last executing test programs: 1m44.569229913s ago: executing program 32 (id=61): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m43.51084535s ago: executing program 33 (id=83): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xea1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1m30.451280925s ago: executing program 1 (id=423): unshare(0x2c020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x1581, &(0x7f00000006c0)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 1m30.343568658s ago: executing program 1 (id=427): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x800, 0x160862) close(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) sendfile(r0, r1, 0x0, 0x3) 1m30.28561615s ago: executing program 1 (id=428): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 1m30.150388485s ago: executing program 1 (id=432): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m30.092991977s ago: executing program 1 (id=434): r0 = inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.947176582s ago: executing program 1 (id=437): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m29.924682993s ago: executing program 34 (id=437): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m13.871761901s ago: executing program 7 (id=838): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2800000, &(0x7f0000000400)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae48dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca939f4a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf100000f9ee584eba0b99cede0241d74d6468b430caee15417485b0239ca00ed0a620ab32588cf24363082c90b627b75894b33fa8f7598bc42fa23f3f7c6f535ed0ec23c67426ab727e48ec42498ba25196d33a2ee826cac9af06a231585ee95b3c9229dcc96e3f9898cfa67e42823fafd5e8309333a94ef7f54fac637bc8112a78046df988fc3951094c5d1a144da7208a6eb552f869f0050000003582dc53418d52a4c0550f8530179a10b704802154f155a773404318a40ae5dd82771abe76ffad77c60ec4252c9e1614d5df73095e389309a1c10c97f47a7a3c16418e23a35b85c2e9f83be673f2"], 0x1, 0x55a, &(0x7f0000000b80)="$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") setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0xff}, 0xe) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 1m13.780777534s ago: executing program 7 (id=843): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x2, 0x0, 0x6}) 1m13.60319607s ago: executing program 7 (id=847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) 1m13.556116772s ago: executing program 7 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 1m13.469044035s ago: executing program 7 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) 1m13.275178552s ago: executing program 7 (id=858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xc}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x10, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, {0xffff, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 1m13.249759092s ago: executing program 35 (id=858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xc}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x10, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, {0xffff, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 49.820375137s ago: executing program 3 (id=1477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x62f, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x94) 49.786968408s ago: executing program 3 (id=1479): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) timer_create(0x2, 0x0, &(0x7f0000044000)) 49.650571043s ago: executing program 3 (id=1482): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 49.15722502s ago: executing program 3 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 49.115916542s ago: executing program 3 (id=1491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 48.830832112s ago: executing program 3 (id=1504): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000009}) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x2, 0xd}, 0xb) 48.812861742s ago: executing program 36 (id=1504): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000009}) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x2, 0xd}, 0xb) 45.065942763s ago: executing program 6 (id=1620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 45.003255645s ago: executing program 6 (id=1621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25120000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x24004005}, 0x40000) 45.002983145s ago: executing program 6 (id=1623): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(r0, 0x0, 0xffffffffffffff53) write$P9_RFLUSH(r0, 0x0, 0x0) 44.734234964s ago: executing program 6 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 44.653938107s ago: executing program 6 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfdfc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) 44.57519978s ago: executing program 6 (id=1634): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000040)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouser_xattr}, {@resgid}, {@acl}, {@inode_readahead_blks}]}, 0x0, 0x499, &(0x7f0000000ec0)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)) 44.56307249s ago: executing program 37 (id=1634): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000040)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouser_xattr}, {@resgid}, {@acl}, {@inode_readahead_blks}]}, 0x0, 0x499, &(0x7f0000000ec0)="$eJzs289rHGUfAPDvTLKb9u2P5O3bV22tGi1CUEyatGoPXpQKIhUFPdRjTLYldNtIE8XWYlMRT4IU9CweRf8CbyKIehK8evIkhaK9tPViZCYzySbdbEKzzbbdzwdm9nlmntl5vju/nn2e3QC61mA2SyK2R8RvEdG/kF1eYHDh5frV8xM3rp6fSGJ+/vU/k7zctavnJ8qi5XbbisxQGpF+lBQ7WW7m7LmT4/V67UyRH5k99fbIzNlzT717avxE7UTt9Njhw4cOjj77zNjTbYkzi+va3g+m9+156c1Lr0wcu/TWT99k9d1erG+Mo10Gs8D/ms+tXPd4u3fWYTvyeV8+T3o7XBnWrScissNVya///uiJpYPXHy9+2NHKAbdV9mzqW3313DxwD0tivSUrDfcM4O5XPuiz77/ltAnNjjvGlecXvgBlcV8vpoU1vZEWZSqL32/bbzAijs39/UU2xW3qhwAAaPTJxOdHq9EX79/4+uWs7dG/uCaN+/LX3/P5zmIMZSAi/hsRuyLifxGxOyL+H5GXvT8iHthgfW5u/6SXN/iWLWXtv+eKsa3l7b+y9RcDPRHxT9EGHIhKcnyqXjtQfCZDUenL8qMt9vHdkV8/XW1dY/svm7L9l23Boh6Xe1d00E2Oz45HZSNRL7lyMWJvb7P4k8WRgCQi9kTE3sWt1jXAs7NMTD3x1b7VCq0dfwttGGea/zILby6Lfy5WxF9KGscnp24anxzZEvXagZHyrLjZz798/Npq+99Q/G1wpbbw2nD8VxYZSBrHa2fau/9bPP/TavJGPs5cLcYc3xufnT0zGlFNjub5alE2Xz62tG2ZL8tn5//Q/ubX/65imyz+ByMiO4kfioiHI+KRou6PRsRjEbG/RYw/vrB2/JF26PhfjJhsev9bPP9XHP+z506Wt8alJS0TPSd/+Ha1/a/v+B/KU0PFkvz+t4Zm1eltUuVb/dwAAADgbpLmv4FP0uHFdJoODy/8hn93/CetT8/MPnl8+p3Tkwu/lR+ISlr2dPUX/aH1qXptNJkr3rGSHIl6bazoKy77Sw8W/caf9WzN88MT0/XJDscO3W7bKtd/5o+eTtcOuM22Nl06Vt30igAdsHIcPV2evfBquBnAvcr/taF7rXH9p5tVD2Dzef5D92p2/V9YkTcWAPcmz3/oXq5/6FLp952uAdBBnv/Qldb8835nElsal1RbF67eIXVundgREessfKcelDyxGEWkrQpvj85XVWIjiU7fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrj3wAAAP//ccfYUw==") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)) 17.447084233s ago: executing program 9 (id=2255): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000040)=0x7) 17.162736723s ago: executing program 9 (id=2260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4002b00", 0x2a}], 0x1}, 0x4804) 16.999335159s ago: executing program 9 (id=2264): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r0, 0x0) 16.988254169s ago: executing program 9 (id=2266): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 16.941506211s ago: executing program 9 (id=2268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 16.577098184s ago: executing program 9 (id=2277): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x6a0a, @remote, 0x8}}}, 0x32) 16.509325966s ago: executing program 38 (id=2277): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x6a0a, @remote, 0x8}}}, 0x32) 3.333011194s ago: executing program 0 (id=2534): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3825d045, 0x81}, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 3.214965558s ago: executing program 0 (id=2538): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000) recvmsg(r0, &(0x7f0000000d00)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.033894054s ago: executing program 0 (id=2541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000000800034000000004400000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}}, 0x40) 2.932188608s ago: executing program 0 (id=2542): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb7078000) syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 2.635475278s ago: executing program 0 (id=2547): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) 2.198415044s ago: executing program 0 (id=2561): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 1.867284075s ago: executing program 8 (id=2568): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/184, 0xb8}, 0x40000002) 1.866960525s ago: executing program 8 (id=2570): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 1.845719156s ago: executing program 8 (id=2571): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.007154875s ago: executing program 5 (id=2578): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @loopback}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x40c0) 986.247805ms ago: executing program 8 (id=2579): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0xe}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="250347c600e60000000008"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 958.796526ms ago: executing program 8 (id=2580): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}, 0x4}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 895.776819ms ago: executing program 8 (id=2581): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) 895.455549ms ago: executing program 5 (id=2582): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x3d, &(0x7f00000003c0)={0x32, 0x800, 0x8}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r2, &(0x7f00000005c0)=""/180, 0xb4) 864.69073ms ago: executing program 2 (id=2583): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) 800.572922ms ago: executing program 5 (id=2585): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 751.180294ms ago: executing program 5 (id=2587): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) unshare(0x2040400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) pselect6(0x40, &(0x7f0000000080)={0x1, 0xfff, 0x15f, 0x5, 0x3, 0x9, 0x8, 0x9}, 0x0, &(0x7f0000000100)={0x197, 0xffffffffffffffff, 0x82c7, 0x9, 0x3, 0x8, 0x10000, 0x1ff}, &(0x7f0000000140), 0x0) 745.699244ms ago: executing program 5 (id=2588): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000140)={[{@block_validity}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a"], 0x54}}, 0x4800) 663.519517ms ago: executing program 5 (id=2589): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 663.231477ms ago: executing program 2 (id=2590): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='comm\x00') writev(r2, &(0x7f0000000280)=[{&(0x7f0000000140)="a9", 0x1}], 0x1) 583.60526ms ago: executing program 2 (id=2591): clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {r0, r1+10000000}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 299.60111ms ago: executing program 4 (id=2596): pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x4}, 0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000009}) write$P9_RFSYNC(r1, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) 262.6378ms ago: executing program 2 (id=2597): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x27, 0x1, 0x70bd27, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x2008000) 251.053931ms ago: executing program 4 (id=2598): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000480)=@req3={0x3, 0xb, 0x7fff, 0x100, 0x1ff, 0x0, 0x1000}, 0x1c) 147.180424ms ago: executing program 4 (id=2599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0xc, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6be, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x1, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x8, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0xfe3, 0x7, 0x0, 0x8, 0x7, 0x4, 0x800, 0x101, 0x401, 0x2, 0xfe, 0xd, 0x9, 0x7, 0x401, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x5, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0x3, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x0, 0x36ae765f, 0x401, 0x9, 0x200000, 0x9, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x3, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x7ff, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 120.351526ms ago: executing program 2 (id=2600): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) 103.074076ms ago: executing program 4 (id=2601): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) close(0x3) 7.220399ms ago: executing program 4 (id=2602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x1, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.93398ms ago: executing program 4 (id=2603): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 0s ago: executing program 2 (id=2604): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0xa040) open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000301"], 0x0) kernel console output (not intermixed with test programs): timestamps until 2038-01-19 (0x7fffffff) [ 80.450893][ T7312] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 2: comm syz.2.1311: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.450963][ T7310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.467134][ T6397] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.480650][ T7312] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.484930][ T7312] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 48: comm syz.2.1311: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.485092][ T6397] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 80.494022][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.494036][ C0] EXT4-fs (loop2): initial error at time 1775082334: ext4_map_blocks:786: inode 3: block 2 [ 80.494082][ C0] EXT4-fs (loop2): last error at time 1775082334: ext4_map_blocks:786: inode 3: block 2 [ 80.494242][ T7312] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.544756][ T7312] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1311: Failed to acquire dquot type 0 [ 80.565884][ T7312] loop2: lost filesystem error report