1771355927.890:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381892c629 code=0x7ffc0000 [ 79.411354][ T28] audit: type=1326 audit(1771355927.890:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f381892c629 code=0x7ffc0000 [ 79.492286][ T28] audit: type=1326 audit(1771355927.890:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.5.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381892c629 code=0x7ffc0000 [ 80.400975][ T7052] loop6: detected capacity change from 0 to 4096 [ 80.424032][ T7052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.440532][ T7063] loop7: detected capacity change from 0 to 512 [ 80.451953][ T7063] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 80.470885][ T7063] EXT4-fs (loop7): 1 truncate cleaned up [ 80.494747][ T7063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.535873][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.573339][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.897818][ T6935] syz.2.1175 (6935) used greatest stack depth: 7288 bytes left [ 80.930984][ T7093] netlink: 'syz.5.1203': attribute type 3 has an invalid length. [ 80.962232][ T7093] netlink: 'syz.5.1203': attribute type 7 has an invalid length. [ 80.988031][ T7093] netlink: 'syz.5.1203': attribute type 8 has an invalid length. [ 81.022313][ T7093] netlink: 'syz.5.1203': attribute type 7 has an invalid length. [ 81.050639][ T7093] netlink: 198788 bytes leftover after parsing attributes in process `syz.5.1203'. [ 81.153281][ T7111] loop6: detected capacity change from 0 to 1024 [ 81.173547][ T7111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.202151][ T7111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.204608][ T7115] loop5: detected capacity change from 0 to 512 [ 81.232401][ T7111] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.251897][ T7115] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 81.271718][ T7111] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.1210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 81.272477][ T7115] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.313341][ T7115] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 8: comm syz.5.1214: invalid block [ 81.326214][ T7115] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.326459][ T7115] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1214: couldn't read orphan inode 11 (err -117) [ 81.335684][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 81.335701][ C1] EXT4-fs (loop5): initial error at time 1771355929: __ext4_iget:5378: inode 11: block 8 [ 81.335735][ C1] EXT4-fs (loop5): last error at time 1771355929: __ext4_iget:5378: inode 11: block 8 [ 81.352207][ T7111] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.393779][ T7115] loop5: lost filesystem error report for type 5 error -117 [ 81.402234][ T7111] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1210: couldn't read orphan inode 11 (err -117) [ 81.422034][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 81.422053][ C1] EXT4-fs (loop6): initial error at time 1771355929: ext4_ext_check_inode:521: inode 11 [ 81.422099][ C1] EXT4-fs (loop6): last error at time 1771355929: ext4_ext_check_inode:521: inode 11 [ 81.451930][ T7115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.462127][ T7111] loop6: lost filesystem error report for type 5 error -117 [ 81.469787][ T7111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.523042][ T7111] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1210: Invalid block bitmap block 0 in block_group 0 [ 81.546109][ T7111] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.1210: Failed to acquire dquot type 0 [ 81.571916][ T7115] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 81.595845][ T2227] EXT4-fs error (device loop6): ext4_release_dquot:7039: comm kworker/u8:10: Failed to release dquot type 0 [ 81.624734][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.742315][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.831174][ T7154] random: crng reseeded on system resumption [ 82.439695][ T7162] loop5: detected capacity change from 0 to 512 [ 82.501590][ T7164] loop8: detected capacity change from 0 to 164 [ 82.510320][ T7162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.609501][ T7162] EXT4-fs (loop5): 1 truncate cleaned up [ 82.615717][ T7162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.766440][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.785154][ T10] IPVS: starting estimator thread 0... [ 82.850643][ T7184] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.890298][ T7190] sctp: [Deprecated]: syz.8.1245 (pid 7190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.890298][ T7190] Use struct sctp_sack_info instead [ 82.906784][ T7173] IPVS: using max 2448 ests per chain, 122400 per kthread [ 83.265762][ T7243] loop6: detected capacity change from 0 to 512 [ 83.292249][ T7243] EXT4-fs (loop6): orphan cleanup on readonly fs [ 83.312610][ T7243] __quota_error: 18 callbacks suppressed [ 83.312624][ T7243] Quota error (device loop6): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 83.324983][ T7253] loop5: detected capacity change from 0 to 512 [ 83.329524][ T7243] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.337656][ T7253] EXT4-fs: Ignoring removed bh option [ 83.349885][ T7243] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 83.362801][ T7243] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1271: bad orphan inode 14 [ 83.363087][ T7253] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 83.373148][ T7243] loop6: lost filesystem error report for type 5 error -117 [ 83.381658][ T7243] ext4_test_bit(bit=13, block=18) = 1 [ 83.383516][ T7253] EXT4-fs (loop5): 1 truncate cleaned up [ 83.388998][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 83.396433][ T7253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.399952][ C1] EXT4-fs (loop6): last error at time 1771355931: ext4_orphan_get:1417 [ 83.430018][ T7243] is_bad_inode(inode)=0 [ 83.434539][ T7243] NEXT_ORPHAN(inode)=0 [ 83.438720][ T7243] max_ino=32 [ 83.440433][ T28] audit: type=1400 audit(1771355932.010:919): avc: denied { append } for pid=7252 comm="syz.5.1274" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.442025][ T7243] i_nlink=1 [ 83.467703][ T7253] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 50331648 > max in inode 15 [ 83.467912][ T7243] EXT4-fs (loop6): 1 truncate cleaned up [ 83.484020][ T7243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.497872][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.508271][ T28] audit: type=1400 audit(1771355932.080:920): avc: denied { mounton } for pid=7242 comm="syz.6.1271" path="/222/file0" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.551370][ T28] audit: type=1400 audit(1771355932.120:921): avc: denied { unmount } for pid=4105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 83.572347][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.762238][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.768376][ T7143] Bluetooth: hci0: command 0x1003 tx timeout [ 83.989335][ T28] audit: type=1400 audit(1771355932.560:922): avc: denied { bind } for pid=7282 comm="syz.8.