last executing test programs: 5m4.353943951s ago: executing program 32 (id=465): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000a40)="e3008067", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001240)=[{&(0x7f0000001740)="9b5937", 0x3}], 0x1) 4m11.525179096s ago: executing program 33 (id=1522): creat(&(0x7f0000000040)='./bus\x00', 0xa8) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m59.199395348s ago: executing program 34 (id=2338): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xff, 0xfd, 0x21, 0x40, 0xc52, 0x2431, 0xfc33, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xa5, 0x6, 0x60, 0x6}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 2m6.721596926s ago: executing program 7 (id=5849): r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000001340)='./bus\x00', 0x6000481) finit_module(r0, 0x0, 0x0) 2m6.637438941s ago: executing program 7 (id=5853): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x24d38f98, 0x5, 0x5}, &(0x7f00000000c0)=0x10) 2m6.523090118s ago: executing program 7 (id=5858): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) vmsplice(r0, 0x0, 0x0, 0x1) 2m6.045999616s ago: executing program 7 (id=5863): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m5.799225951s ago: executing program 7 (id=5869): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="0f", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 2m5.067572074s ago: executing program 7 (id=5884): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2}, 0x8) 2m4.999193558s ago: executing program 35 (id=5884): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2}, 0x8) 35.300175402s ago: executing program 0 (id=7864): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x7}, 0x94) 34.729762126s ago: executing program 0 (id=7880): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 34.533634747s ago: executing program 0 (id=7888): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 34.406954064s ago: executing program 0 (id=7893): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 34.179021698s ago: executing program 0 (id=7900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x491f}]}]}], {0x14}}, 0x68}}, 0x2000c044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 33.743073123s ago: executing program 0 (id=7908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000038000000050a05000000000000000000050000060c000240000000000000000108000a400000000304000c000900010073797a300000000014000000110001"], 0xac}}, 0x0) close(0x3) 33.709880055s ago: executing program 36 (id=7908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000038000000050a05000000000000000000050000060c000240000000000000000108000a400000000304000c000900010073797a300000000014000000110001"], 0xac}}, 0x0) close(0x3) 31.167320944s ago: executing program 5 (id=7950): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000000)) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x9e691000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 30.933844758s ago: executing program 5 (id=7953): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x207) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 30.803902525s ago: executing program 5 (id=7956): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0xa, @empty, 0x200}}, 0xfffe, 0x3}, 0x90) 30.508954413s ago: executing program 5 (id=7960): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x40002, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 30.291662626s ago: executing program 5 (id=7963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044800) 30.054563709s ago: executing program 5 (id=7967): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 30.05439512s ago: executing program 37 (id=7967): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 22.505527892s ago: executing program 8 (id=8098): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x8, 0x1, 0xc, 0x9, 0x4, 0x6, 0x3, 0x22, 0x1, 0x39, 0x80, 0x40, 0x7, 0x5}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1}, &(0x7f0000000300)=0x8) 22.36674221s ago: executing program 8 (id=8100): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r0, 0x0, &(0x7f0000000100)) 22.288783554s ago: executing program 8 (id=8105): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f00000000c0), 0x5, 0x4dd, &(0x7f0000000740)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14K3xUbSot1NGtsGkVpB9Kmg1vcYk00I2WRDdlObUDTFDyCIqOCTT74IfgBB+hFEKOi7aFFEW33wQTuysxPbtLtJJGnWu/n94HTOmTM7/3Om2bM7O4eZAE6tixFxOyKGIuJKRJSL9WmRZovU3u7Z0wfz7ZRElt39axJJsW53X+3ycESci4idiBiJiK99OeKbyetxm1vbK3P1em2jKFdbq+vV5tb21eXVuaXaUm1tenrqxszNmeszk1nhSP08HxG3vvjkh9/72Zdu/erT3/r97J8vf7vdrM99tNPuiJg/UoAeOvsu5cdiV/sYbbyJYH0wVPSn1O+GAABwKOMRcSkiPpF//y/HUP5tDgAAABgk2edH419JRAYAAAAMrDQiRiNJK8V839FI00qlM4f3I3E2rTearU8tNjbXFtp1EWNRSheX67XJYq7wWJSSdnkqz78oX3ulPB0R70bED8pn8nJlvlFf6PePHwAAAHBKnLuw9/z/H+U0zwMAAAADZqxnAQAAABgUTvkBAABg8Dn/BwAAgIH2lTt32inbfY73wr2tzZXGvasLteZKZXVzvjLf2FivLDUaS/k9+1YP2l+90Vj/TKxt3q+2as1Wtbm1Pbva2FxrzS7veQQ2AAAAcILevfDod0lE7Hz2TJ6iuA8gwB5/7HcDgOM01O8GAH0z3O8GAH1TOnALIwQMuuSA+p6Td359/G0BAADejImPvX79/62i7uDfBoAPMnN9AOD0cXUPTq+SGYBw6o13Fm/3qj/69f8s+58bBQAAHKvRPCVppbgWOBppWqlEvJM/FqCULC7Xa5MR8aGI+G259Ha7PJW/MjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADAQItI/5Tkd/OPmCiPj776+8BbyT/L8aQo/OTuj+7PtVobU+31fyvn9RHR+nGx/lrmkQAAAADwf6Bznl4sp/rdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzbOnD+Z300nG/csXImKsW/zhGMmXI1GKiLN/T2L4pdclETF0DPF3HkbEe93iJ/E8y7KxohXd4p95w/HH8kPTPX4aEeeOIT6cZo/a48/tbu+/NC7my+7vv+EiHVXv8S/97/g31GP8eeeQMc4//kW1Z/yHEeeHu48/u/GTHvEvHTL+N76+vd2rLvtpxETXz59kT6xqa3W92tzavrq8OrdUW6qtTU9P3Zi5OXN9ZrK6uFyvFf92jfH9j//y+X79P9sj/tgB/R8/ZP///fj+0w93sqVu8S9f6v75+16P+Gnx2ffJIt+un9jN73TyL3v/5795f7/+L/To/0H//5cP2f8rX/3uHw65KQBwAppb2ytz9XptY5/MyCG2kZE5Sib7Tufv8Wj7OeLLX8tk/T4sfcz0e2QCAACO24sv/f1uCQAAAAAAAAAAAAAAAAAAAJxeJ3E7sVdj7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/pPAAAA//+e1d5O") 22.042729419s ago: executing program 8 (id=8114): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 22.000371521s ago: executing program 8 (id=8115): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x2, 0xe) 21.918250156s ago: executing program 8 (id=8116): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0xffffffff, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809a3dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x1ff, 0x4]}}) 21.895965858s ago: executing program 38 (id=8116): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0xffffffff, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809a3dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x1ff, 0x4]}}) 7.779485735s ago: executing program 9 (id=8394): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close(r0) 7.727975847s ago: executing program 9 (id=8397): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) exit(0x0) 6.870115487s ago: executing program 9 (id=8410): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) 6.846300999s ago: executing program 9 (id=8412): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 6.759510184s ago: executing program 9 (id=8415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 6.610646843s ago: executing program 9 (id=8418): r0 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r1 = syz_io_uring_setup(0xa91, &(0x7f0000000280)={0x0, 0xb3fe, 0x2, 0xfffffffc, 0x363}, &(0x7f00000000c0), &(0x7f00000005c0)) io_uring_enter(r1, 0x50d2, 0x6db7, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x200, 0x4], 0x2) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 6.610550863s ago: executing program 39 (id=8418): r0 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r1 = syz_io_uring_setup(0xa91, &(0x7f0000000280)={0x0, 0xb3fe, 0x2, 0xfffffffc, 0x363}, &(0x7f00000000c0), &(0x7f00000005c0)) io_uring_enter(r1, 0x50d2, 0x6db7, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x200, 0x4], 0x2) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 1.782597885s ago: executing program 6 (id=8553): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 1.756350147s ago: executing program 6 (id=8557): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000001c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.462522765s ago: executing program 6 (id=8564): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.450696585s ago: executing program 6 (id=8566): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) setpriority(0x2, 0xff, 0x0) 1.37842692s ago: executing program 1 (id=8578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x700979ad6d5f6c9c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_read_part_table(0x5d6, &(0x7f0000000300)="$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") 1.060786508s ago: executing program 4 (id=8572): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(r0) 917.797647ms ago: executing program 2 (id=8576): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 914.248367ms ago: executing program 4 (id=8577): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x16) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 823.801302ms ago: executing program 3 (id=8579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x26, 0x2, {{0xd, [0x5, 0x1, 0x2c, 0x7, 0x1, 0x0, 0x3, 0xe, 0x1, 0x8, 0xc, 0x0, 0x5, 0xb, 0xd, 0xd], 0x1, [0x3, 0x94fe, 0x9, 0xfc00, 0x77, 0x0, 0x8834, 0x40, 0x4, 0xc445, 0x1, 0x474, 0x6, 0xb840, 0x9, 0x3], [0x9, 0xde, 0x1ff, 0x4, 0x8, 0x4, 0xb, 0x5, 0x3, 0x4, 0x0, 0x7, 0x7, 0x268, 0x7ff, 0x2d]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 823.621872ms ago: executing program 4 (id=8580): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240)='P', 0x0}, 0x20) 758.174466ms ago: executing program 4 (id=8581): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe", @ANYRES64], 0x24}}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 748.698966ms ago: executing program 3 (id=8582): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000280)="4104", 0x2) 715.316418ms ago: executing program 2 (id=8583): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x8094) 682.06521ms ago: executing program 1 (id=8584): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf5f) sched_setscheduler(0x0, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 601.381095ms ago: executing program 4 (id=8585): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007b00000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@generic={0x10, "2f898d29adcf735f421cfc1b0e7fa566eec464a4ed56e40dee574e7fca2577a68444de6816dbfcfe8c43f4cb75bdefce5b3152bfe5b52e10fb970295cb6b823e605f76f264c695c3a172c4808ffe490ef7153ec406bea2dccb6f"}}}, 0x0) 566.274997ms ago: executing program 6 (id=8586): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x65, 0x1b, 0x0, 0x0) 497.207341ms ago: executing program 4 (id=8587): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10100, 0x0) 477.400692ms ago: executing program 6 (id=8588): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100, 0x1, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xb, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48eb, 0xfffffffc, 0x2, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x40, 0xff, 0x3ca, 0xa0, 0x1b, "7a6d7f76a70c31c0"}) 403.786396ms ago: executing program 1 (id=8589): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700008c00000000000000000000000000000000000000000000000000000000060000000000000000050000000a"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 403.423086ms ago: executing program 3 (id=8590): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 341.77713ms ago: executing program 2 (id=8591): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setuid(0x0) 294.028053ms ago: executing program 3 (id=8592): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) 263.052125ms ago: executing program 3 (id=8593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 230.027836ms ago: executing program 1 (id=8594): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 158.712511ms ago: executing program 1 (id=8595): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @private=0xa010100}, 0x10) 151.824561ms ago: executing program 2 (id=8596): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x96) setuid(0xee01) r1 = dup2(r0, r0) ioctl$BLKTRACESTOP(r1, 0x801070cf, 0x0) 124.546622ms ago: executing program 2 (id=8597): mlockall(0x7) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 109.567724ms ago: executing program 1 (id=8598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 10.054859ms ago: executing program 2 (id=8599): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 0s ago: executing program 3 (id=8600): memfd_create(0x0, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0x30, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) kernel console output (not intermixed with test programs): . [ 282.782990][T20274] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 282.791240][T20274] openvswitch: netlink: Message has 4 unknown bytes. [ 283.311576][T20324] FAT-fs (loop3): bogus number of FAT sectors [ 283.317953][T20324] FAT-fs (loop3): Can't find a valid FAT filesystem [ 283.688872][T20345] EXT4-fs: inline encryption not supported [ 283.735693][T20345] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.7089: Allocating blocks 113-513 which overlap fs metadata [ 283.794318][T20345] EXT4-fs (loop0): Remounting filesystem read-only [ 284.006013][T20357] set_capacity_and_notify: 3 callbacks suppressed [ 284.006034][T20357] loop0: detected capacity change from 0 to 128 [ 284.421474][T11293] kernel write not supported for file bpf-prog (pid: 11293 comm: kworker/1:4) [ 284.434738][T20378] loop0: detected capacity change from 0 to 4096 [ 284.567407][T20393] loop3: detected capacity change from 0 to 512 [ 284.632032][T20393] EXT4-fs: Ignoring removed nobh option [ 284.674484][T20393] ext4 filesystem being mounted at /1425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.852158][T20426] loop5: detected capacity change from 0 to 512 [ 284.891773][T20426] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.943925][T20435] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 284.963443][T20426] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 