for type 5 error -117 [ 80.566000][ T7312] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 80.583154][ T7312] loop2: lost filesystem error report for type 5 error -117 [ 80.583274][ T7312] EXT4-fs error (device loop2): ext4_evict_inode:265: inode #11: comm syz.2.1311: mark_inode_dirty error [ 80.607673][ T7312] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.608587][ T7312] EXT4-fs warning (device loop2): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 80.630647][ T7312] EXT4-fs (loop2): 1 orphan inode deleted [ 80.637178][ T7312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.651854][ T50] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.676240][ T50] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 80.680676][ T50] EXT4-fs error (device loop2): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0 [ 80.717411][ T7312] EXT4-fs (loop2): shut down requested (2) [ 80.756199][ T7333] loop3: detected capacity change from 0 to 512 [ 80.763802][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.764502][ T7333] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.802794][ T7335] loop6: detected capacity change from 0 to 1024 [ 80.822920][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.823489][ T7335] EXT4-fs: Ignoring removed orlov option [ 80.839380][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.840698][ T7333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.894256][ T7335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.909662][ T7333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.925679][ T7333] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.948047][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.982093][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.021302][ T7349] loop3: detected capacity change from 0 to 512 [ 81.040031][ T7349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.056902][ T7349] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.106152][ T7357] loop8: detected capacity change from 0 to 512 [ 81.117137][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.129119][ T7359] loop6: detected capacity change from 0 to 512 [ 81.145023][ T7359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.164399][ T7357] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.166696][ T7359] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.187587][ T7357] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.198655][ T7364] EXT4-fs: Ignoring removed bh option [ 81.204613][ T7364] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.229895][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.244203][ T7364] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 2: comm syz.3.1328: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.276626][ T7364] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 81.278024][ T7364] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 48: comm syz.3.1328: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.280589][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 81.288833][ T7364] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 81.301275][ C0] EXT4-fs (loop3): initial error at time 1775082335: ext4_map_blocks:786 [ 81.308301][ T7364] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1328: Failed to acquire dquot type 0 [ 81.316704][ C0] : inode 3: block 2 [ 81.316724][ C0] EXT4-fs (loop3): last error at time 1775082335: ext4_map_blocks:786 [ 81.325625][ T7364] loop3: lost filesystem error report for type 5 error -117 [ 81.336364][ C0] : inode 3: block 48 [ 81.381140][ T7364] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 81.391188][ T7364] loop3: lost filesystem error report for type 5 error -117 [ 81.391385][ T7364] EXT4-fs error (device loop3): ext4_evict_inode:265: inode #11: comm syz.3.1328: mark_inode_dirty error [ 81.411896][ T7364] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.412011][ T7364] EXT4-fs warning (device loop3): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 81.411988][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.455835][ T7364] EXT4-fs (loop3): 1 orphan inode deleted [ 81.466001][ T7364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.478388][ T50] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 81.501245][ T50] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 81.504477][ T50] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0 [ 81.549179][ T7378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.639453][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.660345][ T3310] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 81.699002][ T3310] loop3: lost filesystem error report for type 5 error -117 [ 81.699169][ T3310] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 81.730380][ T3310] loop3: lost filesystem error report for type 5 error -117 [ 81.730628][ T3310] EXT4-fs error (device loop3): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 81.769562][ T3310] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 81.779380][ T7388] netlink: 'syz.3.1339': attribute type 29 has an invalid length. [ 81.798267][ T7388] netlink: 'syz.3.1339': attribute type 29 has an invalid length. [ 81.808554][ T7388] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1339'. [ 81.839411][ T7390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.852848][ T7390] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1341: invalid indirect mapped block 4294967295 (level 1) [ 81.870909][ T7390] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.880591][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 81.896178][ C1] EXT4-fs (loop3): initial error at time 1775082335: ext4_free_branches:1023: inode 11 [ 81.905849][ C1] EXT4-fs (loop3): last error at time 1775082335: ext4_free_branches:1023: inode 11 [ 81.915352][ T7390] EXT4-fs (loop3): Remounting filesystem read-only [ 81.925415][ T7390] EXT4-fs (loop3): 2 truncates cleaned up [ 81.968949][ T7390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.026980][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.089635][ T7400] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.524473][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 82.981522][ T7477] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.031362][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1379'. [ 83.040617][ T7477] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.127390][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 83.127405][ T28] audit: type=1400 audit(1775082336.884:684): avc: denied { setattr } for pid=7474 comm="syz.5.1376" path="/216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.222630][ T7491] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1382'. [ 83.257469][ T3624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.379406][ T7503] vlan2: entered allmulticast mode [ 83.390711][ T7503] bridge0: entered allmulticast mode [ 83.406368][ T7503] bridge0: port 3(vlan2) entered blocking state [ 83.420655][ T7503] bridge0: port 3(vlan2) entered disabled state [ 83.560120][ T7515] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.591327][ T7515] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 83.621451][ T7515] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 83.630361][ T7519] EXT4-fs: Ignoring removed i_version option [ 83.639504][ T7515] System zones: 0-2, 18-18, 34-35 [ 83.655792][ T7515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.677893][ T28] audit: type=1400 audit(1775082337.434:685): avc: denied { read } for pid=7522 comm="syz.5.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.697240][ T7519] EXT4-fs: Ignoring removed bh option [ 83.738302][ T7519] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 83.752758][ T7515] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 83.753909][ T7519] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 83.779843][ T7519] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.791050][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.812105][ T7519] EXT4-fs (loop8): orphan cleanup on readonly fs [ 83.820711][ T7519] Quota error (device loop8): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 83.857638][ T7527] set_capacity_and_notify: 7 callbacks suppressed [ 83.857675][ T7527] loop6: detected capacity change from 0 to 512 [ 83.886472][ T7519] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 83.901460][ T7519] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 83.906891][ T7527] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.908294][ T7519] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1395: bad orphan inode 11 [ 83.925170][ T7519] loop8: lost filesystem error report for type 5 error -117 [ 83.930425][ T7519] ext4_test_bit(bit=10, block=1) = 0 [ 83.937820][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 83.937851][ C0] EXT4-fs (loop8): initial error at time 1775082337: ext4_orphan_get:1423 [ 83.937871][ C0] EXT4-fs (loop8): last error at time 1775082337: ext4_orphan_get:1423 [ 83.937953][ T7527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.943754][ T7519] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.993113][ T7527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.020544][ T7527] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.021154][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.053215][ T28] audit: type=1400 audit(1775082337.804:686): avc: denied { ioctl } for pid=7511 comm="syz.2.1391" path="socket:[18839]" dev="sockfs" ino=18839 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.105116][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.186073][ T7532] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1398'. [ 84.291623][ T7550] loop2: detected capacity change from 0 to 256 [ 84.302298][ T7550] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.324283][ T7550] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.477834][ T7567] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.530204][ T7569] serio: Serial port ttyS3 [ 84.640013][ T7583] loop5: detected capacity change from 0 to 512 [ 84.687432][ T7583] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.697475][ T28] audit: type=1400 audit(1775082338.454:687): avc: denied { sys_module } for pid=7586 comm="syz.2.1421" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.747052][ T7583] EXT4-fs (loop5): 1 truncate cleaned up [ 84.753500][ T7583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.787244][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.812088][ T7601] loop2: detected capacity change from 0 to 256 [ 84.838461][ T7601] vfat: Unknown parameter 'mixed' [ 84.849798][ T7605] loop8: detected capacity change from 0 to 256 [ 84.929922][ T7609] syzkaller1: entered promiscuous mode [ 84.946407][ T7609] syzkaller1: entered allmulticast mode [ 84.952318][ T7605] FAT-fs (loop8): Directory bread(block 64) failed [ 84.965019][ T7605] FAT-fs (loop8): Directory bread(block 65) failed [ 84.985385][ T7605] FAT-fs (loop8): Directory bread(block 66) failed [ 84.992163][ T7605] FAT-fs (loop8): Directory bread(block 67) failed [ 85.013191][ T7605] FAT-fs (loop8): Directory bread(block 68) failed [ 85.035758][ T7605] FAT-fs (loop8): Directory bread(block 69) failed [ 85.050632][ T7605] FAT-fs (loop8): Directory bread(block 70) failed [ 85.073689][ T7605] FAT-fs (loop8): Directory bread(block 71) failed [ 85.080232][ T7605] FAT-fs (loop8): Directory bread(block 72) failed [ 85.087639][ T7605] FAT-fs (loop8): Directory bread(block 73) failed [ 85.143703][ T7605] syz.8.1428: attempt to access beyond end of device [ 85.143703][ T7605] loop8: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 85.178390][ T7605] syz.8.1428: attempt to access beyond end of device [ 85.178390][ T7605] loop8: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 85.260810][ T7634] SELinux: failed to load policy [ 85.402438][ T7641] loop8: detected capacity change from 0 to 512 [ 85.428626][ T7641] EXT4-fs (loop8): 1 truncate cleaned up [ 85.441325][ T7641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.700529][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.757994][ T28] audit: type=1400 audit(1775082339.514:688): avc: denied { prog_load } for pid=7670 comm="syz.5.