last executing test programs: 4m23.048781309s ago: executing program 32 (id=104): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 4m9.10481653s ago: executing program 33 (id=523): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) 4m2.916874632s ago: executing program 34 (id=723): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@gettaction={0x12c, 0x32, 0x100, 0x2070bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff3401}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 3m50.530124584s ago: executing program 35 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x3ff, 0x1, 0x6, 0xca}}, @NETEM_LOSS_GI={0x0, 0x1, {0xe3, 0x8, 0x3, 0x0, 0x7c38}}, @NETEM_LOSS_GE={0x14, 0x2, {0xf6af, 0x1ff, 0x2, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xc2, 0xac, 0x7d0, 0xffffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x6, 0x87, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x586, 0xfffff74f, 0x8001, 0x102b5e26}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80000001, 0x5, 0x1, 0x79}}]}, @TCA_NETEM_RATE64={0x0, 0x8, 0x7a76e7eafdea684b}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x400}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x0) 3m44.837449795s ago: executing program 36 (id=789): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 3m34.664776137s ago: executing program 37 (id=1413): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'mangle\x00', 0x0, [0x5, 0x8, 0x20000004, 0x3, 0x4]}, &(0x7f0000000040)=0x54) 3m0.447156175s ago: executing program 38 (id=2408): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) 2m39.16896938s ago: executing program 39 (id=2919): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, 0xee00) 1m38.451327469s ago: executing program 40 (id=4550): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b40)={{r0}, &(0x7f0000000280), &(0x7f0000001b00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 1m33.311634301s ago: executing program 41 (id=4676): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 1m30.987956157s ago: executing program 42 (id=4716): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m23.494171458s ago: executing program 5 (id=4859): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x700}], 0x1, 0x0, 0x0, 0x0) 1m22.352036554s ago: executing program 5 (id=4876): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39b}) syz_clone(0xc0100011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m21.928399369s ago: executing program 5 (id=4883): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 1m21.075462806s ago: executing program 5 (id=4899): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m21.032537589s ago: executing program 5 (id=4901): syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x7}}) 1m20.741376996s ago: executing program 5 (id=4914): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r0, r0, 0x0, 0x7) 1m20.716233012s ago: executing program 43 (id=4914): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r0, r0, 0x0, 0x7) 44.68843289s ago: executing program 0 (id=5944): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) r1 = io_uring_setup(0xf31, &(0x7f00000001c0)={0x0, 0x8dd3, 0x1, 0x3, 0x18a}) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2100) 43.496700617s ago: executing program 0 (id=5965): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 43.296020331s ago: executing program 0 (id=5970): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x6, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffc, 0x0) unshare(0x62000000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00', 0x2000004}, 0x18) 43.064033699s ago: executing program 0 (id=5977): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 43.028949693s ago: executing program 0 (id=5979): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe43) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) creat(&(0x7f0000000100)='./file0\x00', 0x0) 42.795759091s ago: executing program 0 (id=5986): socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 42.759709405s ago: executing program 44 (id=5986): socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 29.756982153s ago: executing program 4 (id=6371): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)="000600000000000055e8372497920be864fcce22b2ff68c9caa4e30f75db916c631b99b6832a0178c8c46b2438ba7eaf", 0x30}], 0x1) 29.160414757s ago: executing program 4 (id=6386): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x34, 0x102, 0xf}, 0x2c) 29.089447384s ago: executing program 4 (id=6391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 29.044361096s ago: executing program 4 (id=6394): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x56b, &(0x7f0000000440)="$eJzs3c1rHOUfAPDvbDbp6+/XFEpREQn0YKV20yS+VPBQj6LFgt7rkkxDyaZbspvSxILtwV68SBFELIgHb3r3WPwHvPgvFLRQpAQ9eInMZjbNy26ybTYv7X4+MOF5dmb3me/MfJ88s88uG0DPGsr+FCJejIivkogjEZHk64qRrxxa2m7h0Y3xbElicfHjv5LGdlm9+VrN5x3KKy9ExK9fRJwqrG+3Njc/Va5U0pm8Plyfvjpcm5s/fXm6PJlOpldGx8bOvjk2+s7bb3Ut1tcu/PPtR/feP/vliYVvfn5w9E4S5+Jwvm5lHFtwc2VlKIbyY9If59ZsONKFxvaSZLd3gKfSl+d5f2R9wJHoy7O+lR8P7OiuAdvs84hYBHpUIv+hRzXHAc17+y7dBz8zHr63dAO0Pv7i0nsjsb9xb3RwIVl1Z5Td7w52of2sjV/+vHsnW6J770MAbOrmrYg4Uyyu7/+SvP97emc62GZtG/o/2Dn3svHP6+vGPwOxnJv7G3/Xjn8Otcjdp7F5/hcedKGZtrLx37stx7/Lk1aDfXntf40xX39y6XIlzfq2/0fEyejfl9U3ms85u3B/sd26leO/bMnab44F8/14UNy3+jkT5Xp5KzGv9PBWxEstx7/J8vlPWpz/7Hhc6LCN4+ndV9qt2zz+7bX4Q8SrLc//4xmtZOP5yeHG9TDcvCrW+/v28d/atb/b8Wfn/+DG8Q8mK+dra0/exvf7/03brVsVf3R+/Q8knzTKA/lj18v1+sxIxEDy4frHRx8/t1lvbp/Ff/JE6/zf6Po/EBGfdhj/7WM/vdxR/Lt0/iee6Pw/eeH+B5991679zvq/Nxqlk/kjnfR/ne7gVo4dAAAAAAAA7DWFiDgcSaG0XC4USqWlz3cci4OFSrVWP3WpOntlIhrflR2M/kJzpvvIis9DjOSfh23WR9fUxyLiaER83XegUS+NVysTux08AAAAAAAAAAAAAAAAAAAA7BGH2nz/P/NH327vHbDt2v/kN/C82zT/u/FLT8Ce5P8/9C75D71L/kPvkv/Qu+Q/9C75D71L/kPvkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQVRfOn8+WxYVHN8az+sS1udmp6rXTE2ltqjQ9O14ar85cLU1Wq5OVtDRend7s9SrV6tWR0Zi9PlxPa/Xh2tz8xenq7JX6xcvT5cn0Ytq/I1EBAAAAAAAAAAAAAAAAAADAs6U2Nz9VrlTSGYXns/D7djdR3OrrFCNiDxwohdWF3e6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCx/wIAAP//sIc3PA==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x131) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0x1bfd31aa}], 0x1, 0x0, 0x0, 0x1) 28.863511984s ago: executing program 4 (id=6404): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) close(0x3) 28.56164649s ago: executing program 4 (id=6416): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x3, 0x241, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) truncate(&(0x7f0000000080)='./file1/file0\x00', 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 28.532580775s ago: executing program 45 (id=6416): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x3, 0x241, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) truncate(&(0x7f0000000080)='./file1/file0\x00', 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 26.497085851s ago: executing program 1 (id=6465): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 26.49124894s ago: executing program 1 (id=6466): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x8808, 0x102, 0x9, 0x5, 0x5, 0x100, 0x89, 0x0, 0x200, 0x0, 0xfffffffffffffff9}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 26.397028973s ago: executing program 1 (id=6469): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 26.37972403s ago: executing program 1 (id=6471): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x56b, &(0x7f0000000440)="$eJzs3c1rHOUfAPDvbDbp6+/XFEpREQn0YKV20yS+VPBQj6LFgt7rkkxDyaZbspvSxILtwV68SBFELIgHb3r3WPwHvPgvFLRQpAQ9eInMZjbNy26ybTYv7X4+MOF5dmb3me/MfJ88s88uG0DPGsr+FCJejIivkogjEZHk64qRrxxa2m7h0Y3xbElicfHjv5LGdlm9+VrN5x3KKy9ExK9fRJwqrG+3Njc/Va5U0pm8Plyfvjpcm5s/fXm6PJlOpldGx8bOvjk2+s7bb3Ut1tcu/PPtR/feP/vliYVvfn5w9E4S5+Jwvm5lHFtwc2VlKIbyY9If59ZsONKFxvaSZLd3gKfSl+d5f2R9wJHoy7O+lR8P7OiuAdvs84hYBHpUIv+hRzXHAc17+y7dBz8zHr63dAO0Pv7i0nsjsb9xb3RwIVl1Z5Td7w52of2sjV/+vHsnW6J770MAbOrmrYg4Uyyu7/+SvP97emc62GZtG/o/2Dn3svHP6+vGPwOxnJv7G3/Xjn8Otcjdp7F5/hcedKGZtrLx37stx7/Lk1aDfXntf40xX39y6XIlzfq2/0fEyejfl9U3ms85u3B/sd26leO/bMnab44F8/14UNy3+jkT5Xp5KzGv9PBWxEstx7/J8vlPWpz/7Hhc6LCN4+ndV9qt2zz+7bX4Q8SrLc//4xmtZOP5yeHG9TDcvCrW+/v28d/atb/b8Wfn/+DG8Q8mK+dra0/exvf7/03brVsVf3R+/Q8knzTKA/lj18v1+sxIxEDy4frHRx8/t1lvbp/Ff/JE6/zf6Po/EBGfdhj/7WM/vdxR/Lt0/iee6Pw/eeH+B5991679zvq/Nxqlk/kjnfR/ne7gVo4dAAAAAAAA7DWFiDgcSaG0XC4USqWlz3cci4OFSrVWP3WpOntlIhrflR2M/kJzpvvIis9DjOSfh23WR9fUxyLiaER83XegUS+NVysTux08AAAAAAAAAAAAAAAAAAAA7BGH2nz/P/NH327vHbDt2v/kN/C82zT/u/FLT8Ce5P8/9C75D71L/kPvkv/Qu+Q/9C75D71L/kPvkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQVRfOn8+WxYVHN8az+sS1udmp6rXTE2ltqjQ9O14ar85cLU1Wq5OVtDRend7s9SrV6tWR0Zi9PlxPa/Xh2tz8xenq7JX6xcvT5cn0Ytq/I1EBAAAAAAAAAAAAAAAAAADAs6U2Nz9VrlTSGYXns/D7djdR3OrrFCNiDxwohdWF3e6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCx/wIAAP//sIc3PA==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x131) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0x1bfd31aa}], 0x1, 0x0, 0x0, 0x1) 26.196887457s ago: executing program 1 (id=6475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) 25.87564712s ago: executing program 1 (id=6482): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c80c4, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 25.841090254s ago: executing program 46 (id=6482): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c80c4, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 6.077919605s ago: executing program 8 (id=7038): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 6.041165599s ago: executing program 8 (id=7039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0xfb}) 6.017240714s ago: executing program 8 (id=7042): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.942524081s ago: executing program 8 (id=7046): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 5.929157168s ago: executing program 8 (id=7048): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x2d) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.807432227s ago: executing program 47 (id=7049): r0 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x2d) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.484849973s ago: executing program 3 (id=7137): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioperm(0x7, 0x4, 0x7) 2.360789451s ago: executing program 3 (id=7129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x3) 2.195773772s ago: executing program 3 (id=7131): socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3e, 0x0, 0x80000000000000, 0x800, 0x0, 0x8100000, 0x3}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6a8, 0x3ac8}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) 2.107127626s ago: executing program 3 (id=7133): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.065766519s ago: executing program 3 (id=7135): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0xfffffdc9}, 0x0, 0x40}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 1.873990285s ago: executing program 3 (id=7144): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0, 0x300}) 1.842659649s ago: executing program 48 (id=7144): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0, 0x300}) 1.367013084s ago: executing program 7 (id=7172): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) read$ptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.041357706s ago: executing program 7 (id=7174): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a802040000000080000000014000200008000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 982.622865ms ago: executing program 7 (id=7175): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @local}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 943.672839ms ago: executing program 7 (id=7176): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 667.939299ms ago: executing program 2 (id=7184): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 619.809611ms ago: executing program 2 (id=7186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) sendfile(r1, r1, 0x0, 0x1000200201005) 617.57917ms ago: executing program 6 (id=7195): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4004020e"], 0x7) 569.208632ms ago: executing program 9 (id=7187): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 568.344362ms ago: executing program 2 (id=7188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 535.167055ms ago: executing program 6 (id=7189): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 469.058044ms ago: executing program 2 (id=7190): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000dc0)='C\x13\xfc2\x80\x00\x00\x00\x00\x00\x00\x00\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE\xf3\xbd\x1d\x01\xcc\xb4<\x00\xddo*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\a\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW\xcb*o\xb6\xb4\xed0\x03\xc6\xcamzq3*(-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdBn8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92\xfd\x12\xe3\xab\f\x86\x01}\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS\xf4\x15q`]\x1a2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x10\xce\x8b\x8b\xf4&$\xe4tg\xaa\x1f\x82\xa7\x16\x8c\xdc\xc3Q\\\xdd\xe7\xa6\x91\xa0=B\xff\x87\x94\x96#NjH\xcb(4\xfess3@\xfb5zF6\x82!