284.990801][T20430] SELinux: ebitmap: empty map [ 285.000963][T20430] SELinux: failed to load policy [ 285.006709][T20426] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 285.019038][T20426] EXT4-fs (loop5): This should not happen!! Data will be lost [ 285.019038][T20426] [ 285.028775][T20426] EXT4-fs (loop5): Total free blocks count 0 [ 285.034956][T20426] EXT4-fs (loop5): Free/Dirty block details [ 285.040924][T20426] EXT4-fs (loop5): free_blocks=65280 [ 285.046347][T20426] EXT4-fs (loop5): dirty_blocks=1 [ 285.051508][T20426] EXT4-fs (loop5): Block reservation details [ 285.057557][T20426] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 285.078432][T20439] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 285.091061][T20439] EXT4-fs (loop5): This should not happen!! Data will be lost [ 285.091061][T20439] [ 285.160264][T20447] batadv_slave_0: entered promiscuous mode [ 285.177176][T20445] batadv_slave_0: left promiscuous mode [ 285.351826][T20452] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7135'. [ 287.012783][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7164'. [ 287.043027][T20524] batadv1: entered promiscuous mode [ 287.108121][T20530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20530 comm=syz.8.7169 [ 287.241992][ T2965] Process accounting resumed [ 287.409607][T20552] loop0: detected capacity change from 0 to 512 [ 287.417860][T20552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.470309][T20552] EXT4-fs (loop0): 1 truncate cleaned up [ 287.482766][T20552] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.0.7178: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 287.599519][T20552] EXT4-fs (loop0): Remounting filesystem read-only [ 287.606126][T20552] EXT4-fs warning (device loop0): ext4_rename_delete:3729: inode #2: comm syz.0.7178: Deleting old file: nlink 5, error=-117 [ 287.681258][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 287.681290][ T29] audit: type=1400 audit(2000000715.634:2392): avc: denied { create } for pid=20551 comm="syz.0.7178" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 287.736854][ T3314] EXT4-fs unmount: 17 callbacks suppressed [ 287.736875][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.985989][T20587] loop4: detected capacity change from 0 to 512 [ 288.019714][T20587] EXT4-fs: inline encryption not supported [ 288.124518][T20587] EXT4-fs (loop4): 1 orphan inode deleted [ 288.136636][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 288.146761][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 288.177029][T20587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.213882][T20587] ext4 filesystem being mounted at /1457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.224695][ T29] audit: type=1400 audit(2000000716.164:2393): avc: denied { mounton } for pid=20598 comm="syz.8.7197" path="/proc/616/task" dev="proc" ino=139880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 288.319088][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.337208][ T37] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 288.347214][ T37] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 288.436571][ T29] audit: type=1326 audit(2000000716.384:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.8.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 288.460290][ T29] audit: type=1326 audit(2000000716.384:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.8.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 288.484226][ T29] audit: type=1326 audit(2000000716.384:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.8.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 288.507958][ T29] audit: type=1326 audit(2000000716.384:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.8.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 288.532413][ T29] audit: type=1326 audit(2000000716.384:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.8.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 288.556640][ T29] audit: type=1326 audit(2000000716.384:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20609 comm="syz.8.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 291.181000][T20732] syzkaller1: entered promiscuous mode [ 291.186745][T20732] syzkaller1: entered allmulticast mode [ 291.283614][T20742] loop5: detected capacity change from 0 to 1024 [ 291.311715][T20744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7261'. [ 291.321112][T20744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7261'. [ 291.334006][T20742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 291.351017][T20742] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.395780][T20742] EXT4-fs (loop5): shut down requested (0) [ 291.569855][T20755] loop0: detected capacity change from 0 to 512 [ 291.585218][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 291.592373][T20757] netlink: 'syz.3.7265': attribute type 29 has an invalid length. [ 291.618632][T20757] netlink: 'syz.3.7265': attribute type 29 has an invalid length. [ 291.647251][T20757] netlink: 500 bytes leftover after parsing attributes in process `syz.3.7265'. [ 291.673470][T20755] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.7266: corrupted inode contents [ 291.713174][T20755] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.7266: mark_inode_dirty error [ 291.726970][T20755] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.7266: corrupted inode contents [ 291.739173][T20755] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.7266: mark_inode_dirty error [ 291.751596][T20755] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.7266: Failed to acquire dquot type 0 [ 291.763598][T20755] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.7266: corrupted inode contents [ 291.775844][T20755] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.7266: mark_inode_dirty error [ 291.787746][T20755] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.7266: corrupted inode contents [ 291.800069][T20755] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.7266: mark_inode_dirty error [ 291.811722][T20755] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.7266: corrupted inode contents [ 291.832547][T20755] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 291.852501][T20755] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.7266: corrupted inode contents [ 291.874260][T20755] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.7266: mark_inode_dirty error [ 291.885763][T20755] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 291.895360][T20755] EXT4-fs (loop0): 1 truncate cleaned up [ 291.901728][T20755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.922849][T20755] ext4 filesystem being mounted at /1396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.959418][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.008536][T20774] loop8: detected capacity change from 0 to 256 [ 292.114738][ T3653] kernel write not supported for file bpf-prog (pid: 3653 comm: kworker/1:3) [ 292.148554][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7278'. [ 292.157976][T20789] netlink: 9 bytes leftover after parsing attributes in process `syz.8.7278'. [ 292.240937][T20795] loop8: detected capacity change from 0 to 256 [ 292.264358][T20795] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.292419][T20795] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.297836][T20799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7283'. [ 292.506576][T20806] netlink: 7688 bytes leftover after parsing attributes in process `syz.8.7286'. [ 292.859583][T20823] loop8: detected capacity change from 0 to 128 [ 292.887602][T20823] vfat: Unknown parameter 'uni_xlat0BqHDUe' [ 293.252746][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7305'. [ 293.261743][T20850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7305'. [ 293.928886][T20881] loop8: detected capacity change from 0 to 2048 [ 293.972621][T20881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.992179][T20881] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 294.058572][T20881] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 294.071214][T20881] EXT4-fs (loop8): This should not happen!! Data will be lost [ 294.071214][T20881] [ 294.084097][T20881] EXT4-fs (loop8): Total free blocks count 0 [ 294.090554][T20881] EXT4-fs (loop8): Free/Dirty block details [ 294.096665][T20881] EXT4-fs (loop8): free_blocks=4096 [ 294.102250][T20881] EXT4-fs (loop8): dirty_blocks=16 [ 294.107570][T20881] EXT4-fs (loop8): Block reservation details [ 294.116517][T20881] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 294.162928][T20888] loop4: detected capacity change from 0 to 1024 [ 294.202691][T20888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.227267][T20881] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 294.245535][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 294.245553][ T29] audit: type=1400 audit(2000000722.194:2435): avc: denied { setopt } for pid=20891 comm="syz.0.7318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.308538][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.390298][ T29] audit: type=1400 audit(2000000722.344:2436): avc: denied { ioctl } for pid=20895 comm="syz.8.7320" path="socket:[140828]" dev="sockfs" ino=140828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.459244][T20901] pim6reg1: entered promiscuous mode [ 294.464729][T20901] pim6reg1: entered allmulticast mode [ 294.571789][ T29] audit: type=1400 audit(2000000722.524:2437): avc: denied { lock } for pid=20905 comm="syz.4.7324" path="socket:[140859]" dev="sockfs" ino=140859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 294.708953][ T29] audit: type=1400 audit(2000000722.664:2438): avc: denied { create } for pid=20918 comm="syz.8.7331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 294.737155][ T29] audit: type=1400 audit(2000000722.664:2439): avc: denied { write } for pid=20918 comm="syz.8.7331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 294.757243][ T29] audit: type=1400 audit(2000000722.664:2440): avc: denied { read } for pid=20918 comm="syz.8.7331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 294.843007][ T29] audit: type=1400 audit(2000000722.714:2441): avc: denied { ioctl } for pid=20918 comm="syz.8.7331" path="socket:[141858]" dev="sockfs" ino=141858 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 295.078673][T20937] bridge_slave_1: entered promiscuous mode [ 295.162417][T20939] loop3: detected capacity change from 0 to 1024 [ 295.177899][T20939] EXT4-fs: Ignoring removed bh option [ 295.216222][T20939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.696625][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.776903][ T29] audit: type=1400 audit(2000000723.714:2442): avc: denied { connect } for pid=20959 comm="syz.4.7345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 296.025642][T20984] loop8: detected capacity change from 0 to 764 [ 296.026104][ T29] audit: type=1326 audit(2000000723.974:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20983 comm="syz.4.7355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x0 [ 296.122595][ T29] audit: type=1400 audit(2000000724.034:2444): avc: denied { mount } for pid=20982 comm="syz.8.7354" name="/" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 296.168989][T20993] loop0: detected capacity change from 0 to 1024 [ 296.204535][T20993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.298072][T21004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.440677][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.467348][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.504518][T21013] set_capacity_and_notify: 1 callbacks suppressed [ 296.504539][T21013] loop0: detected capacity change from 0 to 256 [ 296.584806][T21013] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 297.118124][T21037] dummy0: entered promiscuous mode [ 297.132255][T21037] dummy0: left promiscuous mode [ 297.133692][T21040] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7377'. [ 297.372405][T21047] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 297.620436][T21053] netlink: 'syz.4.7382': attribute type 4 has an invalid length. [ 297.908149][T21059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.916928][T21059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.159294][T21067] loop5: detected capacity change from 0 to 512 [ 298.186874][T21067] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7389: bg 0: block 5: invalid block bitmap [ 298.213743][T21067] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 298.246822][T21067] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7389: invalid indirect mapped block 3 (level 2) [ 298.288576][T21067] EXT4-fs (loop5): 1 orphan inode deleted [ 298.294539][T21067] EXT4-fs (loop5): 1 truncate cleaned up [ 298.331675][T21067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.430292][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.816907][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7400'. [ 298.825957][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7400'. [ 299.579262][T21152] loop4: detected capacity change from 0 to 512 [ 299.586146][T21152] EXT4-fs: Ignoring removed oldalloc option [ 299.644365][T21152] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.7425: Parent and EA inode have the same ino 15 [ 299.700637][T21152] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.7425: Parent and EA inode have the same ino 15 [ 299.728806][T21162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7430'. [ 299.792188][T21152] EXT4-fs (loop4): 1 orphan inode deleted [ 299.823774][T21152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.885128][ T2965] kernel write not supported for file /snd/seq (pid: 2965 comm: kworker/0:2) [ 299.900121][T21152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7425'. [ 299.927584][T21176] netlink: 'syz.0.7436': attribute type 10 has an invalid length. [ 299.997731][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.092944][T21189] sctp: [Deprecated]: syz.5.7443 (pid 21189) Use of int in max_burst socket option deprecated. [ 300.092944][T21189] Use struct sctp_assoc_value instead [ 300.112139][T21197] loop4: detected capacity change from 0 to 512 [ 300.133158][T21197] EXT4-fs (loop4): orphan cleanup on readonly fs [ 300.150875][T21197] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7442: bg 0: block 248: padding at end of block bitmap is not set [ 300.186865][T21197] __quota_error: 16 callbacks suppressed [ 300.186885][T21197] Quota error (device loop4): write_blk: dquota write failed [ 300.200561][T21197] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 300.203139][ T29] audit: type=1400 audit(2000000728.154:2461): avc: denied { read append } for pid=21209 comm="syz.3.7448" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 300.213317][ T29] audit: type=1400 audit(2000000728.154:2462): avc: denied { open } for pid=21209 comm="syz.3.7448" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 300.247881][T21197] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.7442: Failed to acquire dquot type 1 [ 300.301052][T21197] EXT4-fs (loop4): 1 truncate cleaned up [ 300.308028][T21197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.353259][ T29] audit: type=1326 audit(2000000728.304:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.4.