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.782336][ T28] audit: type=1400 audit(1775082339.514:689): avc: denied { bpf } for pid=7670 comm="syz.5.1457" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.803000][ T28] audit: type=1400 audit(1775082339.514:690): avc: denied { read write } for pid=3624 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.827455][ T28] audit: type=1400 audit(1775082339.514:691): avc: denied { open } for pid=3624 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.869392][ T28] audit: type=1400 audit(1775082339.514:692): avc: denied { ioctl } for pid=3624 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.192446][ T7701] loop2: detected capacity change from 0 to 512 [ 86.213879][ T7701] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.1471: corrupted in-inode xattr: invalid ea_ino [ 86.268983][ T7701] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.280586][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 86.296162][ C1] EXT4-fs (loop2): initial error at time 1775082340: ext4_iget_extra_inode:5040: inode 15 [ 86.298072][ T7701] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1471: couldn't read orphan inode 15 (err -117) [ 86.306084][ C1] EXT4-fs (loop2): last error at time 1775082340: ext4_iget_extra_inode:5040: inode 15 [ 86.337916][ T7701] loop2: lost filesystem error report for type 5 error -117 [ 86.345742][ T7701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.512566][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.723144][ T7708] loop5: detected capacity change from 0 to 512 [ 86.737536][ T7708] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 86.781236][ T7708] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 86.794977][ T7708] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1475: bad orphan inode 4 [ 86.834264][ T7708] loop5: lost filesystem error report for type 5 error -117 [ 86.834400][ T7708] EXT4-fs (loop5): Remounting filesystem read-only [ 86.841805][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 86.841825][ C0] EXT4-fs (loop5): initial error at time 1775082340: ext4_orphan_get:1423 [ 86.841851][ C0] EXT4-fs (loop5): last error at time 1775082340: ext4_orphan_get:1423 [ 86.873170][ T7708] EXT4-fs (loop5): 1 orphan inode deleted [ 86.879327][ T7708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.925219][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.023724][ T7722] program syz.2.1480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.041494][ T7718] loop3: detected capacity change from 0 to 2048 [ 87.083423][ T7726] loop2: detected capacity change from 0 to 512 [ 87.108355][ T7726] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.120189][ T7726] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 87.132629][ T7726] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1481: Corrupt directory, running e2fsck is recommended [ 87.172332][ T7726] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 87.181978][ T7726] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.1481: corrupted in-inode xattr: invalid ea_ino [ 87.196743][ T7726] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.200588][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 87.216111][ C1] EXT4-fs (loop2): initial error at time 1775082340: ext4_iget_extra_inode:5040: inode 15 [ 87.226010][ C1] EXT4-fs (loop2): last error at time 1775082340: ext4_iget_extra_inode:5040: inode 15 [ 87.236036][ T7726] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1481: couldn't read orphan inode 15 (err -117) [ 87.250641][ T7726] loop2: lost filesystem error report for type 5 error -117 [ 87.251424][ T7726] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #2: comm syz.2.1481: corrupted xattr block 255: invalid header [ 87.290835][ T7726] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 87.377716][ T7726] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.157107][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 88.157197][ T28] audit: type=1400 audit(1775082341.914:788): avc: denied { append } for pid=7807 comm="syz.2.1515" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.187738][ T2964] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 88.213234][ T28] audit: type=1400 audit(1775082341.914:789): avc: denied { create } for pid=7810 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.242988][ T28] audit: type=1400 audit(1775082341.914:790): avc: denied { map } for pid=7807 comm="syz.2.1515" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.267064][ T28] audit: type=1400 audit(1775082341.914:791): avc: denied { execute } for pid=7807 comm="syz.2.1515" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.306600][ T7821] rock: directory entry would overflow storage [ 88.315884][ T7821] rock: sig=0x66, size=4, remaining=3 [ 88.350610][ T28] audit: type=1400 audit(1775082341.914:792): avc: denied { ioctl } for pid=7810 comm="syz.5.1516" path="socket:[19656]" dev="sockfs" ino=19656 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.380918][ T28] audit: type=1400 audit(1775082341.954:793): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 88.413107][ T28] audit: type=1400 audit(1775082341.974:794): avc: denied { ioctl } for pid=7813 comm="syz.6.1518" path="socket:[19732]" dev="sockfs" ino=19732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.465539][ T7838] SET target dimension over the limit! [ 88.467659][ T1427] bond0 (unregistering): Released all slaves [ 88.472445][ T28] audit: type=1400 audit(1775082341.994:795): avc: denied { search } for pid=3039 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.520689][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1521'. [ 88.537040][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1521'. [ 88.547195][ T28] audit: type=1400 audit(1775082341.994:796): avc: denied { search } for pid=3039 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.583156][ T28] audit: type=1400 audit(1775082341.994:797): avc: denied { search } for pid=3039 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.622806][ T1427] hsr_slave_0: left promiscuous mode [ 88.628469][ T1427] hsr_slave_1: left promiscuous mode [ 88.708931][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1531'. [ 88.718528][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1531'. [ 88.936984][ T7880] syzkaller1: entered promiscuous mode [ 88.948083][ T7880] syzkaller1: entered allmulticast mode [ 88.984133][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 89.041431][ T7911] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1546'. [ 89.048479][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.057680][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.070725][ T7793] bridge_slave_0: entered allmulticast mode [ 89.077260][ T7793] bridge_slave_0: entered promiscuous mode [ 89.088547][ T1427] IPVS: stop unused estimator thread 0... [ 89.090886][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.105072][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.112247][ T7793] bridge_slave_1: entered allmulticast mode [ 89.118707][ T7793] bridge_slave_1: entered promiscuous mode [ 89.135195][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.145747][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.167075][ T7793] team0: Port device team_slave_0 added [ 89.175125][ T7793] team0: Port device team_slave_1 added [ 89.197821][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.204817][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.232289][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.244013][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.251276][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.263371][ T7926] set_capacity_and_notify: 3 callbacks suppressed [ 89.263387][ T7926] loop8: detected capacity change from 0 to 512 [ 89.277362][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.342562][ T7793] hsr_slave_0: entered promiscuous mode [ 89.348675][ T7793] hsr_slave_1: entered promiscuous mode [ 89.353319][ T7926] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.460295][ T7948] loop8: detected capacity change from 0 to 1024 [ 89.478468][ T7948] EXT4-fs: inline encryption not supported [ 89.493500][ T7793] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.503386][ T7948] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 89.503386][ T7948] [ 89.517689][ T7793] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 89.538835][ T7793] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 89.569579][ T7793] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 89.593254][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1559'. [ 89.605852][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.613085][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.620358][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.627511][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.701326][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.726640][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.747508][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.766121][ T7982] syzkaller1: entered promiscuous mode [ 89.771975][ T7982] syzkaller1: entered allmulticast mode [ 89.783954][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.808532][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.815688][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.828188][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.835291][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.926009][ T7793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.002894][ T7971] loop2: detected capacity change from 0 to 32768 [ 90.010996][ T8008] loop8: detected capacity change from 0 to 256 [ 90.047307][ T8008] FAT-fs (loop8): Directory bread(block 64) failed [ 90.062394][ T3303] loop2: p1 p3 < > [ 90.068730][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.070836][ T7971] loop2: p1 p3 < > [ 90.081030][ T8008] FAT-fs (loop8): Directory bread(block 65) failed [ 90.100179][ T8008] FAT-fs (loop8): Directory bread(block 66) failed [ 90.132251][ T8008] FAT-fs (loop8): Directory bread(block 67) failed [ 90.138812][ T8008] FAT-fs (loop8): Directory bread(block 68) failed [ 90.158947][ T8008] FAT-fs (loop8): Directory bread(block 69) failed [ 90.180525][ T8008] FAT-fs (loop8): Directory bread(block 70) failed [ 90.213684][ T8008] FAT-fs (loop8): Directory bread(block 71) failed [ 90.232298][ T8008] FAT-fs (loop8): Directory bread(block 72) failed [ 90.238847][ T8008] FAT-fs (loop8): Directory bread(block 73) failed [ 90.297117][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 90.316390][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.340920][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 90.340999][ T8008] syz.8.1570: attempt to access beyond end of device [ 90.340999][ T8008] loop8: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 90.365796][ T8008] loop2: detected capacity change from 0 to 7 [ 90.379815][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.440858][ T7793] veth0_vlan: entered promiscuous mode [ 90.457513][ T7793] veth1_vlan: entered promiscuous mode [ 90.494510][ T7793] veth0_macvtap: entered promiscuous mode [ 90.512436][ T7793] veth1_macvtap: entered promiscuous mode [ 90.555437][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.575039][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.590060][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.610119][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.610229][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.610263][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.626751][ T8064] loop2: detected capacity change from 0 to 512 [ 90.670202][ T8064] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.760218][ T8055] loop8: detected capacity change from 0 to 32768 [ 90.810982][ T3303] loop8: p1 p3 < > [ 90.828817][ T8055] loop8: p1 p3 < > [ 90.847312][ T8079] team0: Port device syz_tun added [ 90.872114][ T8079] team0: Port device syz_tun removed [ 90.887991][ T8079] bridge_slave_0: left allmulticast mode [ 90.893901][ T8079] bridge_slave_0: left promiscuous mode [ 90.900857][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.925984][ T8079] bridge_slave_1: left allmulticast mode [ 90.936567][ T8079] bridge_slave_1: left promiscuous mode [ 90.944704][ T8083] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1595'. [ 90.947783][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.976413][ T8079] bond0: (slave bond_slave_0): Releasing backup interface [ 90.983882][ T8085] loop9: detected capacity change from 0 to 512 [ 90.994590][ T8079] bond0: (slave bond_slave_1): Releasing backup interface [ 91.024349][ T8085] EXT4-fs (loop9): 1 orphan inode deleted [ 91.033923][ T8079] team0: Port device team_slave_0 removed [ 91.042505][ T6399] EXT4-fs error (device loop9): ext4_release_dquot:7062: comm kworker/u8:14: Failed to release dquot type 1 [ 91.054486][ T8085] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.075058][ T8079] team0: Port device team_slave_1 removed [ 91.076927][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 91.081331][ T8079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.092419][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 91.113801][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 91.122444][ T8094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 91.125251][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 91.142997][ T8079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.152841][ T8079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.183564][ T8095] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.253672][ T8105] loop5: detected capacity change from 0 to 512 [ 91.270468][ T8105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.270862][ T8105] EXT4-fs: Ignoring removed oldalloc option [ 91.272241][ T8105] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 91.272275][ T8105] System zones: 0-2, 18-18, 34-34 [ 91.272414][ T8105] EXT4-fs (loop5): orphan cleanup on readonly fs [ 91.273019][ T8105] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 91.273290][ T8105] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 91.273459][ T8105] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.1604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 91.273596][ T8105] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 91.280588][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 91.280623][ C0] EXT4-fs (loop5): last error at time 1775082345: ext4_ext_check_inode:521: inode 13 [ 91.280926][ T8105] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1604: couldn't read orphan inode 13 (err -117) [ 91.280999][ T8105] loop5: lost filesystem error report for type 5 error -117 [ 91.642075][ T8139] team0: Port device syz_tun added [ 91.675761][ T23] IPVS: starting estimator thread 0... [ 91.687289][ T8139] team0: Port device syz_tun removed [ 91.710932][ T8139] bridge_slave_0: left allmulticast mode [ 91.716656][ T8139] bridge_slave_0: left promiscuous mode [ 91.722591][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.743576][ T8139] bridge_slave_1: left allmulticast mode [ 91.756395][ T8139] bridge_slave_1: left promiscuous mode [ 91.766697][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.770640][ T8145] IPVS: using max 2352 ests per chain, 117600 per kthread [ 91.794892][ T8139] bond0: (slave bond_slave_0): Releasing backup interface [ 91.813415][ T8139] bond0: (slave bond_slave_1): Releasing backup interface [ 91.819028][ T8158] loop2: detected capacity change from 0 to 256 [ 91.830101][ T8158] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.842404][ T8139] team0: Port device team_slave_0 removed [ 91.855126][ T8139] team0: Port device team_slave_1 removed [ 91.868625][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.885424][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.891646][ T8158] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 91.902296][ T8158] FAT-fs (loop2): Filesystem has been set read-only [ 