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.147671][ T7294] loop8: detected capacity change from 0 to 512 [ 84.157364][ T7294] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 84.184548][ T7294] EXT4-fs (loop8): orphan cleanup on readonly fs [ 84.191939][ T7294] EXT4-fs error (device loop8): __ext4_iget:5378: inode #11: block 8: comm syz.8.1291: invalid block [ 84.203543][ T7294] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.203901][ T7294] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1291: couldn't read orphan inode 11 (err -117) [ 84.213152][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 84.213170][ C0] EXT4-fs (loop8): initial error at time 1771355932: __ext4_iget:5378: inode 11: block 8 [ 84.213213][ C0] EXT4-fs (loop8): last error at time 1771355932: __ext4_iget:5378: inode 11: block 8 [ 84.251294][ T7294] loop8: lost filesystem error report for type 5 error -117 [ 84.252561][ T7294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.279131][ T7294] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 84.342916][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.464769][ T7314] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.474165][ T7314] vhci_hcd vhci_hcd.2: invalid port number 96 [ 84.480272][ T7314] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 84.522390][ T7323] loop8: detected capacity change from 0 to 512 [ 84.554110][ T7323] EXT4-fs: Ignoring removed bh option [ 84.574051][ T7323] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 84.593587][ T7323] EXT4-fs (loop8): 1 truncate cleaned up [ 84.599971][ T7323] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.651594][ T7323] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 50331648 > max in inode 15 [ 84.777533][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.102620][ T7375] EXT4-fs (loop5): 1 truncate cleaned up [ 85.108578][ T7375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.169782][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.185846][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.224644][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.241336][ T28] audit: type=1400 audit(1771355933.810:923): avc: denied { write } for pid=7382 comm="syz.7.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.942690][ T7429] set_capacity_and_notify: 1 callbacks suppressed [ 85.942706][ T7429] loop5: detected capacity change from 0 to 8192 [ 85.997622][ T7429] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.103507][ T28] audit: type=1400 audit(1771355934.680:924): avc: denied { open } for pid=7446 comm="syz.8.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.132172][ T28] audit: type=1400 audit(1771355934.680:925): avc: denied { kernel } for pid=7446 comm="syz.8.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.162040][ T7370] syz.6.1317 (7370) used greatest stack depth: 6088 bytes left [ 86.322824][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.322965][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.380591][ T7460] loop7: detected capacity change from 0 to 1024 [ 86.392452][ T28] audit: type=1326 audit(1771355934.970:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz.2.1336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09a843c629 code=0x0 [ 86.434271][ T7460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.502209][ T28] audit: type=1400 audit(1771355935.070:927): avc: denied { map } for pid=7459 comm="syz.7.1335" path="/175/file1/blkio.bfq.time" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.503247][ T7460] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 86.541511][ T7460] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 86.541540][ T7460] EXT4-fs (loop7): This should not happen!! Data will be lost [ 86.541540][ T7460] [ 86.566073][ T7460] EXT4-fs (loop7): Total free blocks count 0 [ 86.566089][ T7460] EXT4-fs (loop7): Free/Dirty block details [ 86.566099][ T7460] EXT4-fs (loop7): free_blocks=68451041280 [ 86.566166][ T7460] EXT4-fs (loop7): dirty_blocks=2560 [ 86.566176][ T7460] EXT4-fs (loop7): Block reservation details [ 86.566185][ T7460] EXT4-fs (loop7): i_reserved_data_blocks=160 [ 86.796179][ T7043] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 87.049709][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1348'. [ 87.049773][ T7493] netlink: 'syz.6.1348': attribute type 30 has an invalid length. [ 87.941191][ T7520] loop6: detected capacity change from 0 to 512 [ 87.947950][ T7508] loop8: detected capacity change from 0 to 8192 [ 87.956944][ T7520] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.972526][ T7520] EXT4-fs (loop6): 1 truncate cleaned up [ 87.978327][ T7508] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.983143][ T7520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.015146][ T7520] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.1359: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 88.035342][ T7520] EXT4-fs (loop6): Remounting filesystem read-only [ 88.049947][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.179121][ T7538] vcan0: tx address claim with different name [ 88.205881][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.216338][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.549414][ T7560] loop6: detected capacity change from 0 to 512 [ 88.595935][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 88.595951][ T28] audit: type=1326 audit(1771355937.170:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.1379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a843c629 code=0x0 [ 88.629944][ T7560] EXT4-fs (loop6): 1 orphan inode deleted [ 88.651766][ T7560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.690331][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.708128][ T7570] loop6: detected capacity change from 0 to 128 [ 88.796475][ T7576] loop6: detected capacity change from 0 to 512 [ 88.837810][ T7576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.857904][ T7576] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.876694][ T7587] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.884192][ T7589] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 88.893485][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.954292][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1390'. [ 89.003926][ T7600] loop8: detected capacity change from 0 to 128 [ 89.072711][ T7604] syzkaller1: entered promiscuous mode [ 89.078500][ T7604] syzkaller1: entered allmulticast mode [ 89.307785][ T7622] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1403'. [ 89.358219][ T7624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.453106][ T7630] loop6: detected capacity change from 0 to 1024 [ 89.512720][ T7630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.527548][ T28] audit: type=1326 audit(1771355938.100:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7642 comm="syz.5.1413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f381892c629 code=0x0 [ 89.578613][ T56] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 89.620937][ T56] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 184 