\x82\f0\x12\\\xe7\"|\x16u\xd7\t\xaa\x15<\x17d>\xe8\xaf\xea\xafhvzi4S3\xd5\xda\x19\xdb\xdfT', 0x3) pwritev(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000080)="6837fc3cdcbe3c3bab92b85a19d3797f609630b52cbec944ddd8d9fad98560a0cdbb5b89", 0x24}], 0x2, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) 435.705798ms ago: executing program 6 (id=7191): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x8000000000000001, 0x1) 414.389914ms ago: executing program 9 (id=7192): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x88040, 0x140) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x45) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 378.232537ms ago: executing program 6 (id=7193): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8a) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000140)=""/227, 0xe3}], 0x1, 0xce, 0x7) 311.289436ms ago: executing program 7 (id=7194): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setrlimit(0x7, &(0x7f0000000400)) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8000100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x986}]}, &(0x7f0000000080)=0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x900}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 310.773095ms ago: executing program 6 (id=7196): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2859}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffd7b, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3a}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60004080}, 0x24008800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 294.403012ms ago: executing program 7 (id=7197): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 265.806398ms ago: executing program 9 (id=7198): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb4}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x3b}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 122.345012ms ago: executing program 9 (id=7199): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x94}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @rand_addr=0x64010102}, 0x2}}, 0x2e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) 118.883621ms ago: executing program 6 (id=7200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 105.028469ms ago: executing program 2 (id=7201): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000640)=@framed={{}, [@printk]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 86.928876ms ago: executing program 9 (id=7202): setresuid(0xee00, 0xee00, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) 649.65µs ago: executing program 9 (id=7203): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0xf2a, 0x4) r0 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffc, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 0s ago: executing program 2 (id=7204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 241.913334][T19713] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 241.961404][ T29] audit: type=1400 audit(1773195401.839:3368): avc: denied { connect } for pid=19730 comm="syz.8.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.015300][T19735] loop7: detected capacity change from 0 to 7 [ 242.037770][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 242.122543][T19749] loop3: detected capacity change from 0 to 512 [ 242.480145][T19766] loop4: detected capacity change from 0 to 128 [ 242.619576][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5446'. [ 242.639769][T19775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.663320][T19775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.797457][T19766] syz.4.5442: attempt to access beyond end of device [ 242.797457][T19766] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 242.828925][T19766] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 243.002504][T19779] loop8: detected capacity change from 0 to 1024 [ 243.062405][T19779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.129314][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.325255][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5454'. [ 243.525989][ T29] audit: type=1400 audit(1773195403.399:3369): avc: denied { mount } for pid=19805 comm="syz.8.5459" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 243.587563][ T29] audit: type=1400 audit(1773195403.459:3370): avc: denied { name_bind } for pid=19807 comm="syz.3.5460" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 243.790220][T19824] loop3: detected capacity change from 0 to 512 [ 243.808209][T19824] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.5470: invalid block [ 243.839217][T19824] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 243.839342][T19824] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5470: invalid indirect mapped block 4294967295 (level 1) [ 243.862419][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 243.862445][ C0] EXT4-fs (loop3): initial error at time 1773195403: ext4_get_branch:178: inode 11: block 4294967295 [ 243.862484][ C0] EXT4-fs (loop3): last error at time 1773195403: ext4_get_branch:178: inode 11: block 4294967295 [ 243.897303][T19824] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 243.897463][T19824] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5470: invalid indirect mapped block 4294967295 (level 1) [ 243.922384][T19824] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 243.922664][T19824] EXT4-fs (loop3): 2 truncates cleaned up [ 243.938226][T19824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.966059][T19824] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 243.984060][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.007606][ T29] audit: type=1400 audit(1773195403.879:3371): avc: denied { sqpoll } for pid=19831 comm="syz.8.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 244.370633][T19863] loop8: detected capacity change from 0 to 128 [ 244.496306][ T29] audit: type=1400 audit(1773195404.369:3372): avc: denied { bind } for pid=19872 comm="syz.6.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.977223][ T29] audit: type=1400 audit(1773195404.849:3373): avc: denied { watch } for pid=19919 comm="syz.8.5512" path="/proc/355" dev="proc" ino=57150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 245.005897][T19903] loop4: detected capacity change from 0 to 8192 [ 245.087195][ T29] audit: type=1400 audit(1773195404.889:3374): avc: denied { map } for pid=19922 comm="syz.0.5513" path="socket:[58170]" dev="sockfs" ino=58170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.182024][T19935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5518'. [ 246.289894][T20009] loop3: detected capacity change from 0 to 32768 [ 246.386269][T20034] loop4: detected capacity change from 0 to 128 [ 246.402917][T20034] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.423908][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 246.423921][ T29] audit: type=1400 audit(1773195406.299:3378): avc: denied { watch watch_reads } for pid=20033 comm="syz.4.5561" path="/1153/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 246.470974][T20038] geneve2: entered promiscuous mode [ 246.635553][ T29] audit: type=1400 audit(1773195406.509:3379): avc: denied { setopt } for pid=20053 comm="syz.3.5573" laddr=::ffff:172.20.20.40 lport=53277 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 246.695506][T20060] netlink: 'syz.3.5576': attribute type 3 has an invalid length. [ 246.703414][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5576'. [ 246.729079][T20062] loop3: detected capacity change from 0 to 128 [ 246.735997][T20062] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.853046][T20074] loop3: detected capacity change from 0 to 1024 [ 246.874362][T20074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.906578][T20074] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.5583: inode #1869229157: comm syz.3.5583: iget: illegal inode # [ 246.936522][T20074] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5583: error while reading EA inode 1869229157 err=-117 [ 246.989382][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.132884][T20094] tipc: Resetting bearer [ 247.375649][T20120] geneve2: entered promiscuous mode [ 247.498949][ T29] audit: type=1400 audit(1773195407.369:3380): avc: denied { connect } for pid=20134 comm="syz.6.5610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.536458][T20137] loop8: detected capacity change from 0 to 1024 [ 247.558670][T20137] EXT4-fs: Ignoring removed oldalloc option [ 247.576255][T20137] EXT4-fs: Ignoring removed bh option [ 247.613493][T20137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.661738][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.678509][T20144] loop4: detected capacity change from 0 to 4096 [ 247.693921][T20144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.715184][T20144] EXT4-fs (loop4): shut down requested (1) [ 247.722773][T20146] loop8: detected capacity change from 0 to 1024 [ 247.723760][ T29] audit: type=1400 audit(1773195407.599:3381): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 247.729602][T20146] EXT4-fs: Ignoring removed orlov option [ 247.754016][T20144] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 247.769478][ T29] audit: type=1400 audit(1773195407.599:3382): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.794509][T20144] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 247.794457][ T29] audit: type=1400 audit(1773195407.599:3383): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.837621][T20146] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.851756][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.854152][ T29] audit: type=1400 audit(1773195407.599:3384): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.904385][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.947712][ T29] audit: type=1400 audit(1773195407.599:3385): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.002520][T20159] loop4: detected capacity change from 0 to 256 [ 248.263682][T20172] loop3: detected capacity change from 0 to 512 [ 248.285568][T20172] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.308124][T20172] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (6000000) [ 248.358594][T20172] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 248.501522][T20187] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5632'. [ 248.831227][T20215] loop3: detected capacity change from 0 to 256 [ 248.931034][T20219] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5647'. [ 249.011025][ T7837] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.019500][ T7837] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.080037][T20227] loop3: detected capacity change from 0 to 4096 [ 249.090835][T20227] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 249.102527][T20230] syzkaller1: entered promiscuous mode [ 249.122807][T20230] syzkaller1: entered allmulticast mode [ 249.229429][T20242] loop0: detected capacity change from 0 to 128 [ 249.249621][T20242] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.262951][T20245] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.280202][T20245] ext4 filesystem being mounted at /1177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.309721][ T29] audit: type=1400 audit(1773195409.179:3386): avc: denied { unmount } for pid=20239 comm="syz.3.5657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 249.382410][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.399000][ T29] audit: type=1400 audit(1773195409.229:3387): avc: denied { execute_no_trans } for pid=20241 comm="syz.4.5659" path="/1177/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.402788][T20250] syz.0.5660: attempt to access beyond end of device [ 249.402788][T20250] loop0: rw=8388611, sector=138, nr_sectors = 6 limit=128 [ 249.460329][T20251] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.5661: inode has both inline data and extents flags [ 249.476249][T20251] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.490023][T20250] syz.0.5660: attempt to access beyond end of device [ 249.490023][T20250] loop0: rw=8390659, sector=144, nr_sectors = 106 limit=128 [ 249.517042][T20256] EXT4-fs: Ignoring removed orlov option [ 249.523286][T20251] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5661: couldn't read orphan inode 15 (err -117) [ 249.535143][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 249.535168][ C0] EXT4-fs (loop3): initial error at time 1773195409: ext4_orphan_get:1391: inode 15 [ 249.535195][ C0] EXT4-fs (loop3): last error at time 1773195409: ext4_orphan_get:1391: inode 15 [ 249.561386][T20251] loop3: lost filesystem error report for type 5 error -117 [ 249.563195][T20251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.598478][T20256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.634357][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.665896][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.072823][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 250.080779][ T3373] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 250.089315][ T3373] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 250.107311][T20300] syzkaller1: entered promiscuous mode [ 250.113854][T20300] syzkaller1: entered allmulticast mode [ 250.231855][T20310] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.407037][ T3373] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 250.415035][ T3373] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 250.423332][ T3373] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 250.469944][T20329] fido_id[20329]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 250.696198][T20361] EXT4-fs: Ignoring removed bh option [ 250.711285][T20361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.774305][T10210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.817141][T20368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5712'. [ 250.890910][T20374] vhci_hcd vhci_hcd.3: default hub control req: 6016 v000e i0006 l0 [ 250.999871][T20387] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.013309][T20387] ext4 filesystem being mounted at /645/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.036793][T10210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.323080][T20412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.352573][T20412] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.5731: inode #1869229157: comm syz.0.5731: iget: illegal inode # [ 251.367020][T20412] EXT4-fs (loop0): Remounting filesystem read-only [ 251.390007][T20412] EXT4-fs warning (device loop0): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.0.5731: cleanup dec ref error -30 [ 251.431808][T20412] EXT4-fs warning (device loop0): ext4_xattr_block_set:2200: inode #19: comm syz.0.5731: dec ref error=-30 [ 251.447190][T20420] IPv6: NLM_F_REPLACE set, but no existing node found! [ 251.467813][T10210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.648012][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5745'. [ 251.670031][T20445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.677595][T20445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.688184][T20445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.701387][T20445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.701468][T20448] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 251.718402][T20448] SELinux: failed to load policy [ 251.756262][T20451] syzkaller1: entered promiscuous mode [ 251.762947][T20451] syzkaller1: entered allmulticast mode [ 251.882727][T20463] set_capacity_and_notify: 10 callbacks suppressed [ 251.882789][T20463] loop8: detected capacity change from 0 to 512 [ 251.926886][T20463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.950672][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5755'. [ 251.950708][T20463] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.985675][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5753'. [ 251.994776][T20463] bond0: Unable to set up delay as MII monitoring is disabled [ 252.028732][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.718969][T20535] pim6reg1: entered promiscuous mode [ 252.731960][T20535] pim6reg1: entered allmulticast mode [ 252.822410][T20541] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 252.885257][T20545] loop0: detected capacity change from 0 to 512 [ 252.921963][T20545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.936331][T20545] ext4 filesystem being mounted at /658/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.950301][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5789'. [ 252.959243][T20545] bond0: Unable to set up delay as MII monitoring is disabled [ 253.008996][T10210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.051283][T20553] tipc: Enabling of bearer rejected, failed to enable media [ 253.111489][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5793'. [ 253.170889][T20560] SELinux: failed to load policy [ 253.543154][T20574] IPVS: You probably need to specify IP address on multicast interface. [ 253.574121][T20574] IPVS: Error connecting to the multicast addr [ 253.676389][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 253.676403][ T29] audit: type=1400 audit(1773195413.549:3397): avc: denied { read } for pid=20584 comm="syz.4.5806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 253.763079][T20592] io-wq is not configured for unbound workers [ 253.889257][T20600] syzkaller1: entered promiscuous mode [ 253.913594][T20600] syzkaller1: entered allmulticast mode [ 253.958735][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5817'. [ 254.010395][T20613] tipc: Enabling of bearer rejected, failed to enable media [ 254.019583][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5820'. [ 254.142095][T20628] SELinux: policydb magic number 0x1c does not match expected magic number 0xf97cff8c [ 254.156060][T20628] SELinux: failed to load policy [ 254.201946][ T35] kernel write not supported for file /user (pid: 35 comm: kworker/1:1) [ 254.255971][T20638] loop8: detected capacity change from 0 to 1024 [ 254.291449][T20644] tipc: Started in network mode [ 254.296476][T20644] tipc: Node identity ac14142f, cluster identity 4711 [ 254.309117][T20644] tipc: New replicast peer: 0.0.0.0 [ 254.324795][T20644] tipc: Enabled bearer , priority 10 [ 254.328414][T20638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.335172][T20644] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 254.379033][T20638] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: comm syz.8.5831: inode #1869229157: comm syz.8.5831: iget: illegal inode # [ 254.393789][T20638] EXT4-fs (loop8): Remounting filesystem read-only [ 254.400878][T20638] EXT4-fs warning (device loop8): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.8.5831: cleanup dec ref error -30 [ 254.429031][T20638] EXT4-fs warning (device loop8): ext4_xattr_block_set:2200: inode #19: comm syz.8.5831: dec ref error=-30 [ 254.430453][T20651] syzkaller1: entered promiscuous mode [ 254.460137][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.460299][T20651] syzkaller1: entered allmulticast mode [ 254.476533][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5837'. [ 254.617767][T20664] loop4: detected capacity change from 0 to 128 [ 254.910151][T20693] syzkaller1: entered promiscuous mode [ 254.915746][T20693] syzkaller1: entered allmulticast mode [ 255.438899][ T7077] tipc: Node number set to 2886997039 [ 255.668441][T20716] SELinux: policydb table sizes (6357000,9) do not match mine (8,9) [ 255.676702][T20716] SELinux: failed to load policy [ 255.682024][ T7077] kernel write not supported for file /user (pid: 7077 comm: kworker/1:7) [ 255.708329][T20718] loop4: detected capacity change from 0 to 4096 [ 255.718991][T20722] loop8: detected capacity change from 0 to 512 [ 255.737678][T20718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.912512][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.932762][T20743] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5878'. [ 255.953469][T20745] loop0: detected capacity change from 0 to 512 [ 255.972964][T20745] EXT4-fs (loop0): 1 truncate cleaned up [ 256.012316][T20745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.079732][T20745] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5879: invalid indirect mapped block 234881024 (level 0) [ 256.138095][T10210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.601775][ T7077] kernel write not supported for file bpf-prog (pid: 7077 comm: kworker/1:7) [ 257.523267][ T29] audit: type=1326 audit(1773195417.399:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 257.546939][ T29] audit: type=1326 audit(1773195417.399:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 257.571556][ T29] audit: type=1326 audit(1773195417.399:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 257.595499][ T29] audit: type=1326 audit(1773195417.399:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 257.619312][ T29] audit: type=1326 audit(1773195417.399:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20814 comm="syz.0.5906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 257.708233][T20827] loop0: detected capacity change from 0 to 128 [ 257.742439][ T29] audit: type=1400 audit(1773195417.609:3403): avc: denied { rename } for pid=20828 comm="syz.3.5914" name="file0" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 257.777893][ T29] audit: type=1400 audit(1773195417.639:3404): avc: denied { mounton } for pid=20828 comm="syz.3.5914" path="/218/file7" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 257.840228][T20838] loop8: detected capacity change from 0 to 256 [ 257.931945][ T3399] kernel read not supported for file /rfkill (pid: 3399 comm: kworker/1:3) [ 258.019944][ T7837] kernel write not supported for file bpf-prog (pid: 7837 comm: kworker/0:7) [ 258.155142][ T29] audit: type=1326 audit(1773195418.029:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20874 comm="syz.3.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda8c7c799 code=0x7ffc0000 [ 258.208881][ T29] audit: type=1326 audit(1773195418.029:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20874 comm="syz.3.