91.903244][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.908892][ T8158] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 91.930498][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.947330][ T8139] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.473707][ T1427] bond0 (unregistering): Released all slaves [ 92.567297][ T8179] chnl_net:caif_netlink_parms(): no params data found [ 92.572836][ T8199] raw_sendmsg: syz.8.1640 forgot to set AF_INET. Fix it! [ 92.604552][ T1427] hsr_slave_0: left promiscuous mode [ 92.617001][ T1427] hsr_slave_1: left promiscuous mode [ 92.671443][ T8204] sctp: [Deprecated]: syz.8.1641 (pid 8204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.671443][ T8204] Use struct sctp_sack_info instead [ 92.833603][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.841624][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.848890][ T8179] bridge_slave_0: entered allmulticast mode [ 92.855726][ T8179] bridge_slave_0: entered promiscuous mode [ 92.863626][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.870755][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.878002][ T8179] bridge_slave_1: entered allmulticast mode [ 92.892037][ T8179] bridge_slave_1: entered promiscuous mode [ 92.959263][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.994493][ T1427] IPVS: stop unused estimator thread 0... [ 93.002418][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.104255][ T8179] team0: Port device team_slave_0 added [ 93.114996][ T8179] team0: Port device team_slave_1 added [ 93.161436][ T8245] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 93.168285][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 93.168298][ T28] audit: type=1400 audit(1775082346.924:851): avc: denied { relabelfrom } for pid=8243 comm="syz.2.1649" name="UNIX" dev="sockfs" ino=20480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 93.182450][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.213505][ T28] audit: type=1400 audit(1775082346.924:852): avc: denied { mac_admin } for pid=8243 comm="syz.2.1649" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.219724][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.257232][ T28] audit: type=1400 audit(1775082346.974:853): avc: denied { relabelto } for pid=8243 comm="syz.2.1649" name="UNIX" dev="sockfs" ino=20480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 93.294046][ T8179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.330537][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.337994][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.363976][ T8179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.439978][ T8255] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.453724][ T28] audit: type=1400 audit(1775082347.214:854): avc: denied { create } for pid=8254 comm="syz.5.1651" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.475952][ T8179] hsr_slave_0: entered promiscuous mode [ 93.485985][ T28] audit: type=1400 audit(1775082347.234:855): avc: denied { remove_name } for pid=8254 comm="syz.5.1651" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.497157][ T8179] hsr_slave_1: entered promiscuous mode [ 93.509071][ T28] audit: type=1400 audit(1775082347.234:856): avc: denied { rename } for pid=8254 comm="syz.5.1651" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.536351][ T28] audit: type=1400 audit(1775082347.234:857): avc: denied { rmdir } for pid=8254 comm="syz.5.1651" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.538773][ T8179] debugfs: 'hsr0' already exists in 'hsr' [ 93.558146][ T28] audit: type=1400 audit(1775082347.234:858): avc: denied { rename } for pid=8254 comm="syz.5.1651" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.586848][ T8179] Cannot create hsr debugfs directory [ 93.666097][ T28] audit: type=1400 audit(1775082347.234:859): avc: denied { rmdir } for pid=8254 comm="syz.5.1651" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.728756][ T28] audit: type=1400 audit(1775082347.374:860): avc: denied { getopt } for pid=8265 comm="syz.2.1653" lport=40164 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 93.816356][ T8285] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.062244][ T8323] EXT4-fs: Ignoring removed nobh option [ 94.071759][ T8323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.090469][ T8323] EXT4-fs (loop9): shut down requested (2) [ 94.107144][ T8179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.133355][ T8179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.148812][ T8179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.163711][ T8179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.274890][ T8356] set_capacity_and_notify: 6 callbacks suppressed [ 94.274906][ T8356] loop5: detected capacity change from 0 to 1024 [ 94.305350][ T8356] EXT4-fs: Ignoring removed i_version option [ 94.320845][ T8356] EXT4-fs: Ignoring removed bh option [ 94.333399][ T8356] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 94.358730][ T8356] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 94.386003][ T8356] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.411626][ T8356] EXT4-fs (loop5): orphan cleanup on readonly fs [ 94.424233][ T8356] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.446541][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.453965][ T8356] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 94.462037][ T8356] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1675: bad orphan inode 11 [ 94.472247][ T8356] loop5: lost filesystem error report for type 5 error -117 [ 94.472342][ T8356] ext4_test_bit(bit=10, block=1) = 0 [ 94.484936][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 94.484974][ C0] EXT4-fs (loop5): initial error at time 1775082348: ext4_orphan_get:1423 [ 94.484994][ C0] EXT4-fs (loop5): last error at time 1775082348: ext4_orphan_get:1423 [ 94.487541][ T8179] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.542430][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.549501][ T6397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.581534][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.588632][ T6397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.775762][ T8179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.848175][ T8414] loop9: detected capacity change from 0 to 512 [ 94.880990][ T8408] syz.8.1686 (8408) used greatest stack depth: 9328 bytes left [ 94.888787][ T8414] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 94.943263][ T8414] System zones: 0-2, 18-18, 34-34 [ 94.954678][ T8425] loop5: detected capacity change from 0 to 256 [ 94.977365][ T8414] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 95.026697][ T8179] veth0_vlan: entered promiscuous mode [ 95.037681][ T8414] EXT4-fs (loop9): Remounting filesystem read-only [ 95.044235][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 95.044251][ C0] EXT4-fs (loop9): initial error at time 1775082348: ext4_mb_generate_buddy:1317 [ 95.044282][ C0] EXT4-fs (loop9): last error at time 1775082348: ext4_mb_generate_buddy:1317 [ 95.057012][ T8179] veth1_vlan: entered promiscuous mode [ 95.088691][ T8433] loop2: detected capacity change from 0 to 1024 [ 95.095499][ T8414] EXT4-fs (loop9): 1 truncate cleaned up [ 95.104224][ T8435] loop5: detected capacity change from 0 to 512 [ 95.111013][ T8433] EXT4-fs: Ignoring removed i_version option [ 95.117022][ T8433] EXT4-fs: Ignoring removed bh option [ 95.124597][ T8414] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.138559][ T8433] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 95.138593][ T6399] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.155936][ T8435] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.169468][ T8179] veth0_macvtap: entered promiscuous mode [ 95.171210][ T8433] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 95.186535][ T8433] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.197354][ T6399] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 95.206011][ T8179] veth1_macvtap: entered promiscuous mode [ 95.208415][ T8433] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.213757][ T6399] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 95.232294][ T8433] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.258039][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.269451][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.284893][ T8433] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 95.294044][ T8433] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1689: bad orphan inode 11 [ 95.307110][ T6401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.310857][ T8433] loop2: lost filesystem error report for type 5 error -117 [ 95.328238][ T8433] ext4_test_bit(bit=10, block=1) = 0 [ 95.330675][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 95.347305][ C1] EXT4-fs (loop2): initial error at time 1775082349: ext4_orphan_get:1423 [ 95.355843][ C1] EXT4-fs (loop2): last error at time 1775082349: ext4_orphan_get:1423 [ 95.370958][ T6401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.388472][ T8433] EXT4-fs mount: 27 callbacks suppressed [ 95.388490][ T8433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.419849][ T6401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.436304][ T6401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.534664][ T8467] syzkaller1: entered promiscuous mode [ 95.558950][ T8467] syzkaller1: entered allmulticast mode [ 95.584797][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.658999][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.686490][ T8479] loop0: detected capacity change from 0 to 2048 [ 95.751947][ T8479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.799066][ T8479] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.982520][ T8179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.047069][ T8525] loop2: detected capacity change from 0 to 512 [ 96.100754][ T8525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.172079][ T8525] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.245131][ T8543] ip6erspan0: entered allmulticast mode [ 96.390366][ T8565] loop9: detected capacity change from 0 to 2048 [ 96.405393][ T8565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.424633][ T8565] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.523909][ T7793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.572294][ T8585] loop9: detected capacity change from 0 to 128 [ 96.612651][ T8590] loop8: detected capacity change from 0 to 512 [ 96.625217][ T8585] syz.9.1724: attempt to access beyond end of device [ 96.625217][ T8585] loop9: rw=1, sector=138, nr_sectors = 2 limit=128 [ 96.658422][ T8590] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 96.683838][ T8590] System zones: 0-2, 18-18, 34-34 [ 96.708342][ T8590] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 96.724937][ T8590] EXT4-fs (loop8): Remounting filesystem read-only [ 96.730609][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 96.732075][ T8590] EXT4-fs (loop8): 1 truncate cleaned up [ 96.737877][ C0] EXT4-fs (loop8): initial error at time 1775082350: ext4_mb_generate_buddy:1317 [ 96.744462][ T8590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.752619][ C0] EXT4-fs (loop8): last error at time 1775082350: ext4_mb_generate_buddy:1317 [ 96.753319][ T6397] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.797887][ T8590] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.810675][ T6397] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.821686][ T6397] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.842405][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.858384][ T8590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.923713][ T8614] sctp: [Deprecated]: syz.2.1728 (pid 8614) Use of int in max_burst socket option. [ 96.923713][ T8614] Use struct sctp_assoc_value instead [ 96.976085][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1734'. [ 97.021131][ T8621] bond1: Invalid ad_actor_system MAC address. [ 97.035109][ T8621] bond1: option ad_actor_system: invalid value (4294967295) [ 97.052309][ T8621] bond1 (unregistering): Released all slaves [ 97.086248][ T8634] batadv_slave_1: entered promiscuous mode [ 97.094203][ T8626] batadv_slave_1: left promiscuous mode [ 97.279593][ T3560] Process accounting resumed [ 97.343824][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1746'. [ 97.374704][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1746'. [ 97.403374][ T8683] netlink: 'syz.8.1748': attribute type 4 has an invalid length. [ 97.436081][ T8689] serio: Serial port ptm1 [ 97.603215][ T8713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 97.613062][ T8713] System zones: 0-2, 18-18, 34-34 [ 97.623484][ T8713] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 97.640588][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 97.643485][ T8713] EXT4-fs (loop0): Remounting filesystem read-only [ 97.647052][ C0] EXT4-fs (loop0): initial error at time 1775082351: ext4_mb_generate_buddy:1317 [ 97.662714][ C0] EXT4-fs (loop0): last error at time 1775082351: ext4_mb_generate_buddy:1317 [ 97.672369][ T8713] EXT4-fs (loop0): 1 truncate cleaned up [ 97.703377][ T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.711816][ T8713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.720248][ T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 97.729338][ T8713] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.747603][ T50] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 97.758276][ T8713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.360187][ T8755] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 98.382277][ T8755] System zones: 0-2, 18-18, 34-34 [ 98.397884][ T8755] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 98.442067][ T8755] EXT4-fs (loop5): Remounting filesystem read-only [ 98.450619][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 98.457068][ C0] EXT4-fs (loop5): initial error at time 1775082352: ext4_mb_generate_buddy:1317 [ 98.466221][ C0] EXT4-fs (loop5): last error at time 1775082352: ext4_mb_generate_buddy:1317 [ 98.482172][ T8755] EXT4-fs (loop5): 1 