with error 28 [ 89.633728][ T56] EXT4-fs (loop6): This should not happen!! Data will be lost [ 89.633728][ T56] [ 89.652339][ T56] EXT4-fs (loop6): Total free blocks count 0 [ 89.658455][ T56] EXT4-fs (loop6): Free/Dirty block details [ 89.666563][ T56] EXT4-fs (loop6): free_blocks=68451041280 [ 89.678100][ T56] EXT4-fs (loop6): dirty_blocks=496 [ 89.703604][ T56] EXT4-fs (loop6): Block reservation details [ 89.709643][ T56] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 89.719804][ T7630] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 89.753384][ T7658] loop8: detected capacity change from 0 to 512 [ 89.783756][ T7658] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.805136][ T7658] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.889450][ T28] audit: type=1400 audit(1771355938.460:936): avc: denied { add_name } for pid=7657 comm="syz.8.1418" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 89.923174][ T7658] EXT4-fs error (device loop8): ext4_get_first_dir_block:3527: inode #12: comm syz.8.1418: Attempting to read directory block (0) that is past i_size (3) [ 89.959577][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 89.973400][ T7658] EXT4-fs (loop8): Remounting filesystem read-only [ 90.033871][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 90.070207][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.075495][ T28] audit: type=1400 audit(1771355938.490:937): avc: denied { remove_name } for pid=7657 comm="syz.8.1418" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 90.102038][ T28] audit: type=1400 audit(1771355938.490:938): avc: denied { rename } for pid=7657 comm="syz.8.1418" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 90.162372][ T28] audit: type=1400 audit(1771355938.490:939): avc: denied { reparent } for pid=7657 comm="syz.8.1418" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 90.272156][ T7673] 9pnet: p9_errstr2errno: server reported unknown error  [ 90.328139][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1427'. [ 90.341882][ T3423] IPVS: starting estimator thread 0... [ 90.350995][ T7678] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 90.375115][ T7680] netlink: 'syz.8.1427': attribute type 30 has an invalid length. [ 90.387725][ T7043] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.396933][ T7043] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.412181][ T7043] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.426560][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1427'. [ 90.435817][ T7682] IPVS: using max 2496 ests per chain, 124800 per kthread [ 90.443632][ T7043] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.452526][ T7683] netlink: 'syz.8.1427': attribute type 30 has an invalid length. [ 90.511735][ T7685] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 90.553346][ T7685] EXT4-fs (loop8): 1 truncate cleaned up [ 90.559514][ T7685] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.576688][ T7690] netlink: 'syz.2.1430': attribute type 3 has an invalid length. [ 90.587356][ T7690] netlink: 'syz.2.1430': attribute type 1 has an invalid length. [ 90.612876][ T28] audit: type=1326 audit(1771355939.190:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7684 comm="syz.8.1428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca9d58c629 code=0x0 [ 90.632426][ T7690] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1430'. [ 90.753574][ T28] audit: type=1326 audit(1771355939.330:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2245c629 code=0x7ffc0000 [ 90.779678][ T28] audit: type=1326 audit(1771355939.350:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbc2245c629 code=0x7ffc0000 [ 90.807335][ T28] audit: type=1326 audit(1771355939.350:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2245c629 code=0x7ffc0000 [ 91.435919][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.473768][ T7710] set_capacity_and_notify: 1 callbacks suppressed [ 91.473783][ T7710] loop7: detected capacity change from 0 to 1024 [ 91.494366][ T7710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.532667][ T7710] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1440: corrupted xattr block 113: invalid header [ 91.562850][ T7710] EXT4-fs (loop7): Remounting filesystem read-only [ 91.707939][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.017596][ T7731] syzkaller1: entered promiscuous mode [ 92.032694][ T7731] syzkaller1: entered allmulticast mode [ 92.091378][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 92.109360][ T7733] netlink: 'syz.2.1441': attribute type 30 has an invalid length. [ 92.145999][ T2227] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.172345][ T2227] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.186877][ T2227] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.203493][ T2227] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.224612][ T7739] bridge0: entered promiscuous mode [ 92.231796][ T7739] macsec1: entered allmulticast mode [ 92.237724][ T7739] bridge0: entered allmulticast mode [ 92.254498][ T7739] bridge0: port 1(macsec1) entered blocking state [ 92.271678][ T7739] bridge0: port 1(macsec1) entered disabled state [ 92.282854][ T7739] bridge0: left allmulticast mode [ 92.288054][ T7739] bridge0: left promiscuous mode [ 92.301902][ T7743] dummy0: entered promiscuous mode [ 92.307561][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1454'. [ 92.317206][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1453'. [ 92.339020][ T7743] dummy0 (unregistering): left promiscuous mode [ 92.653135][ T7775] tipc: Enabling of bearer rejected, already enabled [ 92.666943][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'. [ 92.706189][ T7775] tipc: Disabling bearer [ 92.721696][ T7781] loop8: detected capacity change from 0 to 1024 [ 92.753179][ T7781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.908731][ T7781] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: comm syz.8.1471: inode #779706732: comm syz.8.1471: iget: illegal inode # [ 92.962898][ T7781] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1471: error while reading EA inode 779706732 err=-117 [ 93.134467][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.195678][ T7814] loop6: detected capacity change from 0 to 7 [ 93.301011][ T7822] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1489'. [ 93.322372][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.329577][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.353346][ T7823] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1489'. [ 93.655848][ T7853] loop5: detected capacity change from 0 to 1024 [ 93.678750][ T7853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.722873][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 93.722886][ T28] audit: type=1400 audit(1771355942.300:950): avc: denied { cpu } for pid=7858 comm="syz.8.