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda8c7c799 code=0x7ffc0000 [ 258.712424][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 258.712487][ T29] audit: type=1326 audit(1773195418.589:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20906 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 258.758268][T20915] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.5954'. [ 258.857736][T20924] netlink: 'syz.6.5959': attribute type 1 has an invalid length. [ 258.894492][ T29] audit: type=1400 audit(1773195418.769:3493): avc: denied { ioctl } for pid=20925 comm="syz.8.5960" path="socket:[61042]" dev="sockfs" ino=61042 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.600899][ T29] audit: type=1326 audit(1773195419.479:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.644798][ T29] audit: type=1326 audit(1773195419.479:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.669658][ T29] audit: type=1326 audit(1773195419.489:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.693544][ T29] audit: type=1326 audit(1773195419.489:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.700087][T20942] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5968'. [ 259.726256][T20942] netlink: 'syz.8.5968': attribute type 4 has an invalid length. [ 259.746422][ T3614] Bluetooth: hci0: command 0x1003 tx timeout [ 259.752525][ T6902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 259.762969][ T29] audit: type=1326 audit(1773195419.489:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.787211][ T29] audit: type=1326 audit(1773195419.489:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.812009][ T29] audit: type=1326 audit(1773195419.489:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.836938][ T29] audit: type=1326 audit(1773195419.489:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20931 comm="syz.0.5965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12472bc799 code=0x7ffc0000 [ 259.965038][T20948] IPVS: You probably need to specify IP address on multicast interface. [ 259.973765][T20948] IPVS: Error connecting to the multicast addr [ 260.236688][ T117] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.294195][ T117] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.350477][ T117] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.410202][ T117] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.436807][T20984] IPVS: You probably need to specify IP address on multicast interface. [ 260.445360][T20984] IPVS: Error connecting to the multicast addr [ 260.465323][ T117] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.523956][T20980] chnl_net:caif_netlink_parms(): no params data found [ 260.555640][ T117] vlan2: left promiscuous mode [ 260.560624][ T117] dummy0: left promiscuous mode [ 260.565715][ T117] bridge0: port 3(vlan2) entered disabled state [ 260.573242][ T117] bridge_slave_1: left allmulticast mode [ 260.579021][ T117] bridge_slave_1: left promiscuous mode [ 260.584654][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.593069][ T117] bridge_slave_0: left allmulticast mode [ 260.598729][ T117] bridge_slave_0: left promiscuous mode [ 260.604593][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.780816][ T117] tipc: Resetting bearer [ 260.804991][ T117] tipc: Disabling bearer [ 260.880816][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.890980][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.901334][ T117] bond0 (unregistering): Released all slaves [ 260.909202][ T117] bond1 (unregistering): Released all slaves [ 260.926411][ T117] tipc: Left network mode [ 260.937891][T20980] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.945685][T20980] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.952872][T20980] bridge_slave_0: entered allmulticast mode [ 260.959473][T20980] bridge_slave_0: entered promiscuous mode [ 260.967204][ T117] hsr_slave_0: left promiscuous mode [ 260.979650][ T117] veth1_macvtap: left promiscuous mode [ 260.985161][ T117] veth0_macvtap: left promiscuous mode [ 260.990849][ T117] veth1_vlan: left promiscuous mode [ 260.996059][ T117] veth0_vlan: left promiscuous mode [ 261.051310][ T117] team0 (unregistering): Port device team_slave_1 removed [ 261.062223][ T117] team0 (unregistering): Port device team_slave_0 removed [ 261.092366][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.099585][T20980] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.106797][T20980] bridge_slave_1: entered allmulticast mode [ 261.113645][T20980] bridge_slave_1: entered promiscuous mode [ 261.134889][T20980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.145376][T20980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.164934][T20980] team0: Port device team_slave_0 added [ 261.171541][T20980] team0: Port device team_slave_1 added [ 261.190455][T20980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.197421][T20980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.224788][T20980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.237786][T20980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.245214][T20980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.271714][T20980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.298047][T20980] hsr_slave_0: entered promiscuous mode [ 261.304155][T20980] hsr_slave_1: entered promiscuous mode [ 261.310164][T20980] debugfs: 'hsr0' already exists in 'hsr' [ 261.315907][T20980] Cannot create hsr debugfs directory [ 261.432397][ T117] IPVS: stop unused estimator thread 0... [ 262.105338][T20980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.114735][T20980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.124450][T20980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.134500][T20980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.177344][T20980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.192505][T20980] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.203188][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.210310][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.230279][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.237401][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.290686][ T3614] Bluetooth: hci0: command 0x1003 tx timeout [ 262.296823][ T6902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.324066][T20980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.390955][T20980] veth0_vlan: entered promiscuous mode [ 262.400316][T20980] veth1_vlan: entered promiscuous mode [ 262.413847][T20980] veth0_macvtap: entered promiscuous mode [ 262.424328][T20980] veth1_macvtap: entered promiscuous mode [ 262.435843][T20980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.447643][T20980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.460367][T12928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.477295][T12928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.491807][T12928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.509421][T12928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.915987][T21272] loop1: detected capacity change from 0 to 512 [ 262.951327][T21272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.977588][T21272] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.995749][T21288] netlink: 'syz.4.6011': attribute type 1 has an invalid length. [ 263.011330][T21272] EXT4-fs error (device loop1): ext4_get_first_dir_block:3550: inode #12: comm syz.1.6006: directory missing '..' [ 263.044715][T20980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.283322][T21325] syzkaller1: entered promiscuous mode [ 263.293009][T21325] syzkaller1: entered allmulticast mode [ 263.452428][T21341] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 263.681932][T21363] syzkaller1: entered promiscuous mode [ 263.685890][T21365] loop8: detected capacity change from 0 to 512 [ 263.687417][T21363] syzkaller1: entered allmulticast mode [ 263.746584][T21367] netlink: 'syz.4.6042': attribute type 3 has an invalid length. [ 263.770034][T21365] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.780569][T21367] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6042'. [ 263.804018][T21365] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.858474][T21377] loop4: detected capacity change from 0 to 1024 [ 263.865317][T21377] EXT4-fs: test_dummy_encryption option not supported [ 264.029270][T21385] netlink: 'syz.6.6048': attribute type 1 has an invalid length. [ 264.080327][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.355611][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 264.355626][ T29] audit: type=1326 audit(1773195424.229:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.398450][ T29] audit: type=1326 audit(1773195424.229:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.424315][ T29] audit: type=1326 audit(1773195424.259:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.455390][ T29] audit: type=1326 audit(1773195424.259:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.481652][ T29] audit: type=1326 audit(1773195424.269:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.507627][ T29] audit: type=1326 audit(1773195424.269:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.534146][ T29] audit: type=1326 audit(1773195424.269:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.558660][ T29] audit: type=1326 audit(1773195424.269:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.585983][ T29] audit: type=1326 audit(1773195424.269:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.611870][ T29] audit: type=1326 audit(1773195424.269:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21401 comm="syz.8.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 264.701014][T21415] loop8: detected capacity change from 0 to 256 [ 264.854810][T21415] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 264.876839][T21415] FAT-fs (loop8): Filesystem has been set read-only [ 264.930596][T21422] tipc: Enabled bearer , priority 10 [ 264.994176][T21387] syz.6.6049 (21387) used greatest stack depth: 5968 bytes left [ 265.064650][T21436] sctp: [Deprecated]: syz.4.6069 (pid 21436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.064650][T21436] Use struct sctp_sack_info instead [ 265.088932][T21440] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 265.110256][T21436] loop4: detected capacity change from 0 to 2048 [ 265.153489][T21436] loop4: p3 < > p4 < > [ 265.157672][T21436] loop4: partition table partially beyond EOD, truncated [ 265.165717][T21436] loop4: p3 start 4284289 is beyond EOD, truncated [ 265.175956][T21451] loop8: detected capacity change from 0 to 1024 [ 265.189777][T21453] tipc: Started in network mode [ 265.194758][T21453] tipc: Node identity ac14140f, cluster identity 4711 [ 265.208616][T21451] EXT4-fs: test_dummy_encryption option not supported [ 265.232927][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 265.249251][T21453] tipc: Enabled bearer , priority 10 [ 265.607295][T21492] sctp: [Deprecated]: syz.6.6090 (pid 21492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.607295][T21492] Use struct sctp_sack_info instead [ 265.636149][T21494] vlan4: entered allmulticast mode [ 265.641498][T21494] bridge0: entered allmulticast mode [ 265.647041][T21494] bridge0: port 4(vlan4) entered blocking state [ 265.663676][T21494] bridge0: port 4(vlan4) entered disabled state [ 265.707320][T21499] syzkaller1: entered promiscuous mode [ 265.713398][T21499] syzkaller1: entered allmulticast mode [ 265.826563][T21511] loop4: detected capacity change from 0 to 512 [ 265.839869][T21511] FAT-fs (loop4): error, corrupted file size (i_pos 51, 9216) [ 265.862103][T21511] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 265.870559][T21511] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960) [ 266.058867][ T7077] tipc: Node number set to 4269801504 [ 266.276850][ T2560] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.311992][ T2560] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.329076][T21520] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 266.337450][ T2560] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.368740][ T2560] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.388132][ T35] tipc: Node number set to 2886997007 [ 266.395932][T21529] loop4: detected capacity change from 0 to 512 [ 266.451143][T21529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.465514][T21529] ext4 filesystem being mounted at /1265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.514348][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.622912][T21546] SELinux: policydb magic number 0x11 does not match expected magic number 0xf97cff8c [ 266.648880][T21546] SELinux: failed to load policy [ 266.799198][T21562] syzkaller1: entered promiscuous mode [ 266.808857][T21562] syzkaller1: entered allmulticast mode [ 266.879098][ T2560] Bluetooth: hci0: Frame reassembly failed (-84) [ 266.930456][T21575] erspan0: entered promiscuous mode [ 266.941842][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6127'. [ 267.687456][T21648] SELinux: ebitmap: empty map [ 267.692194][T21648] SELinux: failed to load policy [ 267.885717][T21667] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 267.930302][T21672] tmpfs: Cannot disable swap on remount [ 267.981490][T21679] loop3: detected capacity change from 0 to 512 [ 268.000015][T21679] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6173: invalid indirect mapped block 256 (level 2) [ 268.014475][T21679] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.014899][T21679] EXT4-fs (loop3): 2 truncates cleaned up [ 268.024124][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 268.024143][ C0] EXT4-fs (loop3): initial error at time 1773195427: ext4_free_branches:1023: inode 11 [ 268.024169][ C0] EXT4-fs (loop3): last error at time 1773195427: ext4_free_branches:1023: inode 11 [ 