truncate cleaned up [ 98.494230][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 98.494244][ T28] audit: type=1326 audit(1775082352.254:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.8.1774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x0 [ 98.525263][ T6399] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 98.541252][ T8755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.554063][ T6399] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.559749][ T8755] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.581616][ T8755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.588982][ T6399] Quota error (device loop5): write_blk: dquota write failed [ 98.608725][ T6399] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 98.621296][ T28] audit: type=1400 audit(1775082352.384:892): avc: denied { read write } for pid=8778 comm="syz.2.1777" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.639082][ T6399] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.674514][ T28] audit: type=1400 audit(1775082352.414:893): avc: denied { open } for pid=8778 comm="syz.2.1777" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.702914][ T6399] Quota error (device loop5): write_blk: dquota write failed [ 98.710352][ T6399] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 98.727444][ T6399] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 98.737855][ T6399] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 98.746807][ T6399] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 98.831760][ T8784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.849050][ T8789] syzkaller1: entered promiscuous mode [ 98.854635][ T8789] syzkaller1: entered allmulticast mode [ 98.865411][ T8784] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.164878][ T8811] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.204462][ T8811] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.247621][ T7793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.262742][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.560752][ T35] IPVS: starting estimator thread 0... [ 99.575091][ T8832] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 99.660639][ T8831] IPVS: using max 2544 ests per chain, 127200 per kthread [ 99.681004][ T8836] set_capacity_and_notify: 6 callbacks suppressed [ 99.681019][ T8836] loop9: detected capacity change from 0 to 128 [ 99.787869][ T8840] loop9: detected capacity change from 0 to 512 [ 99.841447][ T8840] EXT4-fs (loop9): 1 truncate cleaned up [ 99.865916][ T8840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.132920][ T8858] SELinux: ebitmap: map size 15 does not match my size 64 (high bit was 0) [ 100.162997][ T8858] SELinux: failed to load policy [ 100.412885][ T7793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.986918][ T8920] syzkaller1: entered promiscuous mode [ 101.000933][ T8920] syzkaller1: entered allmulticast mode [ 101.996502][ T8982] program syz.2.1846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.146464][ T8995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.172313][ T8995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.255574][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.280287][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.299196][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1859'. [ 102.308175][ T9014] netlink: 'syz.9.1859': attribute type 30 has an invalid length. [ 102.324519][ T1427] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.333790][ T1427] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.343908][ T1427] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.352934][ T1427] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.362267][ T5716] Bluetooth: hci0: command 0x1003 tx timeout [ 102.368268][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.387454][ T9020] SELinux: Context : is not valid (left unmapped). [ 102.414967][ T9022] syzkaller1: entered promiscuous mode [ 102.420532][ T9022] syzkaller1: entered allmulticast mode [ 102.476181][ T9030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.492204][ T9030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.810176][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1876'. [ 102.843593][ T9054] Falling back ldisc for ttyS3. [ 103.095022][ T9083] loop9: detected capacity change from 0 to 1024 [ 103.133473][ T9083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.171629][ T9083] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.186598][ T9083] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1885: bg 0: block 112: padding at end of block bitmap is not set [ 103.202822][ T9083] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 103.215274][ T9083] EXT4-fs (loop9): This should not happen!! Data will be lost [ 103.215274][ T9083] [ 103.225141][ T9083] EXT4-fs (loop9): Total free blocks count 0 [ 103.230068][ T9093] loop8: detected capacity change from 0 to 256 [ 103.231349][ T9083] EXT4-fs (loop9): Free/Dirty block details [ 103.243647][ T9083] EXT4-fs (loop9): free_blocks=0 [ 103.248655][ T9083] EXT4-fs (loop9): dirty_blocks=16 [ 103.254131][ T9083] EXT4-fs (loop9): Block reservation details [ 103.260121][ T9083] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 103.276580][ T9083] syz.9.1885 (9083) used greatest stack depth: 8816 bytes left [ 103.286176][ T9093] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.302100][ T7793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.447680][ T9118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1898'. [ 103.601854][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 103.601913][ T28] audit: type=1400 audit(1775082357.364:934): avc: denied { write } for pid=9140 comm="syz.2.1909" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.770725][ T28] audit: type=1400 audit(1775082357.524:935): avc: denied { mount } for pid=9150 comm="syz.0.1912" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 103.912847][ T28] audit: type=1400 audit(1775082357.664:936): avc: denied { create } for pid=9164 comm="syz.9.1917" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.954548][ T28] audit: type=1400 audit(1775082357.704:937): avc: denied { write } for pid=9164 comm="syz.9.1917" name="file0" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.983277][ T28] audit: type=1400 audit(1775082357.704:938): avc: denied { open } for pid=9164 comm="syz.9.1917" path="/68/file0" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.990434][ T9169] syzkaller1: entered promiscuous mode [ 104.019332][ T9169] syzkaller1: entered allmulticast mode [ 104.055070][ T28] audit: type=1400 audit(1775082357.704:939): avc: denied { ioctl } for pid=9164 comm="syz.9.1917" path="/68/file0" dev="tmpfs" ino=372 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.079448][ T28] audit: type=1400 audit(1775082357.774:940): avc: denied { unlink } for pid=7793 comm="syz-executor" name="file0" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.160291][ T28] audit: type=1400 audit(1775082357.914:941): avc: denied { getopt } for pid=9170 comm="syz.2.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.189371][ T9173] loop9: detected capacity change from 0 to 164 [ 104.200194][ T9173] ISOFS: Bad logical zone size 2816 [ 104.409408][ T9190] Process accounting resumed [ 104.569004][ T9207] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 104.579955][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.588257][ T9207] bond0: (slave team0): Enslaving as an active interface with an up link [ 104.617533][ T28] audit: type=1400 audit(1775082358.374:942): avc: denied { wake_alarm } for pid=9210 comm="syz.0.1940" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.792179][ T28] audit: type=1400 audit(1775082358.544:943): avc: denied { read } for pid=9223 comm="syz.5.1945" lport=35004 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 104.908409][ T9229] loop0: detected capacity change from 0 to 128 [ 105.179985][ T9255] loop9: detected capacity change from 0 to 512 [ 105.207833][ T9255] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 105.238210][ T9255] EXT4-fs (loop9): 1 truncate cleaned up [ 105.261997][ T9255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.434490][ T9274] loop8: detected capacity change from 0 to 1024 [ 105.473748][ T9274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.488229][ T9276] loop5: detected capacity change from 0 to 512 [ 105.495302][ T9276] EXT4-fs: inline encryption not supported [ 105.532378][ T9276] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.566387][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.580385][ T9276] EXT4-fs (loop5): 1 truncate cleaned up [ 105.589623][ T9276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.625629][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.668447][ T9286] loop5: detected capacity change from 0 to 2048 [ 105.692627][ T7793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.707377][ T9287] loop8: detected capacity change from 0 to 128 [ 105.715609][ T9286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.795664][ T9286] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1965: bg 0: block 234: padding at end of block bitmap is not set [ 105.814996][ T9286] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 818 with error 28 [ 105.840810][ T9286] EXT4-fs (loop5): This should not happen!! Data will be lost [ 105.840810][ T9286] [ 105.850811][ T9286] EXT4-fs (loop5): Total free blocks count 0 [ 105.856879][ T9286] EXT4-fs (loop5): Free/Dirty block details [ 105.862934][ T9286] EXT4-fs (loop5): free_blocks=0 [ 105.867886][ T9286] EXT4-fs (loop5): dirty_blocks=832 [ 105.874671][ T9286] EXT4-fs (loop5): Block reservation details [ 105.882151][ T9286] EXT4-fs (loop5): i_reserved_data_blocks=52 [ 105.901196][ T9305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 105.913645][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.076316][ T9317] loop5: detected capacity change from 0 to 8192 [ 106.100874][ T9320] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 106.101342][ T9316] syz.5.1977: attempt to access beyond end of device [ 106.101342][ T9316] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.116689][ T9320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.150407][ T9320] bond2: (slave geneve2): making interface the new active one [ 106.156606][ T9316] Buffer I/O error on dev loop5, logical block 57847, async page read [ 106.159382][ T9320] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 106.179464][ T9317] syz.5.1977: attempt to access beyond end of device [ 106.179464][ T9317] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.202994][ T9317] Buffer I/O error on dev loop5, logical block 57847, async page read [ 106.211747][ T9317] syz.5.1977: attempt to access beyond end of device [ 106.211747][ T9317] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 106.225825][ T9317] Buffer I/O error on dev loop5, logical block 57847, async page read [ 106.265229][ T9329] netlink: 'syz.5.1982': attribute type 10 has an invalid length. [ 106.273837][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.281813][ T9329] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.683157][ T9368] netlink: 'syz.2.1997': attribute type 5 has an invalid length. [ 106.829707][ T9375] loop2: detected capacity change from 0 to 128 [ 106.975755][ T9386] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.978487][ T9384] Invalid option length (63724) for dns_resolver key [ 106.997553][ T9386] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 107.322298][ T9423] loop9: detected capacity change from 0 to 128 [ 107.352173][ T9425] loop2: detected capacity change from 0 to 512 [ 107.372611][ T9425] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #3: comm syz.2.2021: corrupted inode contents [ 107.406723][ T9425] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.406905][ T9425] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #3: comm syz.2.2021: mark_inode_dirty error [ 107.416040][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 107.416060][ C0] EXT4-fs (loop2): initial error at time 1775082361: ext4_do_update_inode:5602: inode 3 [ 107.416091][ C0] EXT4-fs (loop2): last error at time 1775082361: ext4_do_update_inode:5602: inode 3 [ 107.574645][ T9425] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.575007][ T9425] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #3: comm syz.2.2021: corrupted inode contents [ 107.596324][ T9425] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.596581][ T9425] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.2021: mark_inode_dirty error [ 107.618253][ T9425] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.618506][ T9425] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.2021: Failed to acquire dquot type 0 [ 107.639438][ T9425] loop2: lost filesystem error report for type 5 error -117 [ 107.639940][ T9425] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.2021: corrupted inode contents [ 107.659984][ T9425] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.660648][ T9425] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #16: comm syz.2.2021: mark_inode_dirty error [ 107.672115][ T9434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.704520][ T9425] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.704703][ T9425] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.2021: corrupted inode contents [ 107.752187][ T9425] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.760390][ T9425] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2021: mark_inode_dirty error [ 107.780890][ T9425] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.781515][ T7793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.782458][ T9425] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.2021: corrupted inode contents [ 107.812623][ T9425] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.836982][ T9425] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 107.855552][ T9425] loop2: lost filesystem error report for type 5 error -117 [ 107.855847][ T9425] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.2021: corrupted inode contents [ 107.877250][ T9425] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 107.877519][ T9425] EXT4-fs error (device loop2): ext4_truncate:4602: inode #16: comm syz.2.2021: mark_inode_dirty error [ 107.900964][ T9425] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 107.919276][ T9425] loop2: lost filesystem error report for type 5 error -117 [ 107.919666][ T9425] EXT4-fs (loop2): 1 truncate cleaned up [ 107.933334][ T9425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.946202][ T9425] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.970087][ T9425] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.2021: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 107.970087][ T9425] [ 108.057638][ T9425] syz.2.2021 (9425) used greatest stack depth: 8760 bytes left [ 108.066356][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.062445][ T9399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.137308][ T9504] set_capacity_and_notify: 1 callbacks suppressed [ 110.137380][ T9504] loop5: detected capacity change from 0 to 128 [ 110.147926][ T9510] loop9: detected capacity change from 0 to 1024 [ 110.157861][ T9507] SELinux: unknown common [ 110.162740][ T9507] SELinux: failed to load policy [ 110.178068][ T9510] EXT4-fs: Ignoring removed bh option [ 110.197843][ T9510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.256158][ T9510] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.387406][ T9533] loop2: detected capacity change from 0 to 128 [ 110.405552][ T9527] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.2038: Freeing blocks not in datazone - block = 0, count = 16 [ 110.411164][ T9533] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.456243][ T9533] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.539369][ T6401] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 112: padding at end of block bitmap is not set [ 110.562615][ T6401] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 110.599228][ T6401] EXT4-fs (loop9): This should not happen!! Data will be lost [ 110.599228][ T6401] [ 110.612095][ T6401] EXT4-fs (loop9): Total free blocks count 0 [ 110.613450][ T6399] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.618277][ T6401] EXT4-fs (loop9): Free/Dirty block details [ 110.634893][ T6401] EXT4-fs (loop9): free_blocks=16 [ 110.639926][ T6401] EXT4-fs (loop9): dirty_blocks=32 [ 110.652022][ T6401] EXT4-fs (loop9): Block reservation details [ 110.658241][ T6401] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 110.665128][ T6401] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2816 with max blocks 4 with error 28 [ 110.688366][ T7793] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 110.810901][ T9568] : port 1(veth0_to_bridge) entered blocking state [ 110.817859][ T9568] : port 1(veth0_to_bridge) entered disabled state [ 110.825308][ T9568] veth0_to_bridge: entered allmulticast mode [ 110.832334][ T9568] veth0_to_bridge: entered promiscuous mode [ 111.191285][ T9594] loop2: detected capacity change from 0 to 512 [ 111.205240][ T9594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.217242][ T9594] EXT4-fs (loop2): 1 truncate cleaned up [ 111.224432][ T9594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.283286][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 111.283351][ T28] audit: type=1400 audit(1775082365.044:1031): avc: denied { cpu } for pid=9600 comm="syz.0.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.325133][ T9603] : port 1(veth0_to_bridge) entered blocking state [ 111.332174][ T9603] : port 1(veth0_to_bridge) entered disabled state [ 111.339512][ T9603] veth0_to_bridge: entered allmulticast mode [ 111.339884][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.346392][ T9603] veth0_to_bridge: entered promiscuous mode [ 111.434895][ T9615] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2084'. [ 111.529831][ T28] audit: type=1400 audit(1775082365.284:1032): avc: denied { ioctl } for pid=9623 comm="syz.9.2089" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.531201][ T9631] loop2: detected capacity change from 0 to 764 [ 111.581729][ T9626] SELinux: unknown common [ 111.593023][ T9626] SELinux: failed to load policy [ 111.715451][ T9651] loop2: detected capacity change from 0 to 512 [ 111.725132][ T9651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.736810][ T9651] EXT4-fs (loop2): 1 truncate cleaned up [ 111.743832][ T9651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.748724][ T9654] loop8: detected capacity change from 0 to 128 [ 111.771154][ T9654] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.784462][ T9654] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.835089][ T50] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.881705][ T9658] syzkaller0: entered promiscuous mode [ 111.887293][ T9658] syzkaller0: entered allmulticast mode [ 112.008114][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.033940][ T9672] loop8: detected capacity change from 0 to 1024 [ 112.044281][ T9672] EXT4-fs: Ignoring removed bh option [ 112.065681][ T9672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.083402][ T9672] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.164807][ T9680] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.2112: Freeing blocks not in datazone - block = 0, count = 16 [ 112.232513][ T6399] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 112: padding at end of block bitmap is not set [ 112.255796][ T6399] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 112.268068][ T6399] EXT4-fs (loop8): This should not happen!! Data will be lost [ 112.268068][ T6399] [ 112.278032][ T6399] EXT4-fs (loop8): Total free blocks count 0 [ 112.287392][ T6399] EXT4-fs (loop8): Free/Dirty block details [ 112.293719][ T6399] EXT4-fs (loop8): free_blocks=16 [ 112.298825][ T6399] EXT4-fs (loop8): dirty_blocks=32 [ 112.304345][ T6399] EXT4-fs (loop8): Block reservation details [ 112.310744][ T6399] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 112.316959][ T6399] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2688 with max blocks 4 with error 28 [ 112.342310][ T6005] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 112.411457][ T9688] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.2117'. [ 112.434607][ T9692] loop8: detected capacity change from 0 to 256 [ 112.454855][ T9692] FAT-fs (loop8): bogus number of FAT sectors [ 112.483779][ T28] audit: type=1400 audit(1775082366.244:1033): avc: denied { getopt } for pid=9689 comm="syz.0.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.484854][ T9692] FAT-fs (loop8): Can't find a valid FAT filesystem [ 112.551749][ T28] audit: type=1400 audit(1775082366.314:1034): avc: denied { mounton } for pid=9698 comm="syz.2.2121" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 113.026539][ T9725] netlink: 'syz.0.2133': attribute type 18 has an invalid length. [ 113.045196][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 113.076847][ T6397] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.087858][ T9725] netlink: 'syz.0.2133': attribute type 18 has an invalid length. [ 113.098082][ T6397] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.111849][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2133'. [ 113.124152][ T6397] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.136388][ T6397] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.343305][ T28] audit: type=1326 audit(1775082367.104:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.5.2142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b4b16c819 code=0x0 [ 113.416870][ T28] audit: type=1400 audit(1775082367.174:1036): avc: denied { remount } for pid=9749 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.043945][ T28] audit: type=1326 audit(1775082367.804:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.9.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 114.069723][ T28] audit: type=1326 audit(1775082367.824:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.9.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 114.093595][ T28] audit: type=1326 audit(1775082367.824:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.9.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 114.118497][ T28] audit: type=1326 audit(1775082367.824:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.9.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 114.379254][ T9776] loop2: detected capacity change from 0 to 1024 [ 114.386043][ T9776] EXT4-fs: Ignoring removed bh option [ 114.415188][ T9776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.439059][ T9776] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.440984][ T9784] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2156'. [ 114.475677][ T9784] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2156'. [ 114.485223][ T9784] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2156'. [ 114.522702][ T9789] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.2154: Freeing blocks not in datazone - block = 0, count = 16 [ 114.556726][ T6397] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 112: padding at end of block bitmap is not set [ 114.581860][ T6397] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 114.594544][ T6397] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.594544][ T6397] [ 114.604944][ T6397] EXT4-fs (loop2): Total free blocks count 0 [ 114.613648][ T6397] EXT4-fs (loop2): Free/Dirty block details [ 114.619682][ T6397] EXT4-fs (loop2): free_blocks=16 [ 114.627459][ T6397] EXT4-fs (loop2): dirty_blocks=80 [ 114.632803][ T6397] EXT4-fs (loop2): Block reservation details [ 114.638818][ T6397] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 114.661204][ T6397] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 768 with max blocks 64 with error 28 [ 114.695228][ T3314] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 114.740697][ T9812] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2165'. [ 114.981744][ T3295] Alternate GPT is invalid, using primary GPT. [ 114.990249][ T3295] loop8: p1 p2 p3 [ 115.006261][ T9823] Alternate GPT is invalid, using primary GPT. [ 115.012597][ T9823] loop8: p1 p2 p3 [ 115.031595][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2169'. [ 115.136081][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 115.143901][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 115.146710][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 115.177166][ T9829] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 115.219945][ T9837] set_capacity_and_notify: 1 callbacks suppressed [ 115.220017][ T9837] loop8: detected capacity change from 0 to 512 [ 115.249677][ T9837] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.271180][ T9837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 115.280301][ T9840] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.280465][ T9837] System zones: 1-12 [ 115.307445][ T9840] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.310188][ T9837] EXT4-fs (loop8): orphan cleanup on readonly fs [ 115.329067][ T9837] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2175: bg 0: block 361: padding at end of block bitmap is not set [ 115.346770][ T9837] loop8: lost filesystem error report for type 5 error -117 [ 115.347000][ T9837] EXT4-fs (loop8): Remounting filesystem read-only [ 115.354323][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 115.354341][ C1] EXT4-fs (loop8): initial error at time 1775082369: ext4_validate_block_bitmap:441 [ 115.354364][ C1] EXT4-fs (loop8): last error at time 1775082369: ext4_validate_block_bitmap:441 [ 115.400399][ T9837] EXT4-fs (loop8): 1 truncate cleaned up [ 115.407441][ T9837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 115.442835][ T9849] loop2: detected capacity change from 0 to 2048 [ 115.466164][ T9837] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.2175: error -117 reading directory block [ 115.482043][ T9849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.564348][ T9849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2179: bg 0: block 234: padding at end of block bitmap is not set [ 115.579357][ T9849] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1744 with error 28 [ 115.592352][ T9849] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.592352][ T9849] [ 115.602336][ T9849] EXT4-fs (loop2): Total free blocks count 0 [ 115.608546][ T9849] EXT4-fs (loop2): Free/Dirty block details [ 115.617652][ T9849] EXT4-fs (loop2): free_blocks=0 [ 115.624469][ T9849] EXT4-fs (loop2): dirty_blocks=1744 [ 115.629869][ T9849] EXT4-fs (loop2): Block reservation details [ 115.636185][ T9849] EXT4-fs (loop2): i_reserved_data_blocks=109 [ 115.728529][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 115.760157][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.788685][ T9856] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.2180'. [ 116.256665][ T9874] loop5: detected capacity change from 0 to 1024 [ 116.271603][ T9874] EXT4-fs: Ignoring removed bh option [ 116.298325][ T9874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.324279][ T9874] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.415332][ T9891] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.2186: Freeing blocks not in datazone - block = 0, count = 16 [ 116.439047][ T28] kauditd_printk_skb: 219 callbacks suppressed [ 116.439061][ T28] audit: type=1400 audit(1775082370.194:1260): avc: denied { write } for pid=9894 comm="syz.0.