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.817304][ T28] audit: type=1400 audit(1771355942.350:951): avc: denied { write } for pid=7852 comm="syz.5.1503" name="file3" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.896804][ T28] audit: type=1400 audit(1771355942.470:952): avc: denied { ioctl } for pid=7869 comm="syz.5.1510" path="socket:[19873]" dev="sockfs" ino=19873 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.074368][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 94.092479][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 94.134029][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1519'. [ 94.150979][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 94.160922][ T7892] netlink: 'syz.6.1519': attribute type 30 has an invalid length. [ 94.211472][ T7900] netlink: 'syz.6.1519': attribute type 30 has an invalid length. [ 94.327671][ T7906] netlink: 'syz.2.1525': attribute type 6 has an invalid length. [ 94.437506][ T7917] loop5: detected capacity change from 0 to 512 [ 94.472956][ T7917] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1531: inode has both inline data and extents flags [ 94.486278][ T7917] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.486986][ T7917] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1531: couldn't read orphan inode 15 (err -117) [ 94.496145][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 94.496165][ C1] EXT4-fs (loop5): initial error at time 1771355943: ext4_orphan_get:1391: inode 15 [ 94.496190][ C1] EXT4-fs (loop5): last error at time 1771355943: ext4_orphan_get:1391: inode 15 [ 94.535002][ T7917] loop5: lost filesystem error report for type 5 error -117 [ 94.602193][ T7929] loop5: detected capacity change from 0 to 128 [ 94.700057][ T7936] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 94.788567][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.814625][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.818437][ T7945] loop7: detected capacity change from 0 to 1024 [ 94.848583][ T7945] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.863929][ T7945] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 94.887522][ T7945] EXT4-fs (loop7): orphan cleanup on readonly fs [ 94.897521][ T7945] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.1544: Invalid inode table block 0 in block_group 0 [ 94.910298][ T7945] loop7: lost filesystem error report for type 5 error -117 [ 94.910407][ T7945] EXT4-fs (loop7): Remounting filesystem read-only [ 94.917814][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 94.917831][ C0] EXT4-fs (loop7): initial error at time 1771355943: __ext4_get_inode_loc:4782 [ 94.917869][ C0] EXT4-fs (loop7): last error at time 1771355943: __ext4_get_inode_loc:4782 [ 94.949669][ T7945] Quota error (device loop7): write_blk: dquota write failed [ 94.958080][ T7945] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 94.968285][ T7945] EXT4-fs (loop7): 1 truncate cleaned up [ 95.068058][ T7967] loop7: detected capacity change from 0 to 1024 [ 95.081540][ T7953] loop8: detected capacity change from 0 to 8192 [ 95.083408][ T7967] EXT4-fs: Ignoring removed orlov option [ 95.171857][ T7973] loop6: detected capacity change from 0 to 128 [ 95.298695][ T7979] netlink: 'syz.6.1556': attribute type 29 has an invalid length. [ 95.311925][ T7979] netlink: 'syz.6.1556': attribute type 29 has an invalid length. [ 95.369483][ T7987] EXT4-fs (loop6): 1 orphan inode deleted [ 95.402109][ T28] audit: type=1400 audit(1771355943.970:953): avc: denied { mounton } for pid=7989 comm="syz.6.1561" path="/proc/650/task" dev="proc" ino=20043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.579359][ T8009] FAT-fs (loop5): Directory bread(block 64) failed [ 95.586471][ T8009] FAT-fs (loop5): Directory bread(block 65) failed [ 95.595543][ T8009] FAT-fs (loop5): Directory bread(block 66) failed [ 95.602563][ T8009] FAT-fs (loop5): Directory bread(block 67) failed [ 95.609209][ T8009] FAT-fs (loop5): Directory bread(block 68) failed [ 95.616450][ T8009] FAT-fs (loop5): Directory bread(block 69) failed [ 95.624867][ T8009] FAT-fs (loop5): Directory bread(block 70) failed [ 95.631630][ T8009] FAT-fs (loop5): Directory bread(block 71) failed [ 95.638468][ T8009] FAT-fs (loop5): Directory bread(block 72) failed [ 95.645124][ T8009] FAT-fs (loop5): Directory bread(block 73) failed [ 95.691142][ T8014] ip6erspan0: entered allmulticast mode [ 95.769811][ T28] audit: type=1400 audit(1771355944.340:954): avc: denied { create } for pid=8021 comm="syz.6.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 95.888370][ T8024] EXT4-fs: Ignoring removed nobh option [ 95.936522][ T8024] EXT4-fs (loop7): orphan cleanup on readonly fs [ 95.969911][ T8024] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.1577: EA inode hash validation failed [ 96.001714][ T8024] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.037693][ T8024] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.1577: corrupted inode contents [ 96.075534][ T8024] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.077968][ T8024] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.1577: mark_inode_dirty error [ 96.088125][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 96.088275][ C1] EXT4-fs (loop7): initial error at time 1771355944: ext4_do_update_inode:5569: inode 15 [ 96.088486][ C1] EXT4-fs (loop7): last error at time 1771355944: ext4_do_update_inode:5569: inode 15 [ 96.135256][ T8024] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.136674][ T8024] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.1577: corrupted inode contents [ 96.193448][ T8024] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.194864][ T8024] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.1577: mark_inode_dirty error [ 96.223831][ T8049] syzkaller0: entered promiscuous mode [ 96.229299][ T8049] syzkaller0: entered allmulticast mode [ 96.235235][ T8024] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.236128][ T8024] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.1577: mark inode dirty (error -117) [ 96.262907][ T8024] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.265319][ T8024] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 96.285068][ T8024] EXT4-fs (loop7): 1 orphan inode deleted [ 96.359624][ T8058] atomic_op ffff888142447128 conn xmit_atomic 0000000000000000 [ 96.482971][ T8073] set_capacity_and_notify: 4 callbacks suppressed [ 96.482989][ T8073] loop7: detected capacity change from 0 to 256 [ 96.599736][ T8073] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 1024) [ 96.608342][ T8073] FAT-fs (loop7): Filesystem has been set read-only [ 96.614497][ T8086] bridge1: entered promiscuous mode [ 96.623809][ T8086] bridge1: entered allmulticast mode [ 96.630507][ T8086] team0: Port device bridge1 added [ 96.657571][ T8090] loop6: detected capacity change from 0 to 256 [ 96.666528][ T8086] bridge0: port 3(team0) entered blocking state [ 96.672907][ T8086] bridge0: port 3(team0) entered disabled state [ 96.679349][ T8086] team0: entered allmulticast mode [ 96.684603][ T8086] team_slave_0: entered allmulticast mode [ 96.690395][ T8086] team_slave_1: entered allmulticast mode [ 96.708662][ T8086] team0: entered promiscuous mode [ 96.714799][ T8088] loop5: detected capacity change from 0 to 8192 [ 96.718543][ T8086] team_slave_0: entered promiscuous mode [ 96.737851][ T8086] team_slave_1: entered