268.059928][T21679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.125234][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.484696][T21736] netlink: 'syz.6.6198': attribute type 2 has an invalid length. [ 268.531476][T21738] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.538689][T21738] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.575078][T21738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.617134][ T2560] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.632204][ T2560] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.642875][ T2560] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.657960][ T2560] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.928852][ T3614] Bluetooth: hci0: command 0x1003 tx timeout [ 268.928900][ T6902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 268.962724][T21771] loop4: detected capacity change from 0 to 128 [ 269.138857][T21782] loop4: detected capacity change from 0 to 2048 [ 269.145480][T21782] EXT4-fs: Ignoring removed i_version option [ 269.161594][T21782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.174227][T21782] ext4 filesystem being mounted at /1272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.266427][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.303408][T21794] loop4: detected capacity change from 0 to 512 [ 269.315499][T21794] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6219: invalid indirect mapped block 256 (level 2) [ 269.332229][T21794] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 269.332571][T21794] EXT4-fs (loop4): 2 truncates cleaned up [ 269.341819][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 269.341838][ C0] EXT4-fs (loop4): initial error at time 1773195429: ext4_free_branches:1023: inode 11 [ 269.341875][ C0] EXT4-fs (loop4): last error at time 1773195429: ext4_free_branches:1023: inode 11 [ 269.373385][T21794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.396740][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.454252][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 269.454267][ T29] audit: type=1326 audit(1773195429.329:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21803 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360626c799 code=0x7ffc0000 [ 269.484437][ T29] audit: type=1326 audit(1773195429.329:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21803 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360626c799 code=0x7ffc0000 [ 269.509502][ T29] audit: type=1326 audit(1773195429.329:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21803 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f360626c799 code=0x7ffc0000 [ 269.533792][ T29] audit: type=1326 audit(1773195429.329:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21803 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360626c799 code=0x7ffc0000 [ 269.567893][ T29] audit: type=1326 audit(1773195429.329:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21803 comm="syz.4.6222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360626c799 code=0x7ffc0000 [ 269.592326][ T29] audit: type=1326 audit(1773195429.409:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21758 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7fc00000 [ 269.615577][T21808] tmpfs: Cannot disable swap on remount [ 269.653819][T21818] loop4: detected capacity change from 0 to 1024 [ 269.680296][T21818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.764327][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.915013][ T29] audit: type=1400 audit(1773195429.789:3575): avc: denied { create } for pid=21844 comm="syz.3.6242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 270.153489][T21893] loop1: detected capacity change from 0 to 1024 [ 270.161084][T21893] EXT4-fs: inline encryption not supported [ 270.173025][T21893] EXT4-fs: Ignoring removed bh option [ 270.191041][T21893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.219339][ T29] audit: type=1400 audit(1773195430.099:3576): avc: denied { rmdir } for pid=20980 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.244074][T20980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.251400][ T29] audit: type=1400 audit(1773195430.109:3577): avc: denied { unlink } for pid=20980 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 270.288451][T21914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6251'. [ 270.298338][T21914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6251'. [ 270.329011][ T29] audit: type=1400 audit(1773195430.199:3578): avc: denied { firmware_load } for pid=21920 comm="syz.1.6252" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 270.977935][T21999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.992352][T21999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.032190][T22047] loop3: detected capacity change from 0 to 512 [ 271.043441][T22047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.078973][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.106940][T22052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6282'. [ 271.150107][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6283'. [ 271.345906][T22084] netlink: 'syz.6.6296': attribute type 1 has an invalid length. [ 271.533502][T22106] ref_ctr_offset mismatch. inode: 0x5cf offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 271.562823][T22110] loop4: detected capacity change from 0 to 256 [ 271.587785][T22110] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.606108][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6309'. [ 271.615777][T22110] FAT-fs (loop4): Filesystem has been set read-only [ 271.627776][T22113] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6309'. [ 271.631651][T22110] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.648898][ T3614] Bluetooth: hci0: command 0x1003 tx timeout [ 271.649191][ T6902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 271.840836][T22135] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 272.216637][T22177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6332'. [ 272.488262][T22208] loop3: detected capacity change from 0 to 512 [ 272.728049][T22234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=22234 comm=syz.8.6352 [ 272.963343][T22108] kexec: Could not allocate control_code_buffer [ 273.017697][T22257] loop3: detected capacity change from 0 to 128 [ 273.030507][T22256] netlink: 'syz.4.6362': attribute type 8 has an invalid length. [ 273.047544][T22260] program syz.8.6365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.084532][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6362'. [ 273.319901][ T3392] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 273.339999][ T3392] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.845634][T22322] loop3: detected capacity change from 0 to 8192 [ 273.946517][T22337] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 274.052083][T22353] loop4: detected capacity change from 0 to 1024 [ 274.125627][T22353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.210750][ T3321] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 274.227130][ T3321] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 274.267553][T22381] loop3: detected capacity change from 0 to 128 [ 274.346207][T22381] FAT-fs (loop3): error, corrupted directory (invalid i_start) [ 274.360619][ T5412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.382480][T22381] FAT-fs (loop3): Filesystem has been set read-only [ 274.515481][T22397] loop3: detected capacity change from 0 to 4096 [ 274.536648][T22397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.596089][T22407] loop1: detected capacity change from 0 to 512 [ 274.625090][T22407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.639017][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.706313][T20980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.751553][T22426] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 274.769093][T22426] vhci_hcd vhci_hcd.2: invalid port number 96 [ 274.779576][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 274.779605][ T29] audit: type=1400 audit(1773195434.659:3655): avc: denied { map } for pid=22431 comm="syz.6.6428" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.810296][T22426] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 274.847548][T22408] chnl_net:caif_netlink_parms(): no params data found [ 274.855768][ T29] audit: type=1400 audit(1773195434.659:3656): avc: denied { execute } for pid=22431 comm="syz.6.6428" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.903269][T22408] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.910464][T22408] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.932027][T22408] bridge_slave_0: entered allmulticast mode [ 274.941782][T22408] bridge_slave_0: entered promiscuous mode [ 274.948691][T22408] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.955991][T22408] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.963409][T22408] bridge_slave_1: entered allmulticast mode [ 274.970092][T22408] bridge_slave_1: entered promiscuous mode [ 274.988860][T22408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.999302][T22408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.019598][T22408] team0: Port device team_slave_0 added [ 275.031386][T22408] team0: Port device team_slave_1 added [ 275.043378][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6434'. [ 275.064465][T22408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.075051][T22408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.093326][T22459] loop8: detected capacity change from 0 to 256 [ 275.109708][T22408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.112449][T22459] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 275.121109][T22408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.136772][T22408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.163140][T22408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.192403][T22408] hsr_slave_0: entered promiscuous mode [ 275.198570][T22408] hsr_slave_1: entered promiscuous mode [ 275.204715][T22408] debugfs: 'hsr0' already exists in 'hsr' [ 275.210616][T22408] Cannot create hsr debugfs directory [ 275.429553][T22408] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 275.438392][T22408] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 275.447810][T22408] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 275.458622][T22408] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 275.477299][T22408] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.484411][T22408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.491777][T22408] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.498916][T22408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.528563][T22408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.540888][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.548608][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.562405][T22408] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.582230][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.589352][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.610164][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.617267][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.664107][ T29] audit: type=1400 audit(1773195435.539:3657): avc: denied { append } for pid=22535 comm="syz.6.6445" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.715102][ T7077] kernel read not supported for file /#>b@ (pid: 7077 comm: kworker/1:7) [ 275.758288][T22408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.916282][T22408] veth0_vlan: entered promiscuous mode [ 275.942669][T22408] veth1_vlan: entered promiscuous mode [ 275.958088][ T29] audit: type=1326 audit(1773195435.829:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3abbc799 code=0x7ffc0000 [ 275.968957][T22408] veth0_macvtap: entered promiscuous mode [ 275.982952][ T29] audit: type=1326 audit(1773195435.829:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3abbc799 code=0x7ffc0000 [ 275.994058][T22408] veth1_macvtap: entered promiscuous mode [ 276.012227][ T29] audit: type=1326 audit(1773195435.859:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f2b3abbc799 code=0x7ffc0000 [ 276.031685][T22408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.041242][ T29] audit: type=1326 audit(1773195435.859:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3abbc799 code=0x7ffc0000 [ 276.061422][T22408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.086871][ T29] audit: type=1326 audit(1773195435.859:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.1.