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 300.376893][ T29] audit: type=1326 audit(2000000728.304:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.4.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 300.400658][ T29] audit: type=1326 audit(2000000728.304:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.4.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 300.424280][ T29] audit: type=1326 audit(2000000728.304:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.4.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 300.469000][ T29] audit: type=1326 audit(2000000728.334:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.4.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 300.492892][ T29] audit: type=1326 audit(2000000728.394:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21196 comm="syz.4.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 300.562850][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.683284][T21231] loop3: detected capacity change from 0 to 1764 [ 300.870179][T21245] can0: slcan on ttyS3. [ 300.912266][T21251] loop5: detected capacity change from 0 to 512 [ 300.919074][T21245] can0 (unregistered): slcan off ttyS3. [ 300.955854][T21245] can0: slcan on ttyS3. [ 300.961212][T21251] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 301.109902][T21251] System zones: 0-2, 18-18, 34-35 [ 301.118547][T21251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.138064][T21251] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.244766][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.362286][T21244] can0 (unregistered): slcan off ttyS3. [ 301.725336][T21285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7477'. [ 301.840950][T21290] loop0: detected capacity change from 0 to 764 [ 301.947307][T21305] netlink: 'syz.4.7481': attribute type 15 has an invalid length. [ 302.147399][T21319] SELinux: failed to load policy [ 302.245761][T21341] loop3: detected capacity change from 0 to 128 [ 302.448760][T21351] netlink: 'syz.8.7498': attribute type 12 has an invalid length. [ 302.456905][T21351] netlink: 'syz.8.7498': attribute type 29 has an invalid length. [ 302.464923][T21351] netlink: 148 bytes leftover after parsing attributes in process `syz.8.7498'. [ 302.737716][ T37] kworker/u8:2: attempt to access beyond end of device [ 302.737716][ T37] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 302.771208][ T37] kworker/u8:2: attempt to access beyond end of device [ 302.771208][ T37] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 302.805147][ T37] kworker/u8:2: attempt to access beyond end of device [ 302.805147][ T37] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 302.827800][ T37] kworker/u8:2: attempt to access beyond end of device [ 302.827800][ T37] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 302.869451][ T37] kworker/u8:2: attempt to access beyond end of device [ 302.869451][ T37] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 302.901070][ T37] kworker/u8:2: attempt to access beyond end of device [ 302.901070][ T37] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 302.956690][ T37] kworker/u8:2: attempt to access beyond end of device [ 302.956690][ T37] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 302.997202][T21373] netlink: 'syz.8.7510': attribute type 4 has an invalid length. [ 303.011077][ T37] kworker/u8:2: attempt to access beyond end of device [ 303.011077][ T37] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 303.035087][ T37] kworker/u8:2: attempt to access beyond end of device [ 303.035087][ T37] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 303.076833][ T37] kworker/u8:2: attempt to access beyond end of device [ 303.076833][ T37] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 303.144812][T21383] loop0: detected capacity change from 0 to 1024 [ 303.193147][T21383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.246237][T21383] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 303.273343][T21383] EXT4-fs (loop0): Remounting filesystem read-only [ 303.384833][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.482850][T21407] loop3: detected capacity change from 0 to 1024 [ 303.503064][T21410] veth1_macvtap: left promiscuous mode [ 303.529913][T21410] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 303.544578][T21407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.628120][T21417] loop0: detected capacity change from 0 to 128 [ 303.639426][T21417] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 303.664578][T21417] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 304.182632][T10497] Bluetooth: hci0: sending frame failed (-49) [ 304.189079][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 304.263663][T21445] loop8: detected capacity change from 0 to 128 [ 304.286461][T21445] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 304.297981][T21445] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 304.308412][T21445] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 304.319297][T21445] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 304.329564][T21445] Buffer I/O error on dev loop8, logical block 112, lost async page write [ 304.340003][T21445] Buffer I/O error on dev loop8, logical block 116, lost async page write [ 304.351026][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.359691][T21445] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 304.370450][T21445] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 304.380499][T21445] Buffer I/O error on dev loop8, logical block 120, lost async page write [ 304.392437][T21445] Buffer I/O error on dev loop8, logical block 124, lost async page write [ 304.595853][T21453] Unsupported ieee802154 address type: 0 [ 304.856020][T21467] loop4: detected capacity change from 0 to 512 [ 304.977504][T21467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.993778][T21467] ext4 filesystem being mounted at /1530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.031184][T21467] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.7548: corrupted inode contents [ 305.054018][T21467] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.7548: mark_inode_dirty error [ 305.111487][T21467] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.7548: corrupted inode contents [ 305.145728][T21467] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.7548: mark_inode_dirty error [ 305.236139][T21467] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.7548: mark inode dirty (error -117) [ 305.288509][T21467] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 305.339476][T21493] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 305.352252][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.419957][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7563'. [ 305.432286][T21500] vlan2: entered allmulticast mode [ 305.470146][T21500] batman_adv: batadv0: Adding interface: vlan2 [ 305.476373][T21500] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.505336][T21500] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 305.557518][T21508] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 305.603874][T21508] SELinux: failed to load policy [ 305.634975][T21514] loop0: detected capacity change from 0 to 512 [ 305.694128][T21514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.720068][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 305.720084][ T29] audit: type=1400 audit(2000000733.674:2577): avc: denied { bind } for pid=21519 comm="syz.5.7571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 305.746108][ T29] audit: type=1400 audit(2000000733.674:2578): avc: denied { name_bind } for pid=21519 comm="syz.5.7571" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 305.770126][ T29] audit: type=1400 audit(2000000733.674:2579): avc: denied { node_bind } for pid=21519 comm="syz.5.7571" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 305.796372][T21520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7570'. [ 305.837471][T21514] ext4 filesystem being mounted at /1458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.912172][ T29] audit: type=1400 audit(2000000733.764:2580): avc: denied { setopt } for pid=21519 comm="syz.5.7571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 305.955820][T21526] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7573'. [ 305.974387][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.998749][T21529] loop3: detected capacity change from 0 to 128 [ 306.280480][ T29] audit: type=1400 audit(2000000734.234:2581): avc: denied { map } for pid=21547 comm="syz.8.7582" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 306.454140][T21550] loop8: detected capacity change from 0 to 2048 [ 306.527995][ T3305] Alternate GPT is invalid, using primary GPT. [ 306.534443][ T3305] loop8: p1 p2 p3 [ 306.538293][ T3305] loop8: partition table partially beyond EOD, truncated [ 306.613928][T21550] Alternate GPT is invalid, using primary GPT. [ 306.620392][T21550] loop8: p1 p2 p3 [ 306.624183][T21550] loop8: partition table partially beyond EOD, truncated [ 306.644564][T21557] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 306.665726][T21557] SELinux: failed to load policy [ 306.773876][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 306.785665][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 306.799362][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 306.860321][T21564] pim6reg1: entered promiscuous mode [ 306.865698][T21564] pim6reg1: entered allmulticast mode [ 306.911800][T21570] pimreg: entered allmulticast mode [ 306.959361][T21570] pimreg: left allmulticast mode [ 307.249486][T21597] can0: slcan on ttyS3. [ 307.303123][T21602] loop8: detected capacity change from 0 to 1024 [ 307.361619][T21602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 307.382743][T21597] can0 (unregistered): slcan off ttyS3. [ 307.461164][T21597] Falling back ldisc for ttyS3. [ 307.510660][T21602] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.624074][T21602] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.7606: lblock 0 mapped to illegal pblock 0 (length 1) [ 307.672013][T21602] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.7606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 307.815506][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 308.063652][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7623'. [ 308.239752][T21682] sctp: [Deprecated]: syz.8.7629 (pid 21682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.239752][T21682] Use struct sctp_sack_info instead [ 308.331425][ T29] audit: type=1326 audit(2000000736.284:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.0.7631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd634a9aeb9 code=0x0 [ 308.423754][T21697] loop8: detected capacity change from 0 to 1024 [ 308.490613][T21697] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.618495][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.750127][T21693] loop3: detected capacity change from 0 to 32768 [ 308.817676][ T3305] loop3: p1 p2 p3 < p5 p6 > [ 308.824082][T21719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.831409][T21719] IPv6: NLM_F_CREATE should be set when creating new route [ 308.833382][ T3305] loop3: p2 size 16775168 extends beyond EOD, truncated [ 308.851665][ T3305] loop3: p5 start 4294970168 is beyond EOD, truncated [ 308.878849][T21693] loop3: p1 p2 p3 < p5 p6 > [ 308.890010][T21693] loop3: p2 size 16775168 extends beyond EOD, truncated [ 308.906420][T21693] loop3: p5 start 4294970168 is beyond EOD, truncated [ 308.994838][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 309.000380][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 309.007920][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 309.025976][ T8014] udevd[8014]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 309.093441][ T8014] udevd[8014]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 309.100424][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 309.111322][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 309.239381][T21747] loop8: detected capacity change from 0 to 128 [ 309.279134][T21747] bio_check_eod: 130 callbacks suppressed [ 309.279156][T21747] syz.8.7657: attempt to access beyond end of device [ 309.279156][T21747] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 309.321507][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7660'. [ 309.335105][ T29] audit: type=1326 audit(2000000737.284:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.0.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd634a9aeb9 code=0x7ffc0000 [ 309.338765][T21751] bond3: option ad_actor_sys_prio: invalid value (0) [ 309.365568][T21751] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 309.372255][T21747] syz.8.7657: attempt to access beyond end of device [ 309.372255][T21747] loop8: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 309.389604][T21754] loop0: detected capacity change from 0 to 128 [ 309.400975][T21751] bond3 (unregistering): Released all slaves [ 309.417999][T21754] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 309.451362][ T29] audit: type=1326 audit(2000000737.324:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.0.