promiscuous mode [ 96.745386][ T8086] bridge0: port 3(team0) entered blocking state [ 96.751684][ T8086] bridge0: port 3(team0) entered forwarding state [ 96.760360][ T8100] loop6: detected capacity change from 0 to 256 [ 96.767738][ T3305] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 96.777099][ T28] audit: type=1400 audit(1771355945.340:955): avc: denied { connect } for pid=8097 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 96.778477][ T3305] loop5: partition table partially beyond EOD, truncated [ 96.825564][ T3305] loop5: p1 start 30976 is beyond EOD, truncated [ 96.831910][ T3305] loop5: p2 size 16128 extends beyond EOD, truncated [ 96.839692][ T8100] FAT-fs (loop6): bogus number of FAT sectors [ 96.846073][ T8100] FAT-fs (loop6): Can't find a valid FAT filesystem [ 96.853780][ T3305] loop5: p3 start 327168 is beyond EOD, truncated [ 96.863371][ T3305] loop5: p5 start 30976 is beyond EOD, truncated [ 96.869925][ T3305] loop5: p6 size 16128 extends beyond EOD, truncated [ 96.910188][ T8113] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.933254][ T8088] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 96.938473][ T8088] loop5: partition table partially beyond EOD, truncated [ 96.982312][ T8088] loop5: p1 start 30976 is beyond EOD, truncated [ 96.988722][ T8088] loop5: p2 size 16128 extends beyond EOD, truncated [ 96.996241][ T8088] loop5: p3 start 327168 is beyond EOD, truncated [ 97.003720][ T8088] loop5: p5 start 30976 is beyond EOD, truncated [ 97.010068][ T8088] loop5: p6 size 16128 extends beyond EOD, truncated [ 97.098957][ T6406] udevd[6406]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 97.102032][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 97.110279][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 97.135830][ T8128] __nla_validate_parse: 16 callbacks suppressed [ 97.135847][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1622'. [ 97.161021][ T8128] bond0: ARP target 8.4.0.0 is already present [ 97.170516][ T8128] bond0: option arp_ip_target: invalid value (1032) [ 97.172488][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 97.178614][ T6406] udevd[6406]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 97.189967][ T8132] loop5: detected capacity change from 0 to 512 [ 97.217770][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1625'. [ 97.228112][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 97.241720][ T8132] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.270092][ T28] audit: type=1400 audit(1771355945.840:956): avc: denied { read open } for pid=8136 comm="syz.6.1626" path="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.389786][ T8132] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.455268][ T8146] loop6: detected capacity change from 0 to 128 [ 97.464272][ T8144] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1629'. [ 97.474235][ T8146] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.615045][ T28] audit: type=1400 audit(1771355946.190:957): avc: denied { name_bind } for pid=8156 comm="syz.2.1634" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 97.712890][ T8169] loop6: detected capacity change from 0 to 512 [ 97.733772][ T8169] EXT4-fs: Mount option(s) incompatible with ext2 [ 97.783879][ T8178] loop8: detected capacity change from 0 to 256 [ 97.796027][ T8178] FAT-fs (loop8): bogus number of FAT sectors [ 97.832160][ T8178] FAT-fs (loop8): Can't find a valid FAT filesystem [ 97.862575][ T8184] loop6: detected capacity change from 0 to 1024 [ 97.880777][ T8184] EXT4-fs: inline encryption not supported [ 97.906075][ T8184] EXT4-fs mount: 15 callbacks suppressed [ 97.906087][ T8184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.013535][ T8193] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1650'. [ 98.074300][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.215122][ T8207] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1656'. [ 98.409937][ T8219] loop7: detected capacity change from 0 to 256 [ 98.443739][ T8219] FAT-fs (loop7): bogus number of FAT sectors [ 98.449946][ T8219] FAT-fs (loop7): Can't find a valid FAT filesystem [ 99.130726][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 99.130739][ T28] audit: type=1400 audit(1771355947.700:969): avc: denied { sys_module } for pid=8268 comm="syz.2.1682" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.674960][ T8311] netlink: 'syz.2.1700': attribute type 10 has an invalid length. [ 99.686044][ T8311] team0: Port device vxcan1 added [ 99.924843][ T8327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.937829][ T8327] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.647463][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb9800: rx timeout, send abort [ 100.655798][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811acb9800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 100.887653][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.091384][ T8374] EXT4-fs: Ignoring removed nobh option [ 101.117602][ T8374] EXT4-fs (loop8): orphan cleanup on readonly fs [ 101.131982][ T8374] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.1725: EA inode hash validation failed [ 101.133844][ T8389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'. [ 101.147461][ T8374] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.1725: corrupted inode contents [ 101.170492][ T8374] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.172111][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 101.182220][ T8374] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.1725: mark_inode_dirty error [ 101.187676][ C0] EXT4-fs (loop8): initial error at time 1771355949: ext4_do_update_inode:5569: inode 15 [ 101.187707][ C0] EXT4-fs (loop8): last error at time 1771355949: ext4_do_update_inode:5569: inode 15 [ 101.223650][ T8374] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.224775][ T8374] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.1725: corrupted inode contents [ 101.260823][ T8374] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.261470][ T8374] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.1725: mark_inode_dirty error [ 101.290440][ T8374] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.293355][ T8374] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.1725: mark inode dirty (error -117) [ 101.316858][ T8374] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.318032][ T8374] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 101.359112][ T3389] kernel read not supported for file /vcs (pid: 3389 comm: kworker/1:3) [ 101.368473][ T8374] EXT4-fs (loop8): 1 orphan inode deleted [ 101.380939][ T8374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.434548][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.735462][ T28] audit: type=1400 audit(1771355950.310:970): avc: denied { create } for pid=8427 comm="syz.8.