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3abbc799 code=0x7ffc0000 [ 276.112628][ T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.131054][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.148608][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.187930][ T39] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.290585][T22625] loop3: detected capacity change from 0 to 512 [ 276.323422][T22631] loop8: detected capacity change from 0 to 1024 [ 276.357009][T22631] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 276.379035][T22631] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 276.387388][T22631] EXT4-fs (loop8): orphan cleanup on readonly fs [ 276.397016][T22631] Quota error (device loop8): v2_read_file_info: Can't read info structure [ 276.409424][T22625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.422221][T22631] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 276.446914][T22625] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.461701][T22631] EXT4-fs (loop8): Cannot turn on quotas: error -5 [ 276.477109][T22631] EXT4-fs (loop8): 1 truncate cleaned up [ 276.477120][T22625] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.6458: corrupted inode contents [ 276.483631][T22631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.509791][T22646] loop9: detected capacity change from 0 to 128 [ 276.521090][T22650] Invalid argument reading file caps for ./file0 [ 276.555847][T22646] FAT-fs (loop9): error, corrupted directory (invalid i_start) [ 276.566840][T22625] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.6458: mark_inode_dirty error [ 276.588141][T22646] FAT-fs (loop9): Filesystem has been set read-only [ 276.600457][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.609757][T22625] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.6458: corrupted inode contents [ 276.658950][T22625] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.6458: mark_inode_dirty error [ 276.719321][T22653] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.6458: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 276.719321][T22653] [ 276.777087][T22673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.797797][ T29] audit: type=1400 audit(1773195436.669:3663): avc: denied { rmdir } for pid=22623 comm="syz.3.6458" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 276.858699][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.876945][T20980] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 276.911418][T20980] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 277.142218][T20980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.160713][T12928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.167886][T22724] Invalid argument reading file caps for ./file0 [ 277.197845][T22725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.265836][T12928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.299299][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.354793][T12928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.397698][T12928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.501437][T12928] bridge_slave_1: left allmulticast mode [ 277.507260][T12928] bridge_slave_1: left promiscuous mode [ 277.523458][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.543090][T12928] bridge_slave_0: left allmulticast mode [ 277.551054][T12928] bridge_slave_0: left promiscuous mode [ 277.556868][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.723404][T12928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.742036][T12928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.753005][T12928] bond0 (unregistering): Released all slaves [ 277.760899][T12928] bond1 (unregistering): Released all slaves [ 277.774988][T22806] bridge_slave_0: left allmulticast mode [ 277.780952][T22806] bridge_slave_0: left promiscuous mode [ 277.786732][T22806] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.795188][T22806] bridge_slave_1: left allmulticast mode [ 277.802265][T22806] bridge_slave_1: left promiscuous mode [ 277.808409][T22806] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.823638][T22806] bond0: (slave bond_slave_0): Releasing backup interface [ 277.831995][T22806] bond0: (slave bond_slave_1): Releasing backup interface [ 277.840533][T22806] team0: Port device team_slave_0 removed [ 277.847145][T22806] team0: Port device team_slave_1 removed [ 277.856083][T22806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.863901][T22806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.886507][T12928] tipc: Disabling bearer [ 277.892872][T12928] tipc: Left network mode [ 277.906675][T12928] IPVS: stopping master sync thread 21341 ... [ 277.925494][T12928] hsr_slave_0: left promiscuous mode [ 277.931982][T12928] hsr_slave_1: left promiscuous mode [ 277.940245][T12928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.947839][T12928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.955616][T12928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.963673][T12928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.979504][T12928] veth1_macvtap: left promiscuous mode [ 277.991263][T12928] veth0_macvtap: left promiscuous mode [ 278.004732][T12928] veth1_vlan: left promiscuous mode [ 278.010463][T12928] veth0_vlan: left promiscuous mode [ 278.103312][T22836] set_capacity_and_notify: 2 callbacks suppressed [ 278.103326][T22836] loop8: detected capacity change from 0 to 1024 [ 278.117908][T22836] EXT4-fs: Ignoring removed orlov option [ 278.133165][T22836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.145832][T12928] team0 (unregistering): Port device team_slave_1 removed [ 278.156381][T12928] team0 (unregistering): Port device team_slave_0 removed [ 278.196883][T22834] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6508'. [ 278.198359][T22836] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.6509: Allocating blocks 497-513 which overlap fs metadata [ 278.207252][T22834] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6508'. [ 278.229470][T22836] EXT4-fs (loop8): Remounting filesystem read-only [ 278.231378][T22834] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6508'. [ 278.248185][T22834] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6508'. [ 278.287809][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.332958][T22740] chnl_net:caif_netlink_parms(): no params data found [ 278.358954][T22847] syzkaller1: entered promiscuous mode [ 278.364510][T22847] syzkaller1: entered allmulticast mode [ 278.441214][T22740] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.448509][T22740] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.456341][T22740] bridge_slave_0: entered allmulticast mode [ 278.463965][T22740] bridge_slave_0: entered promiscuous mode [ 278.471491][T22740] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.479025][T22740] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.486227][T22740] bridge_slave_1: entered allmulticast mode [ 278.493753][T22740] bridge_slave_1: entered promiscuous mode [ 278.519336][T22740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.537239][T22740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.557776][T22740] team0: Port device team_slave_0 added [ 278.564327][T22740] team0: Port device team_slave_1 added [ 278.587913][T22740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.595182][T22872] loop8: detected capacity change from 0 to 512 [ 278.596637][T22740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.632856][T22872] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.646300][T22740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.664057][T22872] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 278.666072][T22740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.685648][T22740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.717471][T22740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.753933][T22740] hsr_slave_0: entered promiscuous mode [ 278.759962][T22740] hsr_slave_1: entered promiscuous mode [ 278.763879][T22872] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6515: bg 0: block 248: padding at end of block bitmap is not set [ 278.767254][T22740] debugfs: 'hsr0' already exists in 'hsr' [ 278.785839][T22740] Cannot create hsr debugfs directory [ 278.801213][T22872] loop8: lost filesystem error report for type 5 error -117 [ 278.808593][T22872] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.6515: Failed to acquire dquot type 1 [ 278.815963][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 278.815982][ C0] EXT4-fs (loop8): last error at time 1773195438: ext4_validate_block_bitmap:441 [ 278.836587][T22888] loop3: detected capacity change from 0 to 512 [ 278.868041][T22872] loop8: lost filesystem error report for type 5 error -117 [ 278.869214][T22872] EXT4-fs (loop8): 1 truncate cleaned up [ 278.904811][T22888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.912254][T22872] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 278.944874][T22888] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 278.968823][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 278.970639][T22872] SELinux: policydb version -21507256 does not match my version range 15-35 [ 278.975278][ C0] EXT4-fs (loop3): initial error at time 1773195438: ext4_mb_generate_buddy:1315 [ 278.993139][ C0] EXT4-fs (loop3): last error at time 1773195438: ext4_mb_generate_buddy:1315 [ 278.994242][T22872] SELinux: failed to load policy [ 279.015024][T22888] EXT4-fs (loop3): 1 truncate cleaned up [ 279.025750][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 279.075017][T22888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.337214][T22740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.364799][T22740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.376161][T22740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.395529][T22740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.507495][T22740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.525211][T22740] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.545074][ T2560] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.552196][ T2560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.600783][ T2560] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.607859][ T2560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.629140][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.720391][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6531'. [ 279.797941][T22968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=22968 comm=syz.8.6537 [ 279.834523][T22740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.910024][T22984] netlink: 792 bytes leftover after parsing attributes in process `syz.8.6541'. [ 279.917181][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 279.917255][ T29] audit: type=1400 audit(1773195439.789:3673): avc: denied { unmount } for pid=11895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 279.936774][T22984] netlink: 792 bytes leftover after parsing attributes in process `syz.8.6541'. [ 279.962109][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6541'. [ 280.083155][T23011] netlink: 'syz.6.6545': attribute type 12 has an invalid length. [ 280.127764][T23011] netlink: 'syz.6.6545': attribute type 29 has an invalid length. [ 280.133212][ T29] audit: type=1400 audit(1773195439.999:3674): avc: denied { recv } for pid=3295 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.70 dest=37506 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 280.137326][T23011] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6545'. [ 280.166557][ T29] audit: type=1400 audit(1773195439.999:3675): avc: denied { create } for pid=23016 comm="syz.9.6548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.178955][T23011] netlink: 'syz.6.6545': attribute type 2 has an invalid length. [ 280.189810][ T29] audit: type=1400 audit(1773195440.039:3676): avc: denied { read write } for pid=18089 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.201699][T22740] veth0_vlan: entered promiscuous mode [ 280.223234][ T29] audit: type=1400 audit(1773195440.039:3677): avc: denied { open } for pid=18089 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.291990][ T29] audit: type=1400 audit(1773195440.039:3678): avc: denied { ioctl } for pid=18089 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.300524][T22740] veth1_vlan: entered promiscuous mode [ 280.331850][ T29] audit: type=1400 audit(1773195440.049:3679): avc: denied { setopt } for pid=23016 comm="syz.9.6548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.369774][ T29] audit: type=1400 audit(1773195440.069:3680): avc: denied { connect } for pid=23016 comm="syz.9.6548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.391789][ T29] audit: type=1400 audit(1773195440.099:3681): avc: denied { open } for pid=23018 comm="syz.3.6549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 280.414980][T22740] veth0_macvtap: entered promiscuous mode [ 280.430982][T22740] veth1_macvtap: entered promiscuous mode [ 280.456091][T22740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.467725][ T29] audit: type=1400 audit(1773195440.099:3682): avc: denied { perfmon } for pid=23018 comm="syz.3.6549" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.512681][T22740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.550856][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.559837][ T2560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.591890][ T2560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.601562][ T2560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.661922][T23069] loop3: detected capacity change from 0 to 128 [ 280.688454][T23069] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 280.767728][T23078] loop9: detected capacity change from 0 to 1764 [ 280.776137][T12928] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 280.792173][T12928] FAT-fs (loop3): Filesystem has been set read-only [ 280.799360][T12928] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 280.952555][T23102] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6568'. [ 281.003614][T23108] loop8: detected capacity change from 0 to 2048 [ 281.026626][T23108] EXT4-fs: Ignoring removed i_version option [ 281.083535][T23108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.109576][T23108] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.151547][T23143] sctp: [Deprecated]: syz.3.6576 (pid 23143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.151547][T23143] Use struct sctp_sack_info instead [ 281.206188][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.524622][T23209] bridge0: Device is already in use. [ 281.833609][T23253] SELinux: failed to load policy [ 281.856137][T23260] loop9: detected capacity change from 0 to 1024 [ 281.896691][T23260] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 281.898991][ T39] Bluetooth: hci0: Frame reassembly failed (-84) [ 281.920221][T23260] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 281.942928][T23260] EXT4-fs (loop9): orphan cleanup on readonly fs [ 281.959062][T23260] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 281.988935][T23260] EXT4-fs (loop9): Cannot turn on quotas: error -5 [ 282.010262][T23260] EXT4-fs (loop9): 1 truncate cleaned up [ 282.022920][T23260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.072487][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.323196][T23310] syzkaller1: entered promiscuous mode [ 282.328971][T23310] syzkaller1: entered allmulticast mode [ 282.521883][T23321] loop3: detected capacity change from 0 to 764 [ 282.549596][T23321] rock: directory entry would overflow storage [ 282.555861][T23321] rock: sig=0x5245, size=8, remaining=5 [ 282.621536][T23314] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.628774][T23314] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.796292][T23331] loop3: detected capacity change from 0 to 8192 [ 282.969109][T23314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.995712][T23314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.179651][ T39] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.198946][ T39] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.218989][ T39] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.253926][ T39] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.968982][ T3614] Bluetooth: hci0: command 0x1003 tx timeout [ 283.975032][ T6902] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.289792][T23516] loop2: detected capacity change from 0 to 512 [ 284.349491][T23516] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.399920][T23516] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 284.477599][T23516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6671: bg 0: block 248: padding at end of block bitmap is not set [ 284.497861][T23551] loop9: detected capacity change from 0 to 512 [ 284.539835][T23551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.565327][T23516] loop2: lost filesystem error report for type 5 error -117 [ 284.566918][T23516] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6671: Failed to acquire dquot type 1 [ 284.574389][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 284.574428][ C1] EXT4-fs (loop2): last error at time 1773195444: ext4_validate_block_bitmap:441 [ 284.646617][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.722958][T23516] loop2: lost filesystem error report for type 5 error -117 [ 284.723537][T23516] EXT4-fs (loop2): 1 truncate cleaned up [ 284.770013][T23516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 284.839063][T23516] SELinux: policydb version -21507256 does not match my version range 15-35 [ 284.858064][T23516] SELinux: failed to load policy [ 284.926378][T22740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 284.935573][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 284.935587][ T29] audit: type=1400 audit(1773195444.799:3862): avc: denied { setopt } for pid=23565 comm="syz.9.6684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.031889][ T29] audit: type=1400 audit(1773195444.809:3863): avc: denied { bind } for pid=23565 comm="syz.9.6684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.052777][ T29] audit: type=1400 audit(1773195444.809:3864): avc: denied { read } for pid=23565 comm="syz.9.6684" path="socket:[69589]" dev="sockfs" ino=69589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.116665][ T29] audit: type=1400 audit(1773195444.879:3865): avc: denied { write } for pid=23565 comm="syz.9.6684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.162061][ T29] audit: type=1400 audit(1773195445.019:3866): avc: denied { setopt } for pid=23574 comm="syz.9.6687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.215475][T23578] loop9: detected capacity change from 0 to 512 [ 285.236943][T23578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.293859][T23582] serio: Serial port ptm0 [ 285.298634][T23578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.322000][ T29] audit: type=1400 audit(1773195445.189:3867): avc: denied { read } for pid=23579 comm="syz.8.6689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 285.369188][T23578] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.436461][T23590] __nla_validate_parse: 3 callbacks suppressed [ 285.436476][T23590] netlink: 1028 bytes leftover after parsing attributes in process `syz.6.6692'. [ 285.439094][ T29] audit: type=1400 audit(1773195445.289:3868): avc: denied { create } for pid=23587 comm="syz.8.6691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.448901][T23590] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 285.462016][T23577] EXT4-fs (loop9): shut down requested (1) [ 285.500114][ T29] audit: type=1400 audit(1773195445.379:3869): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 285.509307][T23588] lo: entered allmulticast mode [ 285.550098][ T29] audit: type=1400 audit(1773195445.379:3870): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.565954][T23591] lo: left allmulticast mode [ 285.620028][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.637621][ T29] audit: type=1400 audit(1773195445.379:3871): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 285.747032][T23601] loop2: detected capacity change from 0 to 164 [ 285.772221][T23599] loop8: detected capacity change from 0 to 2048 [ 285.792340][T23601] ISOFS: Bad logical zone size 2816 [ 285.828236][T23599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.933844][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.521065][T23668] loop9: detected capacity change from 0 to 736 [ 286.713617][T23690] loop9: detected capacity change from 0 to 256 [ 286.898574][T23712] SELinux: failed to load policy [ 286.952311][T23718] loop9: detected capacity change from 0 to 128 [ 287.008250][T23725] loop2: detected capacity change from 0 to 1024 [ 287.045478][T23725] EXT4-fs: inline encryption not supported [ 287.065436][T23725] EXT4-fs: Ignoring removed nobh option [ 287.107050][T23725] EXT4-fs: Ignoring removed bh option [ 287.137421][T23740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6727'. [ 287.160889][T23740] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.168121][T23740] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.196368][T23725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.226320][T23745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6727'. [ 287.335180][T22740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.405554][T23766] loop3: detected capacity change from 0 to 512 [ 287.469052][T23766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.497367][T23766] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.551559][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.660059][T23789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.709988][T23795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6745'. [ 287.733970][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.766688][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.792248][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.911352][T23821] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 288.034636][T23830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 288.045245][T23830] System zones: 0-1, 3-36 [ 288.051119][T23830] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6760: bad orphan inode 134217728 [ 288.062058][T23830] loop3: lost filesystem error report for type 5 error -117 [ 288.062576][T23830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.137281][T23837] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.6763'. [ 288.293858][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.428486][T23850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.476846][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.654856][T23859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6773'. [ 288.675060][T23859] netlink: 'syz.3.6773': attribute type 7 has an invalid length. [ 288.683199][T23859] netlink: 'syz.3.6773': attribute type 8 has an invalid length. [ 288.691153][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6773'. [ 288.727387][T23859] erspan0: entered promiscuous mode [ 288.739833][T23859] gretap0: entered promiscuous mode [ 288.745905][T23859] erspan0: left promiscuous mode [ 288.754569][T23859] gretap0: left promiscuous mode [ 288.764637][T23867] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.784713][T23867] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.850385][T23872] Invalid argument reading file caps for ./file0 [ 288.896030][T17089] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.105866][T23887] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.135532][T23887] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.296445][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.707570][T23937] macvtap1: entered promiscuous mode [ 289.713105][T23937] macvtap1: entered allmulticast mode [ 289.718562][T23937] veth1_vlan: entered allmulticast mode [ 289.759561][T23941] set_capacity_and_notify: 6 callbacks suppressed [ 289.759577][T23941] loop3: detected capacity change from 0 to 512 [ 289.774967][T23941] EXT4-fs: Ignoring removed i_version option [ 289.788481][T23941] EXT4-fs: Ignoring removed bh option [ 