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd634a9aeb9 code=0x7ffc0000 [ 309.475043][ T29] audit: type=1326 audit(2000000737.324:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.0.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd634a9aeb9 code=0x7ffc0000 [ 309.475077][T21747] syz.8.7657: attempt to access beyond end of device [ 309.475077][T21747] loop8: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 309.498902][ T29] audit: type=1326 audit(2000000737.324:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.0.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd634a9aeb9 code=0x7ffc0000 [ 309.538168][T21747] buffer_io_error: 4 callbacks suppressed [ 309.538186][T21747] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 309.597873][T21747] syz.8.7657: attempt to access beyond end of device [ 309.597873][T21747] loop8: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 309.615783][T21747] syz.8.7657: attempt to access beyond end of device [ 309.615783][T21747] loop8: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 309.629617][T21747] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 309.645490][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.665933][T21763] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7665'. [ 309.722131][T21747] syz.8.7657: attempt to access beyond end of device [ 309.722131][T21747] loop8: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 309.791443][T21747] syz.8.7657: attempt to access beyond end of device [ 309.791443][T21747] loop8: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 309.792947][T21773] loop0: detected capacity change from 0 to 512 [ 309.805794][T21747] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 309.882150][T21773] EXT4-fs: Ignoring removed orlov option [ 309.895733][T21747] syz.8.7657: attempt to access beyond end of device [ 309.895733][T21747] loop8: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 309.945722][T21773] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 309.957132][T21747] syz.8.7657: attempt to access beyond end of device [ 309.957132][T21747] loop8: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 309.970920][T21747] Buffer I/O error on dev loop8, logical block 104, lost async page write [ 309.977891][T21773] EXT4-fs (loop0): 1 truncate cleaned up [ 309.987127][T21773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.023277][T21747] syz.8.7657: attempt to access beyond end of device [ 310.023277][T21747] loop8: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 310.050026][T21773] EXT4-fs (loop0): shut down requested (1) [ 310.121977][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.154630][T21747] Buffer I/O error on dev loop8, logical block 108, lost async page write [ 310.230620][T21795] rdma_op ffff88812342a980 conn xmit_rdma 0000000000000000 [ 310.500888][T21814] netlink: 'syz.0.7687': attribute type 8 has an invalid length. [ 311.300797][T21842] loop0: detected capacity change from 0 to 512 [ 311.326330][T21844] loop5: detected capacity change from 0 to 512 [ 311.343463][T21842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.364910][T21842] ext4 filesystem being mounted at /1481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.380411][T21848] netlink: 'syz.3.7702': attribute type 11 has an invalid length. [ 311.388471][T21848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7702'. [ 311.404389][T21844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.422070][T21848] netlink: 'syz.3.7702': attribute type 11 has an invalid length. [ 311.430156][T21848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7702'. [ 311.448256][T21844] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.485287][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 311.485306][ T29] audit: type=1326 audit(2000000739.434:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.520433][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.546034][ T29] audit: type=1326 audit(2000000739.474:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.551937][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.569562][ T29] audit: type=1326 audit(2000000739.474:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.569607][ T29] audit: type=1326 audit(2000000739.474:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.569648][ T29] audit: type=1326 audit(2000000739.484:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.569682][ T29] audit: type=1326 audit(2000000739.484:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.569714][ T29] audit: type=1326 audit(2000000739.484:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.698120][ T29] audit: type=1326 audit(2000000739.484:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.721778][ T29] audit: type=1326 audit(2000000739.484:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.745371][ T29] audit: type=1326 audit(2000000739.484:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.8.7703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 311.905068][T21871] loop0: detected capacity change from 0 to 256 [ 311.945850][T21871] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.970730][T21871] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.075536][ T3387] kernel write not supported for file bpf-prog (pid: 3387 comm: kworker/0:3) [ 312.194026][T21891] loop3: detected capacity change from 0 to 256 [ 312.201172][T21885] 9pnet: p9_errstr2errno: server reported unknown error  [ 312.300608][T21898] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.318557][T21894] syzkaller1: entered promiscuous mode [ 312.324203][T21894] syzkaller1: entered allmulticast mode [ 312.345688][T21901] set_capacity_and_notify: 1 callbacks suppressed [ 312.345708][T21901] loop4: detected capacity change from 0 to 2048 [ 312.387778][T21901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.403006][T21898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 312.416829][T21909] loop0: detected capacity change from 0 to 128 [ 312.423577][T21909] EXT4-fs: Ignoring removed orlov option [ 312.477921][T21898] ext4 filesystem being mounted at /1553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.522545][T21898] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.7725: lblock 0 mapped to illegal pblock 0 (length 6) [ 312.563216][T21909] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.581283][T21909] ext4 filesystem being mounted at /1487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 312.627469][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.654485][T21898] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.7725: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 312.681986][T21920] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.7725: lblock 0 mapped to illegal pblock 0 (length 1) [ 312.721580][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.797643][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 312.823904][T21930] loop5: detected capacity change from 0 to 512 [ 312.846259][T21930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.896626][T21930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 312.904668][T21930] System zones: 1-2, 4-12, 8-8 [ 312.939659][T21930] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.7738: iget: bad i_size value: 38620345925642 [ 312.954848][T21930] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7738: couldn't read orphan inode 15 (err -117) [ 312.967577][T21930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.015223][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7743'. [ 313.055965][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.112102][T21947] loop8: detected capacity change from 0 to 1024 [ 313.183766][T21947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.252150][T21947] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.7745: error while reading EA inode 28 err=-116 [ 313.290591][T21947] EXT4-fs error (device loop8): ext4_xattr_block_find:1879: inode #15: comm syz.8.7745: corrupted xattr block 113: invalid header [ 313.411399][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.685440][T21987] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7760'. [ 313.701408][T21986] loop4: detected capacity change from 0 to 1024 [ 313.717925][T21986] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 313.812977][T22001] loop5: detected capacity change from 0 to 512 [ 313.845580][T22001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.861057][T22001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.873877][T22001] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.023807][T22013] loop8: detected capacity change from 0 to 128 [ 314.053957][T22013] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 314.108785][T22013] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.151323][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.191330][T17459] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.272167][T22029] syzkaller1: entered promiscuous mode [ 314.278017][T22029] syzkaller1: entered allmulticast mode [ 314.561118][T22054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7788'. [ 314.570249][T22054] netlink: 'syz.5.7788': attribute type 20 has an invalid length. [ 314.578440][T22054] netlink: 'syz.5.7788': attribute type 21 has an invalid length. [ 314.641819][T22062] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 314.875422][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7803'. [ 314.884878][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7803'. [ 315.051664][T22093] loop3: detected capacity change from 0 to 512 [ 315.094135][T22093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.116836][T22093] ext4 filesystem being mounted at /1570/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.170052][T22093] EXT4-fs (loop3): shut down requested (0) [ 315.218203][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.273528][T22104] loop4: detected capacity change from 0 to 512 [ 315.324403][T22109] loop5: detected capacity change from 0 to 512 [ 315.445517][T22109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.464757][T22109] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.534997][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.557715][T22129] xt_hashlimit: size too large, truncated to 1048576 [ 315.893261][T22145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.7828: ea_inode with extended attributes [ 315.934690][T22145] EXT4-fs (loop0): Remounting filesystem read-only [ 315.960217][T22148] netlink: 'syz.4.7829': attribute type 13 has an invalid length. [ 315.970680][T22145] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 315.988415][T22145] EXT4-fs (loop0): 1 orphan inode deleted [ 316.008580][T22145] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.108523][T22148] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.115821][T22148] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.214188][T22148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.226672][T22148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.348406][ T1575] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.372607][ T1575] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.396627][ T1575] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.405583][ T1575] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.550888][T22169] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 316.566791][T22169] SELinux: failed to load policy [ 316.600960][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 316.601044][ T29] audit: type=1326 audit(2000000744.554:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.638962][ T3653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.650885][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.689272][ T29] audit: type=1326 audit(2000000744.594:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.713111][ T29] audit: type=1326 audit(2000000744.594:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.736941][ T29] audit: type=1326 audit(2000000744.614:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.760656][ T29] audit: type=1326 audit(2000000744.614:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.785257][ T29] audit: type=1326 audit(2000000744.624:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.809296][ T29] audit: type=1326 audit(2000000744.624:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.833387][ T29] audit: type=1326 audit(2000000744.624:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.857317][ T29] audit: type=1326 audit(2000000744.624:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 316.881214][ T29] audit: type=1326 audit(2000000744.624:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.8.