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.759922][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1748'. [ 101.798633][ T8431] set_capacity_and_notify: 2 callbacks suppressed [ 101.798651][ T8431] loop7: detected capacity change from 0 to 2048 [ 101.856036][ T8431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.933197][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb8800: rx timeout, send abort [ 101.941571][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811acb8800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.021396][ T7041] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 102.040714][ T7041] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1498 with error 28 [ 102.078776][ T7041] EXT4-fs (loop7): This should not happen!! Data will be lost [ 102.078776][ T7041] [ 102.088823][ T7041] EXT4-fs (loop7): Total free blocks count 0 [ 102.101699][ T8441] loop6: detected capacity change from 0 to 512 [ 102.109439][ T7041] EXT4-fs (loop7): Free/Dirty block details [ 102.115606][ T7041] EXT4-fs (loop7): free_blocks=2415919504 [ 102.122288][ T7041] EXT4-fs (loop7): dirty_blocks=1504 [ 102.127655][ T7041] EXT4-fs (loop7): Block reservation details [ 102.139078][ T8441] EXT4-fs: Ignoring removed nobh option [ 102.148865][ T7041] EXT4-fs (loop7): i_reserved_data_blocks=94 [ 102.172277][ T8441] EXT4-fs (loop6): orphan cleanup on readonly fs [ 102.188474][ T8441] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.1752: EA inode hash validation failed [ 102.205161][ T8441] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1752: corrupted inode contents [ 102.218201][ T8441] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.219191][ T8441] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.1752: mark_inode_dirty error [ 102.228903][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 102.228920][ C0] EXT4-fs (loop6): initial error at time 1771355950: ext4_do_update_inode:5569: inode 15 [ 102.228949][ C0] EXT4-fs (loop6): last error at time 1771355950: ext4_do_update_inode:5569: inode 15 [ 102.234514][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.242498][ T8441] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.281866][ T8441] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1752: corrupted inode contents [ 102.304771][ T8441] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.305627][ T8441] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.1752: mark_inode_dirty error [ 102.329011][ T8441] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.329912][ T8441] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.1752: mark inode dirty (error -117) [ 102.353089][ T8441] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.353884][ T8441] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 102.375186][ T8441] EXT4-fs (loop6): 1 orphan inode deleted [ 102.385424][ T8441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.420859][ T4105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.441487][ T28] audit: type=1400 audit(1771355951.010:971): avc: denied { getopt } for pid=8448 comm="syz.2.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.487056][ T8455] netlink: 'syz.6.1755': attribute type 10 has an invalid length. [ 102.517238][ T8455] team0: Device vxcan1 is of different type [ 103.339118][ T28] audit: type=1400 audit(1771355951.900:972): avc: denied { unmount } for pid=3838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 103.734284][ T28] audit: type=1400 audit(1771355952.300:973): avc: denied { read } for pid=8515 comm="syz.7.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.046889][ T8537] loop7: detected capacity change from 0 to 512 [ 104.047075][ T8526] loop5: detected capacity change from 0 to 512 [ 104.107889][ T8526] EXT4-fs: Ignoring removed nobh option [ 104.170273][ T8526] EXT4-fs (loop5): orphan cleanup on readonly fs [ 104.197678][ T8526] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1788: EA inode hash validation failed [ 104.222793][ T8526] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1788: corrupted inode contents [ 104.275202][ T8526] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.1788: mark_inode_dirty error [ 104.287042][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 104.287192][ C0] EXT4-fs (loop5): initial error at time 1771355952: ext4_do_update_inode:5569: inode 15 [ 104.287429][ C0] EXT4-fs (loop5): last error at time 1771355952: ext4_do_update_inode:5569: inode 15 [ 104.336372][ T8537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.350509][ T8526] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1788: corrupted inode contents [ 104.385712][ T8526] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.1788: mark_inode_dirty error [ 104.412177][ T8537] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.477273][ T8526] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.1788: mark inode dirty (error -117) [ 104.520438][ T8526] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 104.557700][ T8526] EXT4-fs (loop5): 1 orphan inode deleted [ 104.599643][ T8526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.731339][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.774261][ T8568] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1803'. [ 104.932055][ T8577] loop8: detected capacity change from 0 to 2048 [ 104.971772][ T8577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.221354][ T7041] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 105.248716][ T8594] loop6: detected capacity change from 0 to 128 [ 105.257994][ T7041] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 262 with error 28 [ 105.280696][ T7041] EXT4-fs (loop8): This should not happen!! Data will be lost [ 105.280696][ T7041] [ 105.314565][ T7041] EXT4-fs (loop8): Total free blocks count 0 [ 105.320570][ T7041] EXT4-fs (loop8): Free/Dirty block details [ 105.332454][ T7041] EXT4-fs (loop8): free_blocks=2415919504 [ 105.342138][ T7041] EXT4-fs (loop8): dirty_blocks=272 [ 105.347348][ T7041] EXT4-fs (loop8): Block reservation details [ 105.359430][ T7041] EXT4-fs (loop8): i_reserved_data_blocks=17 [ 105.400634][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.435518][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.468254][ T3397] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 105.496312][ T3397] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.535967][ T8612] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 105.546453][ T8612] SELinux: failed to load policy [ 105.646490][ T28] audit: type=1400 audit(1771355954.220:974): avc: denied { bind } for pid=8621 comm="syz.7.