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.493223][ T28] audit: type=1400 audit(1775082370.244:1261): avc: denied { ioctl } for pid=9897 comm="syz.8.2198" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=25912 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.522649][ T9900] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.2199'. [ 116.654215][ T9909] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 116.856234][ T9910] loop8: detected capacity change from 0 to 256 [ 116.873707][ T6401] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 112: padding at end of block bitmap is not set [ 116.899935][ T6401] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 116.913307][ T6401] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.913307][ T6401] [ 116.924031][ T6401] EXT4-fs (loop5): Total free blocks count 0 [ 116.930271][ T6401] EXT4-fs (loop5): Free/Dirty block details [ 116.937215][ T6401] EXT4-fs (loop5): free_blocks=16 [ 116.967946][ T9917] loop2: detected capacity change from 0 to 128 [ 116.968006][ T9910] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.974304][ T6401] EXT4-fs (loop5): dirty_blocks=80 [ 116.974412][ T6401] EXT4-fs (loop5): Block reservation details [ 116.974425][ T6401] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 116.975109][ T6399] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2048 with max blocks 64 with error 28 [ 117.017514][ T3624] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 117.148648][ T3560] kernel read not supported for file /vcs (pid: 3560 comm: kworker/0:6) [ 117.271964][ T28] audit: type=1400 audit(1775082371.034:1262): avc: denied { setopt } for pid=9932 comm="syz.8.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.347468][ T9935] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2212'. [ 117.822918][ T28] audit: type=1400 audit(1775082371.584:1263): avc: denied { mount } for pid=9957 comm="syz.2.2221" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.854463][ T28] audit: type=1400 audit(1775082371.614:1264): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.993245][ T28] audit: type=1400 audit(1775082371.754:1265): avc: denied { ioctl } for pid=9966 comm="syz.5.2225" path="socket:[26005]" dev="sockfs" ino=26005 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.033829][ T9971] loop2: detected capacity change from 0 to 512 [ 118.041005][ T9973] loop9: detected capacity change from 0 to 2048 [ 118.048257][ T9971] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 118.066419][ T9971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 118.081662][ T9971] System zones: 1-12 [ 118.085892][ T9971] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.095084][ T9971] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2237: bg 0: block 361: padding at end of block bitmap is not set [ 118.115130][ T9971] loop2: lost filesystem error report for type 5 error -117 [ 118.115556][ T9973] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.120591][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 118.141253][ C1] EXT4-fs (loop2): initial error at time 1775082371: ext4_validate_block_bitmap:441 [ 118.150673][ C1] EXT4-fs (loop2): last error at time 1775082371: ext4_validate_block_bitmap:441 [ 118.159905][ T9971] EXT4-fs (loop2): Remounting filesystem read-only [ 118.166879][ T9971] EXT4-fs (loop2): 1 truncate cleaned up [ 118.173126][ T9971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 118.188348][ T9971] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.2237: error -117 reading directory block [ 118.208860][ T9973] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2227: bg 0: block 234: padding at end of block bitmap is not set [ 118.233900][ T9973] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1808 with error 28 [ 118.254197][ T9973] EXT4-fs (loop9): This should not happen!! Data will be lost [ 118.254197][ T9973] [ 118.267115][ T9973] EXT4-fs (loop9): Total free blocks count 0 [ 118.276126][ T9973] EXT4-fs (loop9): Free/Dirty block details [ 118.282334][ T9973] EXT4-fs (loop9): free_blocks=0 [ 118.287377][ T9973] EXT4-fs (loop9): dirty_blocks=1808 [ 118.292916][ T9973] EXT4-fs (loop9): Block reservation details [ 118.298934][ T9973] EXT4-fs (loop9): i_reserved_data_blocks=113 [ 118.317644][ T9986] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 118.431473][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 118.467861][ T7793] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.617386][T10014] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2239'. [ 118.712046][T10023] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 119.226421][ T28] audit: type=1326 audit(1775082372.984:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.9.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 119.284037][ T28] audit: type=1326 audit(1775082372.984:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.9.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 119.334459][ T28] audit: type=1326 audit(1775082372.984:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.9.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 119.370502][T10051] loop9: detected capacity change from 0 to 2048 [ 119.383635][ T28] audit: type=1326 audit(1775082372.984:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.9.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151f9bc819 code=0x7ffc0000 [ 119.511445][ T3295] Alternate GPT is invalid, using primary GPT. [ 119.517789][ T3295] loop9: p1 p2 p3 [ 119.529108][T10051] Alternate GPT is invalid, using primary GPT. [ 119.535663][T10051] loop9: p1 p2 p3 [ 119.556428][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2255'. [ 119.666237][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 119.681995][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 119.698788][T10068] loop5: detected capacity change from 0 to 512 [ 119.700200][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 119.708466][T10068] EXT4-fs: Ignoring removed nobh option [ 119.737905][T10080] loop8: detected capacity change from 0 to 512 [ 119.754346][T10068] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 119.768457][T10080] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.780734][T10068] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2263: attempt to clear invalid blocks 1 len 1 [ 119.788399][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 119.797013][T10068] fserror_report: 1 callbacks suppressed [ 119.797027][T10068] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 119.808499][T10068] EXT4-fs (loop5): Remounting filesystem read-only [ 119.817653][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 119.817673][ C1] EXT4-fs (loop5): initial error at time 1775082373: ext4_clear_blocks:876: inode 13 [ 119.817699][ C1] EXT4-fs (loop5): last error at time 1775082373: ext4_clear_blocks:876: inode 13 [ 119.849774][T10068] EXT4-fs (loop5): 1 truncate cleaned up [ 119.855820][T10068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.923749][T10080] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.940262][T10080] ext4 filesystem being mounted at /303/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.962515][T10068] EXT4-fs (loop5): shut down requested (0) [ 119.984083][T10080] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.2265: corrupted xattr block 33: invalid ea_ino [ 119.997560][T10080] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 120.006719][T10080] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.2265: corrupted xattr block 33: invalid ea_ino [ 120.035250][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.062883][ T3295] Alternate GPT is invalid, using primary GPT. [ 120.069323][ T3295] loop2: p1 p2 p3 [ 120.078925][T10093] Alternate GPT is invalid, using primary GPT. [ 120.085753][T10093] loop2: p1 p2 p3 [ 120.107526][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 120.160838][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.162318][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.172415][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.200450][ T50] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.201891][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.212198][ T50] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.221626][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.242542][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.275373][T10110] tls_set_device_offload_rx: netdev not found [ 120.306292][ T50] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.330660][ T50] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.348615][T10118] set_capacity_and_notify: 1 callbacks suppressed [ 120.348633][T10118] loop2: detected capacity change from 0 to 512 [ 120.362766][T10118] EXT4-fs: Invalid want_extra_isize 7 [ 120.396926][ T50] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.407415][ T50] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.455792][ T50] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.468428][ T50] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.510126][T10113] chnl_net:caif_netlink_parms(): no params data found [ 120.556742][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.587685][T10113] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.598813][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.609330][T10113] bridge_slave_0: entered allmulticast mode [ 120.616093][T10113] bridge_slave_0: entered promiscuous mode [ 120.732528][ T50] bond0 (unregistering): Released all slaves [ 120.739504][T10113] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.746787][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.754205][T10113] bridge_slave_1: entered allmulticast mode [ 120.760858][T10113] bridge_slave_1: entered promiscuous mode [ 120.778038][T10113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.788666][T10113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.808870][ T50] hsr_slave_0: left promiscuous mode [ 120.815263][ T50] hsr_slave_1: left promiscuous mode [ 120.823687][ T50] veth1_macvtap: left promiscuous mode [ 120.829146][ T50] veth0_macvtap: left promiscuous mode [ 120.834681][ T50] veth1_vlan: left promiscuous mode [ 120.839882][ T50] veth0_vlan: left promiscuous mode [ 120.922556][T10113] team0: Port device team_slave_0 added [ 120.929546][T10113] team0: Port device team_slave_1 added [ 120.950033][T10113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.957494][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.983670][T10113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.995098][T10113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.002486][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.028419][T10113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.056506][T10113] hsr_slave_0: entered promiscuous mode [ 121.062604][T10113] hsr_slave_1: entered promiscuous mode [ 121.203865][ T50] IPVS: stop unused estimator thread 0... [ 122.026602][T10113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.035901][T10113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.045222][T10113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.054960][T10113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.096408][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.108800][T10113] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.119092][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.126160][ T6397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.139665][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.146742][ T6397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.215577][T10113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.332559][T10113] veth0_vlan: entered promiscuous mode [ 122.340415][T10113] veth1_vlan: entered promiscuous mode [ 122.359385][T10113] veth0_macvtap: entered promiscuous mode [ 122.367731][T10113] veth1_macvtap: entered promiscuous mode [ 122.379358][T10113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.388876][T10113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.404152][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.421866][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.436656][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.454444][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.580892][T10356] loop4: detected capacity change from 0 to 8192 [ 122.597649][T10356] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.657981][T10380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 122.731369][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 122.774725][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 122.774740][ T28] audit: type=1400 audit(1775082376.534:1304): avc: denied { listen } for pid=10395 comm="syz.8.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.827171][T10405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10405 comm=syz.2.2294 [ 123.708992][ T28] audit: type=1400 audit(1775082633.472:1305): avc: denied { bind } for pid=10470 comm="syz.8.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.889757][T10494] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2325'. [ 124.356670][ T28] audit: type=1400 audit(1775082634.122:1306): avc: denied { watch watch_reads } for pid=10498 comm="syz.2.2328" path="/proc/1122/task/1122" dev="proc" ino=28715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 124.443451][T10512] xt_hashlimit: size too large, truncated to 1048576 [ 124.460600][ T28] audit: type=1401 audit(1775082634.172:1307): op=setxattr invalid_context=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 [ 124.535622][T10520] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2332'. [ 124.660865][ T28] audit: type=1326 audit(1775082634.422:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10521 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4b16c819 code=0x7ffc0000 [ 124.672979][T10520] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2332'. [ 124.691773][ T28] audit: type=1326 audit(1775082634.422:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10521 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b4b16c819 code=0x7ffc0000 [ 124.709170][T10520] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2332'. [ 124.782657][ T28] audit: type=1326 audit(1775082634.422:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10521 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4b16c819 code=0x7ffc0000 [ 124.865564][ T28] audit: type=1326 audit(1775082634.422:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10521 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4b16c819 code=0x7ffc0000 [ 124.928965][ T28] audit: type=1326 audit(1775082634.452:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10521 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7b4b16c819 code=0x7ffc0000 [ 124.996225][ T28] audit: type=1326 audit(1775082634.452:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10521 comm="syz.5.