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3052edaeb9 code=0x7ffc0000 [ 317.285599][T22213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7856'. [ 317.337451][T22215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7857'. [ 317.545976][T22234] set_capacity_and_notify: 2 callbacks suppressed [ 317.545995][T22234] loop4: detected capacity change from 0 to 128 [ 317.710089][T22242] netlink: 'syz.8.7870': attribute type 6 has an invalid length. [ 317.864417][T22252] loop4: detected capacity change from 0 to 128 [ 318.342995][T22290] loop8: detected capacity change from 0 to 8192 [ 318.460372][T22295] loop0: detected capacity change from 0 to 8192 [ 318.592792][ T3314] VFS: Lookup of '.. ' in vfat loop0 would have caused loop [ 318.624501][ T3314] VFS: Lookup of '.. ' in vfat loop0 would have caused loop [ 318.939100][T22324] loop4: detected capacity change from 0 to 512 [ 318.939550][T22324] EXT4-fs: Ignoring removed nobh option [ 318.997244][T22324] EXT4-fs mount: 3 callbacks suppressed [ 318.997267][T22324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.101503][T22324] ext4 filesystem being mounted at /1601/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.179315][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.423543][T22317] loop3: detected capacity change from 0 to 512 [ 319.509631][T22317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.509845][T22317] ext4 filesystem being mounted at /1577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.928815][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.049125][T22330] chnl_net:caif_netlink_parms(): no params data found [ 320.164966][T22371] tun0: tun_chr_ioctl cmd 1074025675 [ 320.170456][T22371] tun0: persist enabled [ 320.214217][T22377] tun0: tun_chr_ioctl cmd 1074025675 [ 320.219689][T22377] tun0: persist enabled [ 320.228862][T22330] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.236201][T22330] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.265154][T22330] bridge_slave_0: entered allmulticast mode [ 320.280995][T22330] bridge_slave_0: entered promiscuous mode [ 320.297937][T22330] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.305222][T22330] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.337038][T22330] bridge_slave_1: entered allmulticast mode [ 320.344577][T22330] bridge_slave_1: entered promiscuous mode [ 320.397180][T22330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.425689][T22330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.494653][T22330] team0: Port device team_slave_0 added [ 320.512038][T22330] team0: Port device team_slave_1 added [ 320.546432][T22330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.553579][T22330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.579710][T22330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.605920][T22330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.613155][T22330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.639260][T22330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.698491][T22402] loop8: detected capacity change from 0 to 128 [ 320.699037][T22330] hsr_slave_0: entered promiscuous mode [ 320.726223][T22402] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.745920][T22402] ext4 filesystem being mounted at /446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 320.761622][T22330] hsr_slave_1: entered promiscuous mode [ 320.829675][T22330] debugfs: 'hsr0' already exists in 'hsr' [ 320.835568][T22330] Cannot create hsr debugfs directory [ 320.842005][T17459] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.937339][T22416] loop3: detected capacity change from 0 to 1024 [ 320.976557][T22416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 321.015924][T22416] ext4 filesystem being mounted at /1585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.040609][T22416] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.7936: lblock 3 mapped to illegal pblock 3 (length 3) [ 321.072594][T22416] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 321.085222][T22416] EXT4-fs (loop3): This should not happen!! Data will be lost [ 321.085222][T22416] [ 321.113222][T22330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.157803][T22330] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.199430][ T1826] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.206578][ T1826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.220802][ T1826] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.227954][ T1826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.268508][ T1826] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:6: lblock 4 mapped to illegal pblock 4 (length 2) [ 321.293718][T22435] bridge0: port 4(team0) entered disabled state [ 321.314906][T22437] netlink: 'syz.8.7941': attribute type 16 has an invalid length. [ 321.320166][T22435] bridge0: port 3(dummy0) entered disabled state [ 321.322974][T22437] netlink: 'syz.8.7941': attribute type 17 has an invalid length. [ 321.346918][ T1826] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 321.359478][ T1826] EXT4-fs (loop3): This should not happen!! Data will be lost [ 321.359478][ T1826] [ 321.407131][ T52] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 321.429005][T22435] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.437144][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 321.449776][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 321.449776][ T52] [ 321.462987][T22435] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.472604][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 321.616714][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 321.616734][ T29] audit: type=1400 audit(2000000749.564:2696): avc: denied { connect } for pid=22452 comm="syz.3.7949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 321.739051][T22437] bridge0: port 4(team0) entered blocking state [ 321.745650][T22437] bridge0: port 4(team0) entered forwarding state [ 321.792384][T22437] bridge0: port 3(dummy0) entered blocking state [ 321.796422][T22459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7952'. [ 321.799101][T22437] bridge0: port 3(dummy0) entered forwarding state [ 321.833235][T22461] loop5: detected capacity change from 0 to 512 [ 321.850622][T22461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.868640][T22461] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.881990][T22437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.899138][ T1575] bridge0: port 4(team0) entered disabled state [ 321.950432][T15843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.970116][ T29] audit: type=1326 audit(2000000749.924:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 321.994372][ T29] audit: type=1326 audit(2000000749.924:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.018142][ T29] audit: type=1326 audit(2000000749.924:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.041691][ T29] audit: type=1326 audit(2000000749.924:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.065348][ T29] audit: type=1326 audit(2000000749.924:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.089875][ T29] audit: type=1326 audit(2000000749.924:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.113464][ T29] audit: type=1326 audit(2000000749.924:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.291959][T22330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.356751][ T29] audit: type=1326 audit(2000000750.094:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.365439][T22485] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7961'. [ 322.381140][ T29] audit: type=1326 audit(2000000750.094:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22466 comm="syz.3.7955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8691faeb9 code=0x7ffc0000 [ 322.420481][T22485] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 322.431633][T22485] bridge2: entered promiscuous mode [ 322.437110][T22485] bridge2: entered allmulticast mode [ 322.576913][T22493] netlink: 'syz.8.7965': attribute type 46 has an invalid length. [ 322.584848][T22493] netlink: 55 bytes leftover after parsing attributes in process `syz.8.7965'. [ 322.666389][ T52] bridge_slave_1: left allmulticast mode [ 322.672247][ T52] bridge_slave_1: left promiscuous mode [ 322.678120][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.744001][ T52] bridge_slave_0: left allmulticast mode [ 322.749769][ T52] bridge_slave_0: left promiscuous mode [ 322.755540][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.915767][ T52] bridge0 (unregistering): left allmulticast mode [ 322.958958][ T52] bond0 (unregistering): left promiscuous mode [ 322.965346][ T52] bond_slave_0: left promiscuous mode [ 322.970998][ T52] bond_slave_1: left promiscuous mode [ 322.977895][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.988721][ T52] bond_slave_0: left allmulticast mode [ 322.996857][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.006157][ T52] bond_slave_1: left allmulticast mode [ 323.013065][ T52] bond0 (unregistering): Released all slaves [ 323.159326][T22330] veth0_vlan: entered promiscuous mode [ 323.210767][T22330] veth1_vlan: entered promiscuous mode [ 323.232408][ T52] dummy0: left promiscuous mode [ 323.242068][ T52] hsr_slave_0: left promiscuous mode [ 323.248330][ T52] hsr_slave_1: left promiscuous mode [ 323.254327][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.261973][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.270274][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.277800][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.286213][ T52] batman_adv: batadv0: Removing interface: vlan2 [ 323.299221][ T52] veth1_macvtap: left promiscuous mode [ 323.304902][ T52] veth0_macvtap: left promiscuous mode [ 323.310673][ T52] veth1_vlan: left promiscuous mode [ 323.316137][ T52] veth0_vlan: left promiscuous mode [ 323.505844][T22545] loop8: detected capacity change from 0 to 512 [ 323.523663][T22330] veth0_macvtap: entered promiscuous mode [ 323.550149][T22330] veth1_macvtap: entered promiscuous mode [ 323.563842][T22545] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.600377][T22330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.639435][T22330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.805326][ T52] IPVS: stop unused estimator thread 0... [ 323.886370][T22507] chnl_net:caif_netlink_parms(): no params data found [ 324.103449][T22507] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.110785][T22507] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.196647][T22507] bridge_slave_0: entered allmulticast mode [ 324.220256][T22507] bridge_slave_0: entered promiscuous mode [ 324.241676][T22507] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.249450][T22507] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.283937][T22507] bridge_slave_1: entered allmulticast mode [ 324.299603][T22507] bridge_slave_1: entered promiscuous mode [ 324.366520][T22507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.395334][T22507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.430634][T22507] team0: Port device team_slave_0 added [ 324.457865][T22507] team0: Port device team_slave_1 added [ 324.490550][T22612] loop8: detected capacity change from 0 to 512 [ 324.502432][T22507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.509487][T22507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.535537][T22507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.575106][T22618] loop3: detected capacity change from 0 to 256 [ 324.625489][T22507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.632613][T22507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.658736][T22507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.692868][T22612] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8005: bg 0: block 248: padding at end of block bitmap is not set [ 324.717592][T22618] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.728493][T22612] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8005: Failed to acquire dquot type 1 [ 324.752659][T22507] hsr_slave_0: entered promiscuous mode [ 324.758997][T22507] hsr_slave_1: entered promiscuous mode [ 324.764941][T22507] debugfs: 'hsr0' already exists in 'hsr' [ 324.770764][T22507] Cannot create hsr debugfs directory [ 324.839466][T22612] EXT4-fs (loop8): 1 truncate cleaned up [ 324.845836][T22612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.883618][T22612] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.093801][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.172929][T22607] loop9: detected capacity change from 0 to 2048 [ 325.357489][ T3305] loop9: p3 p4 < > [ 325.361568][ T3305] loop9: p3 start 11362048 is beyond EOD, truncated [ 325.387963][T22607] loop9: p3 p4 < > [ 325.400624][T22607] loop9: p3 start 11362048 is beyond EOD, truncated [ 325.440461][T22507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.471695][T22652] loop8: detected capacity change from 0 to 1024 [ 325.493042][T22652] EXT4-fs: Ignoring removed orlov option [ 325.498770][T22507] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.505501][T22652] EXT4-fs: inline encryption not supported [ 325.516724][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.523935][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.536068][T22654] loop9: detected capacity change from 0 to 512 [ 325.561905][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 325.572264][T22654] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 325.583277][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.590424][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.602775][T22654] EXT4-fs (loop9): orphan cleanup on readonly fs [ 325.636733][T22652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.653023][T22654] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 325.657958][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 325.709195][T22654] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 325.718082][T22654] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #16: comm syz.9.8019: invalid fast symlink length 9000 [ 325.731148][T22654] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8019: couldn't read orphan inode 16 (err -117) [ 325.743942][T22654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.796925][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.858383][T22330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.904638][T22507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.966093][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 326.169417][T22704] netlink: 256 bytes leftover after parsing attributes in process `syz.9.8033'. [ 326.169602][T22507] veth0_vlan: entered promiscuous mode [ 326.178823][T22704] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8033'. [ 326.200158][T22507] veth1_vlan: entered promiscuous mode [ 326.215696][T22507] veth0_macvtap: entered promiscuous mode [ 326.252125][T22507] veth1_macvtap: entered promiscuous mode [ 326.268048][T22507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.293483][T22507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.442752][T22716] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 326.466895][T22716] SELinux: failed to load policy [ 326.501445][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 327.279174][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 327.279199][ T29] audit: type=1326 audit(2000000755.224:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.1.