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.701522][ T28] audit: type=1400 audit(1771355954.220:975): avc: denied { name_bind } for pid=8621 comm="syz.7.1822" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 105.769874][ T28] audit: type=1400 audit(1771355954.220:976): avc: denied { node_bind } for pid=8621 comm="syz.7.1822" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 105.905594][ T28] audit: type=1400 audit(1771355954.480:977): avc: denied { watch watch_reads } for pid=8646 comm="syz.5.1832" path="/312/file1" dev="tmpfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.023044][ T8659] loop5: detected capacity change from 0 to 8192 [ 106.082712][ T3305] loop5: p1 p3 [ 106.090051][ T3305] loop5: p3 start 986112 is beyond EOD, truncated [ 106.110721][ T8659] loop5: p1 p3 [ 106.114817][ T8659] loop5: p3 start 986112 is beyond EOD, truncated [ 106.224435][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 106.259171][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 106.551575][ T8692] loop7: detected capacity change from 0 to 512 [ 106.568961][ T8692] EXT4-fs: Ignoring removed oldalloc option [ 106.618922][ T8692] EXT4-fs (loop7): 1 truncate cleaned up [ 106.638433][ T8696] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.638869][ T8692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.826885][ T4597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.125975][ T28] audit: type=1400 audit(1771355955.700:978): avc: denied { create } for pid=8717 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.165952][ T8720] netlink: 'syz.6.1859': attribute type 2 has an invalid length. [ 107.206943][ T8720] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1859'. [ 107.420966][ T28] audit: type=1400 audit(1771355955.990:979): avc: denied { remount } for pid=8742 comm="syz.2.1870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.462565][ T8688] Process accounting paused [ 107.619944][ T8759] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 107.632587][ T8759] syzkaller1: Linktype set failed because interface is up [ 107.727679][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1876'. [ 107.779636][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1876'. [ 108.454462][ T8784] loop8: detected capacity change from 0 to 256 [ 108.471702][ T8784] FAT-fs (loop8): Directory bread(block 64) failed [ 108.478725][ T8784] FAT-fs (loop8): Directory bread(block 65) failed [ 108.485825][ T8784] FAT-fs (loop8): Directory bread(block 66) failed [ 108.492443][ T8784] FAT-fs (loop8): Directory bread(block 67) failed [ 108.498990][ T8784] FAT-fs (loop8): Directory bread(block 68) failed [ 108.505587][ T8784] FAT-fs (loop8): Directory bread(block 69) failed [ 108.512168][ T8784] FAT-fs (loop8): Directory bread(block 70) failed [ 108.518662][ T8784] FAT-fs (loop8): Directory bread(block 71) failed [ 108.525188][ T8784] FAT-fs (loop8): Directory bread(block 72) failed [ 108.531725][ T8784] FAT-fs (loop8): Directory bread(block 73) failed [ 108.549463][ T8784] syz.8.1887: attempt to access beyond end of device [ 108.549463][ T8784] loop8: rw=8388608, sector=1736, nr_sectors = 4 limit=256 [ 108.564848][ T8784] syz.8.1887: attempt to access beyond end of device [ 108.564848][ T8784] loop8: rw=8388608, sector=1736, nr_sectors = 4 limit=256 [ 108.578623][ T8784] Buffer I/O error on dev loop8, logical block 434, async page read [ 108.586697][ T8784] syz.8.1887: attempt to access beyond end of device [ 108.586697][ T8784] loop8: rw=8388608, sector=1740, nr_sectors = 4 limit=256 [ 108.600548][ T8784] Buffer I/O error on dev loop8, logical block 435, async page read [ 108.708917][ T8792] syzkaller0: entered promiscuous mode [ 108.718539][ T8792] syzkaller0: refused to change device tx_queue_len [ 108.993618][ T8813] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 109.000220][ T8813] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.023792][ T8813] vhci_hcd vhci_hcd.0: Device attached [ 109.057827][ T8815] vhci_hcd: connection closed [ 109.058171][ T7037] vhci_hcd vhci_hcd.8: stop threads [ 109.069310][ T7037] vhci_hcd vhci_hcd.8: release socket [ 109.081750][ T7037] vhci_hcd vhci_hcd.8: disconnect device [ 109.126822][ T8819] loop7: detected capacity change from 0 to 164 [ 109.149927][ T8821] loop5: detected capacity change from 0 to 512 [ 109.185365][ T8821] EXT4-fs: Ignoring removed oldalloc option [ 109.205841][ T8821] EXT4-fs (loop5): 1 truncate cleaned up [ 109.232196][ T8821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.266003][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.250968][ T8878] loop5: detected capacity change from 0 to 2048 [ 110.285837][ T8878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.335182][ T3838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.517875][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1927'. [ 110.636616][ T28] audit: type=1400 audit(1771355959.210:980): avc: denied { connect } for pid=8892 comm="syz.5.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.713921][ T8899] netlink: 'syz.8.1933': attribute type 12 has an invalid length. [ 110.721765][ T8899] netlink: 'syz.8.1933': attribute type 29 has an invalid length. [ 110.772137][ T8899] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1933'. [ 110.794339][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1935'. [ 110.803423][ T8899] netlink: 'syz.8.1933': attribute type 2 has an invalid length. [ 110.822804][ T8899] netlink: 'syz.8.1933': attribute type 3 has an invalid length. [ 110.836063][ T8899] netlink: 15 bytes leftover after parsing attributes in process `syz.8.1933'. [ 110.855403][ T8902] bond_slave_0: entered promiscuous mode [ 110.861147][ T8902] bond_slave_1: entered promiscuous mode [ 110.884485][ T8907] loop5: detected capacity change from 0 to 128 [ 110.886385][ T8902] macvlan4: entered promiscuous mode [ 110.913997][ T8902] bond0: entered promiscuous mode [ 110.929868][ T8902] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 110.971532][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1940'. [ 111.012226][ T28] audit: type=1400 audit(1771355959.580:981): avc: denied { write } for pid=8913 comm="syz.5.1941" path="socket:[22491]" dev="sockfs" ino=22491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.065979][ T28] audit: type=1400 audit(1771355959.640:982): avc: denied { read } for pid=8915 comm="syz.8.1942" path="socket:[22908]" dev="sockfs" ino=22908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.432024][ T8929] loop8: detected capacity change from 0 to 512 [ 111.503077][ T8929] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.632133][ T28] audit: type=1400 audit(1771355960.190:983): avc: denied { write } for pid=8931 comm="syz.5.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.786881][ T8857] syz.6.1918 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 111.825489][ T8857] CPU: 0 UID: 0 PID: 8857 Comm: syz.6.1918 Tainted: G W syzkaller #0 PREEMPT(full) [ 111.825564][ T8857] Tainted: [W]=WARN [ 111.825569][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.825580][ T8857] Call Trace: [ 111.825587][ T8857] [ 111.825594][ T8857] __dump_stack+0x1d/0x30 [ 111.825618][ T8857] dump_stack_lvl+0x95/0xd0 [ 111.825663][ T8857] dump_stack+0x15/0x1b [ 111.825683][ T8857] dump_header+0x80/0x240 [ 111.825704][ T8857] oom_kill_process+0x295/0x350 [ 111.825732][ T8857] out_of_memory+0x97d/0xb80 [ 111.825801][ T8857] try_charge_memcg+0x62e/0xa10 [ 111.825832][ T8857] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 111.825854][ T8857] __swap_cache_prepare_and_add+0x386/0x530 [ 111.825909][ T8857] swap_cache_alloc_folio+0xa2/0x120 [ 111.825930][ T8857] swap_cluster_readahead+0x26e/0x3d0 [ 111.825956][ T8857] swapin_readahead+0xde/0x840 [ 111.825998][ T8857] ? _raw_spin_unlock+0x9/0x30 [ 111.826018][ T8857] ? swap_put_entries_cluster+0x385/0x3a0 [ 111.826097][ T8857] ? swap_put_entries_cluster+0xe1/0x3a0 [ 