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4b16c819 code=0x7ffc0000 [ 125.073927][T10543] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2344'. [ 125.284889][T10550] loop8: detected capacity change from 0 to 8192 [ 125.319684][T10550] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.377120][T10537] loop2: detected capacity change from 0 to 256 [ 125.453688][T10537] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.890416][T10598] loop8: detected capacity change from 0 to 512 [ 125.923996][T10598] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 125.938245][T10598] EXT4-fs (loop8): 1 truncate cleaned up [ 125.945715][T10598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.980376][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.344808][T10600] loop5: detected capacity change from 0 to 256 [ 126.535939][T10600] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.634895][T10615] loop8: detected capacity change from 0 to 32768 [ 126.700895][ T3295] loop8: p1 p3 < > [ 126.713378][T10615] loop8: p1 p3 < > [ 126.824230][T10645] loop8: detected capacity change from 0 to 256 [ 126.860647][T10632] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2381'. [ 126.875886][T10645] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.911353][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 126.912552][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 126.997793][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 126.998178][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 127.028612][T10653] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16393) [ 127.043240][T10653] FAT-fs (loop8): Filesystem has been set read-only [ 127.050042][T10653] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16393) [ 127.075418][T10664] netlink: 'syz.5.2394': attribute type 12 has an invalid length. [ 127.087639][T10664] netlink: 'syz.5.2394': attribute type 2 has an invalid length. [ 127.105559][T10664] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2394'. [ 127.126388][T10653] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16393) [ 127.156402][T10668] syzkaller1: entered promiscuous mode [ 127.162947][T10668] syzkaller1: entered allmulticast mode [ 127.183910][T10653] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16393) [ 127.200261][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 127.219414][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 127.298207][T10678] loop5: detected capacity change from 0 to 1024 [ 127.315220][T10678] EXT4-fs: Ignoring removed bh option [ 127.319393][T10681] netlink: 'syz.2.2402': attribute type 4 has an invalid length. [ 127.350747][T10678] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 127.452346][T10691] sit0: entered promiscuous mode [ 127.476000][T10691] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 127.487400][T10695] loop8: detected capacity change from 0 to 512 [ 127.525878][T10695] EXT4-fs: Ignoring removed i_version option [ 127.557996][T10695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.647042][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.671954][T10711] loop2: detected capacity change from 0 to 128 [ 127.752169][T10719] syz.2.2415: attempt to access beyond end of device [ 127.752169][T10719] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 127.862587][T10719] syz.2.2415: attempt to access beyond end of device [ 127.862587][T10719] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 127.954410][T10719] syz.2.2415: attempt to access beyond end of device [ 127.954410][T10719] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 127.976644][T10719] syz.2.2415: attempt to access beyond end of device [ 127.976644][T10719] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 128.001837][T10719] syz.2.2415: attempt to access beyond end of device [ 128.001837][T10719] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 128.033581][T10746] netlink: 'syz.0.2429': attribute type 1 has an invalid length. [ 128.074888][T10719] syz.2.2415: attempt to access beyond end of device [ 128.074888][T10719] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 128.097015][T10746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.097406][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 128.097419][ T28] audit: type=1326 audit(1775082637.862:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.147783][T10749] syz.8.2430 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.190622][T10719] syz.2.2415: attempt to access beyond end of device [ 128.190622][T10719] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 128.191684][T10735] loop4: detected capacity change from 0 to 256 [ 128.216650][T10746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.232933][T10719] syz.2.2415: attempt to access beyond end of device [ 128.232933][T10719] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 128.246786][T10746] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.257243][ T28] audit: type=1326 audit(1775082637.902:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.283101][T10746] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 128.290373][T10735] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.290957][T10719] syz.2.2415: attempt to access beyond end of device [ 128.290957][T10719] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 128.291046][T10719] syz.2.2415: attempt to access beyond end of device [ 128.291046][T10719] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 128.296011][ T28] audit: type=1326 audit(1775082637.902:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.296039][ T28] audit: type=1326 audit(1775082637.902:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.296065][ T28] audit: type=1326 audit(1775082637.912:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.296117][ T28] audit: type=1326 audit(1775082637.912:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.296215][ T28] audit: type=1326 audit(1775082637.912:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.296241][ T28] audit: type=1326 audit(1775082637.912:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.296289][ T28] audit: type=1326 audit(1775082637.912:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.296335][ T28] audit: type=1326 audit(1775082637.912:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10748 comm="syz.8.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4aacc819 code=0x7ffc0000 [ 128.636490][T10759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.645646][T10759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.093104][T10797] __nla_validate_parse: 1 callbacks suppressed [ 129.093123][T10797] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2452'. [ 129.125289][T10801] syz_tun: entered allmulticast mode [ 129.131335][T10800] syz_tun: left allmulticast mode [ 130.145409][T10858] loop8: detected capacity change from 0 to 512 [ 130.176052][T10858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.189584][T10858] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.235262][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.947694][T10739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.746421][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.755649][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.732103][T11050] loop4: detected capacity change from 0 to 2048 [ 132.798556][T11050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.827328][T11050] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.899162][T10113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.006752][T11096] loop4: detected capacity change from 0 to 1764 [ 133.010191][T11095] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 133.049934][T11095] bond1: (slave lo): Enslaving as an active interface with an up link [ 133.062304][T11095] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 133.374843][T11146] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 133.752873][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 133.780532][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 133.849195][T11199] loop4: detected capacity change from 0 to 256 [ 133.899108][T11199] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.097583][T11215] loop8: detected capacity change from 0 to 512 [ 134.106564][T11215] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.118581][T11215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.143052][T11215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.188389][T11215] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.199265][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 134.261299][T11225] hsr_slave_0: left promiscuous mode [ 134.270004][T11225] hsr_slave_1: left promiscuous mode [ 134.303520][ T6005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.421447][T11242] netlink: 'syz.8.2557': attribute type 4 has an invalid length. [ 134.439140][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2557'. [ 134.576067][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 134.576083][ T28] audit: type=1400 audit(1775082644.342:1361): avc: denied { connect } for pid=11250 comm="syz.0.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.947061][T11270] 9pnet: p9_errstr2errno: server reported unknown error  [ 135.263867][ T28] audit: type=1326 audit(1775082645.032:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.311035][ T28] audit: type=1326 audit(1775082645.032:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.372740][ T28] audit: type=1326 audit(1775082645.062:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.420636][ T28] audit: type=1326 audit(1775082645.062:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.472608][ T28] audit: type=1326 audit(1775082645.062:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.521512][ T28] audit: type=1326 audit(1775082645.062:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.545302][ T28] audit: type=1326 audit(1775082645.062:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.569046][ T28] audit: type=1326 audit(1775082645.062:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e7fbc819 code=0x7ffc0000 [ 135.966019][T11309] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2586'. [ 135.980390][ T28] audit: type=1400 audit(1775082645.742:1370): avc: denied { append } for pid=11310 comm="syz.5.2587" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.003555][T11309] netlink: zone id is out of range [ 136.014687][T11309] netlink: zone id is out of range [ 136.027970][T11314] loop5: detected capacity change from 0 to 512 [ 136.037666][T11314] tipc: Started in network mode [ 136.042769][T11314] tipc: Node identity ac1414aa, cluster identity 4711 [ 136.049736][T11314] tipc: Enabling of bearer rejected, failed to enable media [ 136.074101][T11309] netlink: set zone limit has 8 unknown bytes [ 136.115989][T11317] loop5: detected capacity change from 0 to 512 [ 136.143600][T11317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.170418][T11317] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.266026][T11322] loop2: detected capacity change from 0 to 4096 [ 136.332579][T11322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.502107][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.767909][T11317] ================================================================== [ 136.776012][T11317] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 136.783995][T11317] [ 136.786317][T11317] write to 0xffff88811b8c6e4c of 4 bytes by task 11329 on cpu 1: [ 136.794030][T11317] xas_set_mark+0x12b/0x140 [ 136.798533][T11317] tag_pages_for_writeback+0xe3/0x2e0 [ 136.803905][T11317] ext4_do_writepages+0x6b9/0x2840 [ 136.809007][T11317] ext4_writepages+0x18f/0x320 [ 136.813764][T11317] do_writepages+0x1c6/0x310 [ 136.818364][T11317] file_write_and_wait_range+0x178/0x2f0 [ 136.823984][T11317] generic_buffers_fsync_noflush+0x45/0x130 [ 136.829869][T11317] ext4_sync_file+0x1e4/0x710 [ 136.834537][T11317] vfs_fsync_range+0xc5/0xe0 [ 136.839122][T11317] ext4_buffered_write_iter+0x34f/0x3c0 [ 136.844657][T11317] ext4_file_write_iter+0x380/0xfa0 [ 136.849859][T11317] iter_file_splice_write+0x6c4/0xa80 [ 136.855218][T11317] direct_splice_actor+0x156/0x2a0 [ 136.860315][T11317] splice_direct_to_actor+0x311/0x670 [ 136.866018][T11317] do_splice_direct+0x119/0x1a0 [ 136.870861][T11317] do_sendfile+0x382/0x650 [ 136.875266][T11317] __x64_sys_sendfile64+0x105/0x150 [ 136.880454][T11317] x64_sys_call+0x2dc4/0x3020 [ 136.885125][T11317] do_syscall_64+0x12c/0x370 [ 136.889706][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.895585][T11317] [ 136.897892][T11317] read to 0xffff88811b8c6e4c of 4 bytes by task 11317 on cpu 0: [ 136.905504][T11317] file_write_and_wait_range+0x130/0x2f0 [ 136.911125][T11317] generic_buffers_fsync_noflush+0x45/0x130 [ 136.917012][T11317] ext4_sync_file+0x1e4/0x710 [ 136.921679][T11317] vfs_fsync_range+0xc5/0xe0 [ 136.926271][T11317] ext4_buffered_write_iter+0x34f/0x3c0 [ 136.931826][T11317] ext4_file_write_iter+0x380/0xfa0 [ 136.937023][T11317] iter_file_splice_write+0x6c4/0xa80 [ 136.942383][T11317] direct_splice_actor+0x156/0x2a0 [ 136.947482][T11317] splice_direct_to_actor+0x311/0x670 [ 136.952840][T11317] do_splice_direct+0x119/0x1a0 [ 136.957764][T11317] do_sendfile+0x382/0x650 [ 136.962172][T11317] __x64_sys_sendfile64+0x105/0x150 [ 136.967361][T11317] x64_sys_call+0x2dc4/0x3020 [ 136.972032][T11317] do_syscall_64+0x12c/0x370 [ 136.976613][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.982497][T11317] [ 136.984801][T11317] value changed: 0x02000021 -> 0x04000021 [ 136.990498][T11317] [ 136.992801][T11317] Reported by Kernel Concurrency Sanitizer on: [ 136.998944][T11317] CPU: 0 UID: 0 PID: 11317 Comm: syz.5.2589 Not tainted syzkaller #0 PREEMPT(full) [ 137.008298][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.018339][T11317] ================================================================== [ 137.188155][ T3624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.