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bcbd5aeb9 code=0x7fc00000 [ 327.328999][T22748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8048'. [ 327.358969][T22748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8048'. [ 327.986721][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 327.992912][T10497] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 328.150337][T22779] loop9: detected capacity change from 0 to 1024 [ 328.157469][T22779] EXT4-fs: Ignoring removed orlov option [ 328.174543][T22779] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 328.231321][T22779] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.290490][T22779] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 328.349945][T22330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.357771][ T29] audit: type=1400 audit(2000000756.304:2736): avc: denied { mounton } for pid=22795 comm="syz.1.8068" path="/proc/14/cgroup" dev="proc" ino=151552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 328.436783][T22802] loop3: detected capacity change from 0 to 1024 [ 328.444380][T22802] EXT4-fs: Ignoring removed orlov option [ 328.467054][T22806] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.8073'. [ 328.501188][T22809] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 328.531437][T22802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.622447][T22814] netlink: 161700 bytes leftover after parsing attributes in process `syz.9.8075'. [ 328.807368][ T29] audit: type=1326 audit(2000000756.764:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22823 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63783aeb9 code=0x7ffc0000 [ 328.809804][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.831349][ T29] audit: type=1326 audit(2000000756.764:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22823 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63783aeb9 code=0x7ffc0000 [ 328.903339][ T29] audit: type=1326 audit(2000000756.794:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22823 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff63783aeb9 code=0x7ffc0000 [ 328.927448][ T29] audit: type=1326 audit(2000000756.794:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22823 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63783aeb9 code=0x7ffc0000 [ 328.954921][ T29] audit: type=1326 audit(2000000756.794:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22823 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63783aeb9 code=0x7ffc0000 [ 328.981513][ T29] audit: type=1326 audit(2000000756.824:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22823 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff63783aeb9 code=0x7ffc0000 [ 329.041013][T22833] loop3: detected capacity change from 0 to 512 [ 329.106786][ T29] audit: type=1400 audit(2000000756.994:2743): avc: denied { recv } for pid=3455 comm="kworker/u8:7" saddr=10.128.0.163 src=46108 daddr=10.128.1.118 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 329.138075][T22833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.167460][T22833] ext4 filesystem being mounted at /1610/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.248534][ T29] audit: type=1326 audit(2000000757.204:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22823 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63783aeb9 code=0x7ffc0000 [ 329.251803][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.491268][T22847] loop9: detected capacity change from 0 to 512 [ 329.526899][T22847] EXT4-fs error (device loop9): __ext4_iget:5426: inode #11: block 1: comm syz.9.8086: invalid block [ 329.549006][T22847] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8086: couldn't read orphan inode 11 (err -117) [ 329.579632][T22847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.637817][T22330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.011736][T22863] loop8: detected capacity change from 0 to 2048 [ 330.077508][T22863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.109018][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8093'. [ 330.170452][T22871] netlink: 'syz.3.8094': attribute type 3 has an invalid length. [ 330.178370][T22871] netlink: 'syz.3.8094': attribute type 1 has an invalid length. [ 330.186201][T22871] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.8094'. [ 330.211232][T22872] loop9: detected capacity change from 0 to 512 [ 330.248293][T22872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.263453][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.275125][T22872] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.333902][T22872] EXT4-fs (loop9): shut down requested (0) [ 330.444733][T22330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.611919][T22899] loop8: detected capacity change from 0 to 512 [ 330.638596][T22899] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.8105: couldn't read orphan inode 26 (err -116) [ 330.654609][T22899] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.667442][T22899] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.718070][T17459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.801583][ T12] team0: left allmulticast mode [ 330.806718][ T12] team_slave_0: left allmulticast mode [ 330.812221][ T12] team_slave_1: left allmulticast mode [ 330.817882][ T12] team0: left promiscuous mode [ 330.822683][ T12] team_slave_0: left promiscuous mode [ 330.828205][ T12] team_slave_1: left promiscuous mode [ 330.833966][ T12] bridge0: port 4(team0) entered disabled state [ 330.867639][ T12] dummy0: left allmulticast mode [ 330.878293][ T12] dummy0: left promiscuous mode [ 330.883399][ T12] bridge0: port 3(dummy0) entered disabled state [ 330.911260][ T12] bridge_slave_1: left allmulticast mode [ 330.917074][ T12] bridge_slave_1: left promiscuous mode [ 330.923001][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.945296][ T12] bridge_slave_0: left allmulticast mode [ 330.951424][ T12] bridge_slave_0: left promiscuous mode [ 330.957203][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.996557][ T3653] SELinux: failure in sel_netif_sid_slow(), invalid network interface (74) [ 331.080275][ T12] team0: Port device bridge1 removed [ 331.130574][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.141475][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.152301][ T12] bond0 (unregistering): Released all slaves [ 331.245780][ T12] hsr_slave_0: left promiscuous mode [ 331.255878][ T12] hsr_slave_1: left promiscuous mode [ 331.268699][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.276256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.290350][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.297961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.313487][ T12] veth0_macvtap: left promiscuous mode [ 331.319462][ T12] veth1_vlan: left promiscuous mode [ 331.325078][ T12] veth0_vlan: left promiscuous mode [ 331.447310][ T12] team0 (unregistering): Port device team_slave_1 removed [ 331.459674][ T12] team0 (unregistering): Port device team_slave_0 removed [ 331.693915][ T12] IPVS: stop unused estimator thread 0... [ 331.806588][T22924] chnl_net:caif_netlink_parms(): no params data found [ 331.897370][T22924] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.904666][T22924] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.924447][T22924] bridge_slave_0: entered allmulticast mode [ 331.944684][T22924] bridge_slave_0: entered promiscuous mode [ 331.977584][T22924] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.984743][T22924] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.004356][T22924] bridge_slave_1: entered allmulticast mode [ 332.021701][T22924] bridge_slave_1: entered promiscuous mode [ 332.092534][T22924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.123259][T22924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.197676][T22924] team0: Port device team_slave_0 added [ 332.214848][T22924] team0: Port device team_slave_1 added [ 332.238389][T22924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.245427][T22924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.271600][T22924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.316463][T22924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.323589][T22924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.349752][T22924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.490493][T22924] hsr_slave_0: entered promiscuous mode [ 332.521252][T22924] hsr_slave_1: entered promiscuous mode [ 332.547194][T22924] debugfs: 'hsr0' already exists in 'hsr' [ 332.552992][T22924] Cannot create hsr debugfs directory [ 332.561762][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8133'. [ 332.570846][T22974] netlink: 'syz.3.8133': attribute type 30 has an invalid length. [ 332.627617][ T1826] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.661514][ T1826] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.686700][T22986] netlink: 'syz.1.8137': attribute type 21 has an invalid length. [ 332.695121][T22986] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8137'. [ 332.716799][ T1826] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.752518][T22986] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8137'. [ 332.752554][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 332.776860][T22986] netlink: 'syz.1.8137': attribute type 21 has an invalid length. [ 332.784762][T22986] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8137'. [ 332.786188][ T1826] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.810246][T22986] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8137'. [ 332.885104][T22924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.897562][T22924] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.910387][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.917667][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.933622][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.940793][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.967705][T22924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.017729][T23006] loop1: detected capacity change from 0 to 128 [ 333.053753][T22924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.135684][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 333.135702][ T29] audit: type=1326 audit(2000000761.084:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23014 comm="syz.1.8143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bcbd5aeb9 code=0x0 [ 333.240174][T22924] veth0_vlan: entered promiscuous mode [ 333.249399][T22924] veth1_vlan: entered promiscuous mode [ 333.267185][T22924] veth0_macvtap: entered promiscuous mode [ 333.275176][T22924] veth1_macvtap: entered promiscuous mode [ 333.289708][T22924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.302074][T22924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.622089][ T29] audit: type=1400 audit(2000000761.574:2754): avc: denied { append } for pid=23034 comm="syz.9.8147" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 333.986232][T23037] vxcan0: tx address claim with different name [ 334.347467][T23046] netlink: 'syz.4.8152': attribute type 1 has an invalid length. [ 334.422501][T23050] loop2: detected capacity change from 0 to 512 [ 334.451957][T23050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.476590][T23050] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.580641][T23061] EXT4-fs (loop2): shut down requested (2) [ 334.598055][T23063] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.8159'. [ 334.692085][T22924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.790609][T10497] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 335.002798][ T29] audit: type=1400 audit(2000000762.944:2755): avc: denied { ioctl } for pid=23077 comm="syz.4.8165" path="socket:[154045]" dev="sockfs" ino=154045 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 335.298957][T23106] loop3: detected capacity change from 0 to 512 [ 335.356805][ T29] audit: type=1400 audit(2000000763.304:2756): avc: denied { listen } for pid=23112 comm="syz.2.8180" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.429052][T23115] loop2: detected capacity change from 0 to 256 [ 335.586195][T23129] loop4: detected capacity change from 0 to 512 [ 335.597055][T23121] loop2: detected capacity change from 0 to 8192 [ 335.637765][T11293] kernel write not supported for file bpf-prog (pid: 11293 comm: kworker/1:4) [ 335.667067][T23129] EXT4-fs: Ignoring removed nobh option [ 335.692186][T23129] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.742774][T23129] EXT4-fs (loop4): 1 truncate cleaned up [ 335.768204][T23129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.816969][T23146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8196'. [ 335.858439][T23153] loop2: detected capacity change from 0 to 256 [ 335.876957][T23153] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.916585][T23153] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.939548][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.207580][T23190] loop3: detected capacity change from 0 to 256 [ 336.227726][T23190] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.279193][T23190] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.307077][T23198] loop2: detected capacity change from 0 to 1024 [ 336.348435][T23198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 336.361070][T23198] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.374357][T23198] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.8219: lblock 0 mapped to illegal pblock 0 (length 1) [ 336.388864][T23198] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.8219: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 336.392478][T23202] loop9: detected capacity change from 0 to 512 [ 