111.826122][ T8857] ? __rcu_read_unlock+0x4e/0x70 [ 111.826138][ T8857] ? swap_cache_get_folio+0x26f/0x280 [ 111.826223][ T8857] do_swap_page+0x309/0x2210 [ 111.826243][ T8857] ? css_rstat_updated+0xbb/0x280 [ 111.826290][ T8857] ? __rcu_read_lock+0x36/0x50 [ 111.826308][ T8857] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 111.826331][ T8857] handle_mm_fault+0xb40/0x3020 [ 111.826356][ T8857] ? vma_start_read+0x1c7/0x2c0 [ 111.826376][ T8857] do_user_addr_fault+0x62f/0x1050 [ 111.826463][ T8857] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 111.826488][ T8857] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 111.826540][ T8857] ? trace_page_fault_user+0x1f/0xe0 [ 111.826562][ T8857] exc_page_fault+0x62/0xa0 [ 111.826728][ T8857] asm_exc_page_fault+0x26/0x30 [ 111.826772][ T8857] RIP: 0033:0x7f6fa3c7077f [ 111.826788][ T8857] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 92 18 3b 00 89 f0 4c 8d 05 89 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 111.826834][ T8857] RSP: 002b:00007fffcc4346e8 EFLAGS: 00010206 [ 111.826849][ T8857] RAX: 0000000084999bc0 RBX: ffffffff84999bc0 RCX: 0000001b2d71e798 [ 111.826862][ T8857] RDX: 0000000000001bc0 RSI: ffffffff84999bc0 RDI: 0000000000000002 [ 111.826880][ T8857] RBP: 0000000000000032 R08: 00007f6fa4020000 R09: 00007f6fa4022000 [ 111.826945][ T8857] R10: 0000000084999bc4 R11: 0000000000000002 R12: 00007f6fa4036038 [ 111.826956][ T8857] R13: 0000000000000032 R14: ffffffff84999372 R15: 00007f6fa4b65720 [ 111.826968][ T8857] ? netlink_autobind+0x12/0x160 [ 111.827052][ T8857] ? netlink_seq_start+0xb0/0x1d0 [ 111.827081][ T8857] ? netlink_seq_start+0xb0/0x1d0 [ 111.827123][ T8857] [ 111.827130][ T8857] memory: usage 307200kB, limit 307200kB, failcnt 508 [ 111.971337][ T8945] loop8: detected capacity change from 0 to 1024 [ 111.992108][ T8857] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 112.116676][ T8945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 112.126012][ T8857] kmem: usage 301848kB, limit 9007199254740988kB, failcnt 0 [ 112.126031][ T8857] Memory cgroup stats for /syz6: [ 112.126223][ T8857] cache 0 [ 112.133873][ T8945] System zones: [ 112.138816][ T8857] rss 5464064 [ 112.141596][ T8945] 0-1 [ 112.145064][ T8857] shmem 0 [ 112.148860][ T8945] , 3-36 [ 112.151054][ T8857] mapped_file 0 [ 112.154555][ T8945] [ 112.157139][ T8857] dirty 0 [ 112.161931][ T8945] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1954: bad orphan inode 134217728 [ 112.162655][ T8857] writeback 0 [ 112.165812][ T8945] loop8: lost filesystem error report for type 5 error -117 [ 112.176162][ T8857] workingset_refault_anon 176 [ 112.176174][ T8857] workingset_refault_file 256 [ 112.180553][ T8945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.188284][ T8857] swap 561152 [ 112.215050][ T8857] swapcached 2822144 [ 112.219459][ T8857] pgpgin 86433 [ 112.226607][ T8857] pgpgout 85095 [ 112.230115][ T8857] pgfault 93746 [ 112.239969][ T8857] pgmajfault 94 [ 112.243803][ T8857] inactive_anon 0 [ 112.247545][ T8857] active_anon 0 [ 112.251205][ T8857] inactive_file 5480448 [ 112.255625][ T8857] active_file 0 [ 112.259322][ T8857] unevictable 0 [ 112.267181][ T8857] hierarchical_memory_limit 314572800 [ 112.272875][ T8857] hierarchical_memsw_limit 9223372036854771712 [ 112.280364][ T8857] total_cache 0 [ 112.284072][ T8857] total_rss 5464064 [ 112.287921][ T8857] total_shmem 0 [ 112.291478][ T8857] total_mapped_file 0 [ 112.297226][ T8857] total_dirty 0 [ 112.300754][ T8857] total_writeback 0 [ 112.304987][ T8857] total_workingset_refault_anon 176 [ 112.310240][ T8857] total_workingset_refault_file 256 [ 112.316082][ T8857] total_swap 561152 [ 112.329001][ T8857] total_swapcached 2822144 [ 112.333906][ T8857] total_pgpgin 86433 [ 112.337845][ T8857] total_pgpgout 85095 [ 112.341980][ T8857] total_pgfault 93746 [ 112.346520][ T8857] total_pgmajfault 94 [ 112.350569][ T8857] total_inactive_anon 0 [ 112.355018][ T8857] total_active_anon 0 [ 112.359216][ T8857] total_inactive_file 5480448 [ 112.364233][ T8857] total_active_file 0 [ 112.368311][ T8857] total_unevictable 0 [ 112.372662][ T8857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1918,pid=8857,uid=0 [ 112.387545][ T8857] Memory cgroup out of memory: Killed process 8857 (syz.6.1918) total-vm:96340kB, anon-rss:6560kB, file-rss:22112kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 112.763497][ T8945] ================================================================== [ 112.771615][ T8945] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 112.779604][ T8945] [ 112.781923][ T8945] write to 0xffff88811a897b6c of 4 bytes by task 7037 on cpu 0: [ 112.789555][ T8945] xas_set_mark+0x12b/0x140 [ 112.794065][ T8945] __folio_start_writeback+0x17b/0x370 [ 112.799532][ T8945] ext4_bio_write_folio+0x5ad/0x9f0 [ 112.804741][ T8945] mpage_process_page_bufs+0x4a1/0x620 [ 112.810204][ T8945] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 112.816016][ T8945] ext4_do_writepages+0xa07/0x2840 [ 112.821145][ T8945] ext4_writepages+0x18f/0x320 [ 112.825905][ T8945] do_writepages+0x1c6/0x310 [ 112.830498][ T8945] __writeback_single_inode+0x80/0x860 [ 112.835965][ T8945] writeback_sb_inodes+0x522/0xbc0 [ 112.841081][ T8945] __writeback_inodes_wb+0x94/0x1a0 [ 112.846284][ T8945] wb_writeback+0x272/0x5d0 [ 112.850797][ T8945] wb_workfn+0x4fd/0x970 [ 112.855041][ T8945] process_scheduled_works+0x4de/0x9e0 [ 112.860522][ T8945] worker_thread+0x581/0x770 [ 112.865120][ T8945] kthread+0x22a/0x280 [ 112.869189][ T8945] ret_from_fork+0x150/0x360 [ 112.873798][ T8945] ret_from_fork_asm+0x1a/0x30 [ 112.878577][ T8945] [ 112.880900][ T8945] read to 0xffff88811a897b6c of 4 bytes by task 8945 on cpu 1: [ 112.888447][ T8945] file_write_and_wait_range+0x130/0x2f0 [ 112.894085][ T8945] generic_buffers_fsync_noflush+0x45/0x130 [ 112.899978][ T8945] ext4_sync_file+0x1aa/0x6b0 [ 112.904671][ T8945] vfs_fsync_range+0xc5/0xe0 [ 112.909258][ T8945] ext4_buffered_write_iter+0x34f/0x3c0 [ 112.914810][ T8945] ext4_file_write_iter+0x380/0xfa0 [ 112.920006][ T8945] iter_file_splice_write+0x6bc/0xa80 [ 112.925381][ T8945] direct_splice_actor+0x156/0x2a0 [ 112.930499][ T8945] splice_direct_to_actor+0x311/0x670 [ 112.935878][ T8945] do_splice_direct+0x119/0x1a0 [ 112.940736][ T8945] do_sendfile+0x382/0x650 [ 112.945162][ T8945] __x64_sys_sendfile64+0x105/0x150 [ 112.950354][ T8945] x64_sys_call+0x2dc4/0x3020 [ 112.955048][ T8945] do_syscall_64+0x12c/0x370 [ 112.959666][ T8945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.965566][ T8945] [ 112.967881][ T8945] value changed: 0x02000021 -> 0x04000021 [ 112.973589][ T8945] [ 112.975905][ T8945] Reported by Kernel Concurrency Sanitizer on: [ 112.982047][ T8945] CPU: 1 UID: 0 PID: 8945 Comm: syz.8.1954 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.992911][ T8945] Tainted: [W]=WARN [ 112.996712][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.006764][ T8945] ================================================================== [ 113.089853][ T6386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.811701][ T8940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512