336.431793][T23202] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 336.472983][T22924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 336.481217][T23202] EXT4-fs (loop9): 1 truncate cleaned up [ 336.488540][T23202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.587908][ T2965] kernel write not supported for file bpf-prog (pid: 2965 comm: kworker/0:2) [ 336.687251][T22330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.891563][ T29] audit: type=1400 audit(2000000764.844:2757): avc: denied { execstack } for pid=23233 comm="syz.9.8232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 337.189320][T23244] loop1: detected capacity change from 0 to 512 [ 337.230729][T23244] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.300642][T23249] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8239'. [ 337.334258][T23249] bond0: entered promiscuous mode [ 337.339437][T23249] bond_slave_0: entered promiscuous mode [ 337.345418][T23249] bond_slave_1: entered promiscuous mode [ 337.390293][T23249] ipvlan1: entered promiscuous mode [ 337.415979][T23249] ipvlan1: left promiscuous mode [ 337.426748][T23249] bond0: left promiscuous mode [ 337.427326][T23253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.431609][T23249] bond_slave_0: left promiscuous mode [ 337.431827][T23249] bond_slave_1: left promiscuous mode [ 337.568945][T23253] ext4 filesystem being mounted at /1682/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 337.656276][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.741470][T11293] hid_parser_main: 1 callbacks suppressed [ 337.741497][T11293] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 337.787541][T11293] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 337.999127][T23281] hid-generic 0000:0000:0000.0005: pid 23281 passed too large report [ 338.145863][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 338.161141][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 338.368185][T23305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 338.434244][T23305] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.488076][T23308] hid-generic 0000:0000:0000.0006: pid 23308 passed too large report [ 338.508875][T23305] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.8257: lblock 3 mapped to illegal pblock 3 (length 3) [ 338.537645][T23297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.561436][T23297] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.586543][T23305] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 338.598944][T23305] EXT4-fs (loop1): This should not happen!! Data will be lost [ 338.598944][T23305] [ 338.743807][T22924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.782422][T23316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8258'. [ 338.829790][T23316] bond0: entered promiscuous mode [ 338.835199][T23316] bond_slave_0: entered promiscuous mode [ 338.841030][T23316] bond_slave_1: entered promiscuous mode [ 338.849610][T23316] ipvlan1: entered promiscuous mode [ 338.850832][ T371] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:4: lblock 4 mapped to illegal pblock 4 (length 2) [ 338.857599][T23316] ipvlan1: left promiscuous mode [ 338.892866][ T371] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 338.894005][T23316] bond0: left promiscuous mode [ 338.905402][ T371] EXT4-fs (loop1): This should not happen!! Data will be lost [ 338.905402][ T371] [ 338.920203][T23316] bond_slave_0: left promiscuous mode [ 338.930105][T23316] bond_slave_1: left promiscuous mode [ 338.936057][T22531] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 338.961758][T22531] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 338.975790][T22531] EXT4-fs (loop1): This should not happen!! Data will be lost [ 338.975790][T22531] [ 339.026234][T22507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.136021][T23334] netlink: 'syz.3.8267': attribute type 21 has an invalid length. [ 339.144271][T23334] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8267'. [ 339.169396][T23340] EXT4-fs: Ignoring removed nobh option [ 339.190857][T23340] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 339.201660][T23334] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8267'. [ 339.211457][T23345] netlink: 'syz.3.8267': attribute type 21 has an invalid length. [ 339.211480][T23345] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8267'. [ 339.234180][T23340] EXT4-fs (loop1): 1 truncate cleaned up [ 339.242447][T23345] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8267'. [ 339.296384][T23340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.318375][T23348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 339.331029][T23348] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.361600][T23348] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.8273: lblock 3 mapped to illegal pblock 3 (length 3) [ 339.409746][T23348] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 339.422510][T23348] EXT4-fs (loop2): This should not happen!! Data will be lost [ 339.422510][T23348] [ 339.480874][T22507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.569796][ T12] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:0: lblock 4 mapped to illegal pblock 4 (length 2) [ 339.599943][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 339.612559][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 339.612559][ T12] [ 339.658955][ T52] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 339.695790][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 339.708477][ T52] EXT4-fs (loop2): This should not happen!! Data will be lost [ 339.708477][ T52] [ 339.753869][T23337] set_capacity_and_notify: 5 callbacks suppressed [ 339.753889][T23337] loop4: detected capacity change from 0 to 512 [ 339.760968][T22924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.833973][T23337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.866572][T23337] ext4 filesystem being mounted at /1688/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.072462][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.155396][T23393] loop2: detected capacity change from 0 to 128 [ 340.193466][T23393] bio_check_eod: 1 callbacks suppressed [ 340.193487][T23393] syz.2.8291: attempt to access beyond end of device [ 340.193487][T23393] loop2: rw=2049, sector=129, nr_sectors = 112 limit=128 [ 340.270937][T23400] loop9: detected capacity change from 0 to 512 [ 340.320603][T23400] EXT4-fs: Ignoring removed nobh option [ 340.363462][T23400] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 340.388020][T23410] loop4: detected capacity change from 0 to 128 [ 340.403119][T23400] EXT4-fs (loop9): 1 truncate cleaned up [ 340.422898][T23400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.443921][ T29] audit: type=1400 audit(2000000768.394:2758): avc: denied { watch watch_reads } for pid=23409 comm="syz.4.8298" path="/1691/file0/file1" dev="loop4" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 340.616430][T22330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.913477][T23443] loop4: detected capacity change from 0 to 512 [ 340.933351][T23447] loop3: detected capacity change from 0 to 512 [ 340.994465][T23447] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8313: bg 0: block 248: padding at end of block bitmap is not set [ 341.009742][T23443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.009917][T23447] Quota error (device loop3): write_blk: dquota write failed [ 341.029832][T23447] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 341.040711][T23447] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8313: Failed to acquire dquot type 1 [ 341.053281][T23447] EXT4-fs (loop3): 1 truncate cleaned up [ 341.060765][T23447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.073702][T23447] ext4 filesystem being mounted at /1650/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.109480][T23443] ext4 filesystem being mounted at /1696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.155594][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.181183][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.212432][T23458] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.213422][ T29] audit: type=1400 audit(2000000769.164:2759): avc: denied { connect } for pid=23460 comm="syz.3.8319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 341.219994][T23458] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.434531][T23458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.471577][T23458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.555705][T23475] loop9: detected capacity change from 0 to 128 [ 341.672373][T23475] syz.9.8323: attempt to access beyond end of device [ 341.672373][T23475] loop9: rw=2049, sector=129, nr_sectors = 112 limit=128 [ 341.756070][ T371] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.010152][T23497] netlink: 'syz.4.8333': attribute type 1 has an invalid length. [ 342.018221][T23497] netlink: 'syz.4.8333': attribute type 2 has an invalid length. [ 342.028107][T23497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8333'. [ 342.703611][T23514] loop3: detected capacity change from 0 to 1024 [ 342.710849][T23514] EXT4-fs: Ignoring removed orlov option [ 342.716739][T23514] EXT4-fs: inline encryption not supported [ 342.750933][T23514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.788223][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.876397][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8344'. [ 343.020336][T23528] loop3: detected capacity change from 0 to 2048 [ 343.080952][ T3305] loop3: p1 p2 [ 343.084998][T23530] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8348'. [ 343.094306][T23530] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8348'. [ 343.115472][T23528] loop3: p1 p2 [ 343.134628][ T29] audit: type=1400 audit(2000000771.084:2760): avc: denied { append } for pid=23527 comm="syz.3.8347" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.199444][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 343.213456][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 343.316527][T23541] loop3: detected capacity change from 0 to 2048 [ 343.395425][T23541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.437828][T22531] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 343.453406][T22531] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 343.465842][T22531] EXT4-fs (loop3): This should not happen!! Data will be lost [ 343.465842][T22531] [ 343.475553][T22531] EXT4-fs (loop3): Total free blocks count 0 [ 343.481653][T22531] EXT4-fs (loop3): Free/Dirty block details [ 343.487675][T22531] EXT4-fs (loop3): free_blocks=2415919504 [ 343.493431][T22531] EXT4-fs (loop3): dirty_blocks=16 [ 343.498606][T22531] EXT4-fs (loop3): Block reservation details [ 343.504626][T22531] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 343.546714][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.585055][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8358'. [ 343.640535][ T3002] loop2: p1 p2 [ 343.674549][ T3002] loop2: p1 p2 [ 343.700243][T23559] loop2: p1 p2 [ 343.793077][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 343.804609][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 343.837296][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 343.845476][T10497] Bluetooth: hci0: command 0x1003 tx timeout [ 343.849853][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 343.854280][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 343.878607][T23579] __nla_validate_parse: 1 callbacks suppressed [ 343.878627][T23579] netlink: 792 bytes leftover after parsing attributes in process `syz.2.8379'. [ 343.894504][T23579] netlink: 792 bytes leftover after parsing attributes in process `syz.2.8379'. [ 343.904061][T23579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8379'. [ 343.918208][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 343.929824][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 344.098908][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8374'. [ 344.215950][T23602] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.238818][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 344.256833][T23602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.274499][T23602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8380: bg 0: block 234: padding at end of block bitmap is not set [ 344.290325][T23602] EXT4-fs (loop3): Remounting filesystem read-only [ 344.311879][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.557529][T23620] batman_adv: batadv0: Adding interface: ipvlan2 [ 344.564004][T23620] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.589418][T23620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.600071][T23620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.611034][T23620] batman_adv: batadv0: Interface activated: ipvlan2 [ 344.867889][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8400'. [ 344.912605][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8390'. [ 345.204214][T23655] set_capacity_and_notify: 2 callbacks suppressed [ 345.204303][T23655] loop4: detected capacity change from 0 to 2048 [ 345.226358][T23655] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.258932][T23655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.276871][T23655] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8399: bg 0: block 234: padding at end of block bitmap is not set [ 345.291682][T23655] EXT4-fs (loop4): Remounting filesystem read-only [ 345.317713][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.354612][T23661] netlink: 'syz.3.8402': attribute type 21 has an invalid length. [ 345.362655][T23661] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8402'. [ 345.375199][T23661] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8402'. [ 345.528196][T23669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8404'. [ 345.564043][ T29] audit: type=1326 audit(2000000773.514:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.566452][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8406'. [ 345.588019][ T29] audit: type=1326 audit(2000000773.514:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.588058][ T29] audit: type=1326 audit(2000000773.514:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.588148][ T29] audit: type=1326 audit(2000000773.514:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.588183][ T29] audit: type=1326 audit(2000000773.514:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.588219][ T29] audit: type=1326 audit(2000000773.514:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.651495][ T29] audit: type=1326 audit(2000000773.514:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.741781][ T29] audit: type=1326 audit(2000000773.514:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.765540][ T29] audit: type=1326 audit(2000000773.514:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 345.897073][T23677] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 345.923644][ T29] audit: type=1326 audit(2000000773.864:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23672 comm="syz.4.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8025a6aeb9 code=0x7ffc0000 [ 346.155553][ T12] bridge_slave_1: left allmulticast mode [ 346.162358][ T12] bridge_slave_1: left promiscuous mode [ 346.168303][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.260581][T23700] loop4: detected capacity change from 0 to 1764 [ 346.273719][T23700] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 346.296178][ T12] bridge_slave_0: left allmulticast mode [ 346.302144][ T12] bridge_slave_0: left promiscuous mode [ 346.308620][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.323327][T10497] Bluetooth: hci0: command 0x1003 tx timeout [ 346.329467][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.419722][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.430256][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.440482][ T12] bond0 (unregistering): Released all slaves [ 346.562286][ T12] hsr_slave_0: left promiscuous mode [ 346.570690][ T12] hsr_slave_1: left promiscuous mode [ 346.577693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.585215][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.593281][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.600942][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.627929][ T12] veth1_macvtap: left promiscuous mode [ 346.633664][ T12] veth0_macvtap: left promiscuous mode [ 346.639613][ T12] veth1_vlan: left promiscuous mode [ 346.645144][ T12] veth0_vlan: left promiscuous mode [ 346.728270][ T12] team0 (unregistering): Port device team_slave_1 removed [ 346.739125][ T12] team0 (unregistering): Port device team_slave_0 removed [ 346.903325][T23695] chnl_net:caif_netlink_parms(): no params data found [ 346.960346][T23695] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.968306][T23695] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.975573][T23695] bridge_slave_0: entered allmulticast mode [ 346.982575][T23695] bridge_slave_0: entered promiscuous mode [ 346.989426][T23695] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.997390][T23695] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.004970][T23695] bridge_slave_1: entered allmulticast mode [ 347.011682][T23695] bridge_slave_1: entered promiscuous mode [ 347.038753][T23695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.051417][T23695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.091251][T23695] team0: Port device team_slave_0 added [ 347.098943][T23695] team0: Port device team_slave_1 added [ 347.109468][T23738] netlink: 'syz.4.8432': attribute type 3 has an invalid length. [ 347.125932][T23695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.133104][T23695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.159264][T23695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.184305][T23733] delete_channel: no stack [ 347.197911][T23695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.204927][T23695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.231648][T23695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.242292][T23606] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 347.275485][T23744] netlink: zone id is out of range [ 347.280770][T23744] netlink: zone id is out of range [ 347.286043][T23744] netlink: zone id is out of range [ 347.291297][T23744] netlink: zone id is out of range [ 347.296567][T23744] netlink: zone id is out of range [ 347.301807][T23744] netlink: zone id is out of range [ 347.307060][T23744] netlink: zone id is out of range [ 347.312195][T23744] netlink: zone id is out of range [ 347.312468][T23695] hsr_slave_0: entered promiscuous mode [ 347.317402][T23744] netlink: zone id is out of range [ 347.317416][T23744] netlink: zone id is out of range [ 347.354904][T23748] loop4: detected capacity change from 0 to 764 [ 347.401192][T23748] rock: directory entry would overflow storage [ 347.408771][T23748] rock: sig=0x4f50, size=4, remaining=3 [ 347.414410][T23748] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 347.422851][T23695] hsr_slave_1: entered promiscuous mode [ 347.430136][T23695] debugfs: 'hsr0' already exists in 'hsr' [ 347.436308][T23695] Cannot create hsr debugfs directory [ 347.453812][T23754] all (unregistering): Released all slaves [ 347.638907][T23695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.672065][T23695] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.704731][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.712053][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.739690][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.746875][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.911425][T23695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.976327][T23800] loop1: detected capacity change from 0 to 512 [ 347.992869][T23802] loop4: detected capacity change from 0 to 512 [ 348.006407][T23800] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.8455: inode has both inline data and extents flags [ 348.033915][T23800] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8455: couldn't read orphan inode 15 (err -117) [ 348.069848][T23802] ext4 filesystem being mounted at /1744/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.297450][T23695] veth0_vlan: entered promiscuous mode [ 348.320044][T23695] veth1_vlan: entered promiscuous mode [ 348.355909][T23695] veth0_macvtap: entered promiscuous mode [ 348.408235][T23695] veth1_macvtap: entered promiscuous mode [ 348.433028][T23695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.483129][T23695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.099199][T23885] program syz.6.8484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.196993][T23894] __nla_validate_parse: 8 callbacks suppressed [ 349.197149][T23894] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.8489'. [ 349.212922][T23894] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.8489'. [ 349.326236][T23902] bridge0: entered promiscuous mode [ 349.335356][T23902] bridge0: port 3(macvtap1) entered blocking state [ 349.342910][T23902] bridge0: port 3(macvtap1) entered disabled state [ 349.371793][T23902] macvtap1: entered allmulticast mode [ 349.377409][T23902] bridge0: entered allmulticast mode [ 349.390607][T23902] macvtap1: left allmulticast mode [ 349.396012][T23902] bridge0: left allmulticast mode [ 349.416984][T23902] bridge0: left promiscuous mode [ 349.498909][T23915] loop1: detected capacity change from 0 to 512 [ 349.549957][T23915] EXT4-fs mount: 4 callbacks suppressed [ 349.549998][T23915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.570758][T23915] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.622830][T22507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.826378][T23950] bridge0: port 3(macvtap1) entered blocking state [ 349.833283][T23950] bridge0: port 3(macvtap1) entered disabled state [ 349.840166][T23953] loop6: detected capacity change from 0 to 512 [ 349.850378][T23950] macvtap1: entered allmulticast mode [ 349.856062][T23950] bridge0: entered allmulticast mode [ 349.862748][T23953] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.8516: inode has both inline data and extents flags [ 349.867760][T23950] macvtap1: left allmulticast mode [ 349.881962][T23950] bridge0: left allmulticast mode [ 349.887856][T23953] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8516: couldn't read orphan inode 15 (err -117) [ 349.900897][T23953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.004157][T23695] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.039563][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8520'. [ 350.190048][T23983] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8529'. [ 350.450536][T23990] bridge0: entered promiscuous mode [ 350.458788][T23990] bridge0: port 3(macvtap1) entered blocking state [ 350.465638][T23990] bridge0: port 3(macvtap1) entered disabled state [ 350.473115][T23990] macvtap1: entered allmulticast mode [ 350.478588][T23990] bridge0: entered allmulticast mode [ 350.484479][T23990] macvtap1: left allmulticast mode [ 350.489682][T23990] bridge0: left allmulticast mode [ 350.496545][T23990] bridge0: left promiscuous mode [ 351.056590][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 351.056612][ T29] audit: type=1400 audit(2000000779.004:3333): avc: denied { listen } for pid=24044 comm="syz.1.8559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 351.390783][ T29] audit: type=1400 audit(2000000779.344:3334): avc: denied { ioctl } for pid=24068 comm="syz.4.8569" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 351.779325][T24072] loop1: detected capacity change from 0 to 2048 [ 351.847261][ T3305] loop1: p3 p4 < > [ 351.864728][ T3305] loop1: p3 start 11362048 is beyond EOD, truncated [ 351.910598][T24072] loop1: p3 p4 < > [ 351.956824][T24072] loop1: p3 start 11362048 is beyond EOD, truncated [ 351.964450][T24091] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8579'. [ 352.030736][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'. [ 352.111297][T24101] loop1: detected capacity change from 0 to 1024 [ 352.169220][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 352.218956][ T29] audit: type=1400 audit(2000000780.164:3335): avc: denied { getopt } for pid=24107 comm="syz.6.8586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.246549][T24101] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 352.311067][T24101] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.8584: lblock 2 mapped to illegal pblock 2 (length 1) [ 352.311188][T24101] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 352.311247][T24101] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.8584: lblock 0 mapped to illegal pblock 48 (length 1) [ 352.311330][T24101] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 352.311349][T24101] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8584: Failed to acquire dquot type 0 [ 352.311505][T24101] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 352.311585][T24101] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.8584: mark_inode_dirty error [ 352.311700][T24101] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 352.311736][T24101] EXT4-fs (loop1): 1 orphan inode deleted [ 352.312148][T24101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.317226][ T29] audit: type=1400 audit(2000000780.264:3336): avc: denied { create } for pid=24100 comm="syz.1.8584" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 352.354181][T22507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.354292][ T3455] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 352.354565][ T3455] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 352.354585][ T3455] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 352.355040][T22507] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 352.355127][T22507] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 352.355197][T22507] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 352.364172][ T3002] ================================================================== [ 352.364217][ T3002] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 352.364256][ T3002] [ 352.364262][ T3002] write to 0xffff88810e997480 of 4 bytes by task 3305 on cpu 0: [ 352.364281][ T3002] d_make_discardable+0x4f/0xa0 [ 352.364309][ T3002] simple_unlink+0x68/0x80 [ 352.364345][ T3002] shmem_unlink+0x12d/0x140 [ 352.364362][ T3002] vfs_unlink+0x28b/0x440 [ 352.364392][ T3002] do_unlinkat+0x1e2/0x4b0 [ 352.364412][ T3002] __x64_sys_unlink+0x2e/0x40 [ 352.364431][ T3002] x64_sys_call+0x2f48/0x3000 [ 352.364456][ T3002] do_syscall_64+0xc0/0x2a0 [ 352.364488][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.364514][ T3002] [ 352.364520][ T3002] read to 0xffff88810e997480 of 4 bytes by task 3002 on cpu 1: [ 352.364536][ T3002] do_readlinkat+0xa9/0x340 [ 352.364571][ T3002] __x64_sys_readlink+0x47/0x60 [ 352.364605][ T3002] x64_sys_call+0x2af1/0x3000 [ 352.364634][ T3002] do_syscall_64+0xc0/0x2a0 [ 352.364668][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.364695][ T3002] [ 352.364700][ T3002] value changed: 0x08300080 -> 0x00300180 [ 352.364715][ T3002] [ 352.364720][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 352.364749][ T3002] CPU: 1 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 352.364782][ T3002] Tainted: [W]=WARN [ 352.364790][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.364804][ T3002] ================================================================== [ 352.466513][ T29] audit: type=1326 audit(2000000780.414:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24118 comm="syz.2.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96413daeb9 code=0x7ffc0000 [ 352.466555][ T29] audit: type=1326 audit(2000000780.414:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24118 comm="syz.2.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96413daeb9 code=0x7ffc0000 [ 352.466719][ T29] audit: type=1326 audit(2000000780.414:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24118 comm="syz.2.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f96413daeb9 code=0x7ffc0000 [ 352.743041][T24135] syzkaller1: entered promiscuous mode [ 352.743066][T24135] syzkaller1: entered allmulticast mode