289.802313][T23941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.816211][T23941] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.842820][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.878698][T23952] loop3: detected capacity change from 0 to 512 [ 289.911190][T23952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.939123][T23952] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.036412][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 290.036426][ T29] audit: type=1400 audit(1773195449.909:3908): avc: denied { write } for pid=23961 comm="syz.9.6812" name="tcp6" dev="proc" ino=4026532630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 290.157640][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.244087][ T29] audit: type=1400 audit(1773195450.119:3909): avc: denied { connect } for pid=23972 comm="syz.9.6817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.297280][T23978] loop9: detected capacity change from 0 to 512 [ 290.315574][T23978] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.6820: Directory hole found for htree index block 0 [ 290.338586][T23978] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 290.338826][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 290.342876][T23978] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 290.347879][ C1] EXT4-fs (loop9): initial error at time 1773195450: dx_probe:791: inode 2 [ 290.371099][ C1] EXT4-fs (loop9): last error at time 1773195450: dx_probe:791: inode 2 [ 290.385612][T23978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.415541][T23978] EXT4-fs (loop9): shut down requested (0) [ 290.447224][ T29] audit: type=1326 audit(1773195450.319:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23991 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 290.476253][ T29] audit: type=1326 audit(1773195450.349:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23991 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 290.499975][T23999] loop2: detected capacity change from 0 to 256 [ 290.507849][ T29] audit: type=1326 audit(1773195450.349:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23991 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 290.531902][ T29] audit: type=1326 audit(1773195450.349:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23991 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57384ec799 code=0x7ffc0000 [ 290.556372][ T29] audit: type=1400 audit(1773195450.419:3914): avc: denied { relabelfrom } for pid=23994 comm="syz.3.6827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 290.576552][ T29] audit: type=1400 audit(1773195450.419:3915): avc: denied { relabelto } for pid=23994 comm="syz.3.6827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 290.576725][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.653043][T24005] netlink: 'syz.9.6830': attribute type 25 has an invalid length. [ 290.663222][T24005] netlink: 'syz.9.6830': attribute type 7 has an invalid length. [ 290.671049][T24005] netlink: 'syz.9.6830': attribute type 2 has an invalid length. [ 290.696471][ T3425] IPVS: starting estimator thread 0... [ 290.710063][T24002] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 290.742146][ T29] audit: type=1400 audit(1773195450.619:3916): avc: denied { mount } for pid=24017 comm="syz.3.6837" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 290.774949][ T29] audit: type=1400 audit(1773195450.649:3917): avc: denied { unmount } for pid=18089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 290.777328][T24021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6838'. [ 290.848919][T24012] IPVS: using max 2496 ests per chain, 124800 per kthread [ 290.898473][T24038] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6846'. [ 290.912749][T24038] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6846'. [ 290.930370][T24042] loop2: detected capacity change from 0 to 512 [ 290.938596][T24042] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.953508][T24047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=24047 comm=syz.6.6849 [ 290.971107][T24042] EXT4-fs (loop2): 1 truncate cleaned up [ 290.991071][T24042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.025915][T24056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6853'. [ 291.087390][T22740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.139606][T24066] loop3: detected capacity change from 0 to 512 [ 291.146182][T24066] EXT4-fs: Ignoring removed oldalloc option [ 291.161021][T24066] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6858: invalid indirect mapped block 4294967295 (level 1) [ 291.188734][T24066] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 291.188834][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 291.204449][ C1] EXT4-fs (loop3): initial error at time 1773195451: ext4_free_branches:1023: inode 11 [ 291.214138][ C1] EXT4-fs (loop3): last error at time 1773195451: ext4_free_branches:1023: inode 11 [ 291.228882][T24066] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6858: invalid indirect mapped block 4294967295 (level 1) [ 291.242930][T24066] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 291.244107][T24066] EXT4-fs (loop3): 2 truncates cleaned up [ 291.263072][T24066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.290633][T24081] tipc: Started in network mode [ 291.295629][T24081] tipc: Node identity fe800000000000000000000000000015, cluster identity 4711 [ 291.296351][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.305077][T24081] tipc: Enabled bearer , priority 10 [ 291.565676][T24111] rtc_cmos 00:00: Alarms can be up to one day in the future [ 291.640535][T24120] loop2: detected capacity change from 0 to 128 [ 291.659701][T24120] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.672076][T24120] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.697194][T22740] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.905753][T23348] rtc_cmos 00:00: Alarms can be up to one day in the future [ 291.913645][T23348] rtc_cmos 00:00: Alarms can be up to one day in the future [ 291.921261][T23348] rtc_cmos 00:00: Alarms can be up to one day in the future [ 291.928837][T23348] rtc_cmos 00:00: Alarms can be up to one day in the future [ 291.936122][T23348] rtc rtc0: __rtc_set_alarm: err=-22 [ 292.225236][T24154] Invalid argument reading file caps for ./file0 [ 292.385708][T24165] loop8: detected capacity change from 0 to 1024 [ 292.396013][T24165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.416042][T24165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.418880][ T3425] tipc: Node number set to 4269801493 [ 292.443303][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.462752][T24169] loop8: detected capacity change from 0 to 512 [ 292.484046][T24169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.496931][T24169] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.510347][T24169] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6903: corrupted inode contents [ 292.522288][T24169] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.6903: mark_inode_dirty error [ 292.533834][T24169] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6903: corrupted inode contents [ 292.546300][T24169] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.6903: mark_inode_dirty error [ 292.560052][T24169] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.6903: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 292.560052][T24169] [ 292.596741][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.630259][T24179] loop8: detected capacity change from 0 to 256 [ 292.683220][T24183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.710714][T24183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.726715][T24183] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.748869][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.774250][T24194] EXT4-fs error (device loop8): dx_probe:791: inode #2: comm syz.8.6912: Directory hole found for htree index block 0 [ 292.787787][T24194] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 292.787955][T24194] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 292.797025][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 292.797048][ C0] EXT4-fs (loop8): initial error at time 1773195452: dx_probe:791: inode 2 [ 292.797073][ C0] EXT4-fs (loop8): last error at time 1773195452: dx_probe:791: inode 2 [ 292.829399][T24194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.848610][T24194] EXT4-fs (loop8): shut down requested (0) [ 292.862952][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.958970][T24209] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.053634][T24215] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779264) [ 293.067666][T24215] FAT-fs (loop8): Filesystem has been set read-only [ 293.075732][T24215] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 293.083792][T24215] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 293.101956][T24215] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 293.117702][T24215] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 293.236060][T24233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.250918][T24233] EXT4-fs (loop3): 1 truncate cleaned up [ 293.257128][T24233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.287547][T18089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.440214][T24270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 293.448476][T24270] System zones: 0-1, 3-36 [ 293.453545][T24270] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6939: bad orphan inode 134217728 [ 293.464579][T24270] loop2: lost filesystem error report for type 5 error -117 [ 293.465123][T24270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.612405][T24280] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.636306][T24280] ext4 filesystem being mounted at /449/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.662860][T17089] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.682995][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6944'. [ 293.726157][T24289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6945'. [ 293.848700][T22740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.247544][T24310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.269191][T24316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6955'. [ 294.289194][T24314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.324703][T24314] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.341677][T24314] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.6956: corrupted inode contents [ 294.354423][T24314] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.6956: mark_inode_dirty error [ 294.378218][T24314] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.6956: corrupted inode contents [ 294.392402][T24314] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.6956: mark_inode_dirty error [ 294.406013][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.416152][T24325] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.6956: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 294.416152][T24325] [ 294.487895][T24327] loop8: p2 < > p4 [ 294.492712][T22740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.499960][T24327] loop8: p4 size 262144 extends beyond EOD, truncated [ 294.682376][T24360] Invalid argument reading file caps for ./file0 [ 294.717051][T24364] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.760022][T24367] hub 1-0:1.0: USB hub found [ 294.764846][T24367] hub 1-0:1.0: 8 ports detected [ 294.776912][T24374] set_capacity_and_notify: 11 callbacks suppressed [ 294.776928][T24374] loop2: detected capacity change from 0 to 1024 [ 294.793036][T24377] loop9: detected capacity change from 0 to 128 [ 294.817220][T24377] syz.9.6975: attempt to access beyond end of device [ 294.817220][T24377] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 294.853041][T24374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.881425][T24377] syz.9.6975: attempt to access beyond end of device [ 294.881425][T24377] loop9: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 294.907583][T24374] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.6973: inode #8192: comm syz.2.6973: iget: illegal inode # [ 294.922659][T24374] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.6973: error while reading EA inode 8192 err=-117 [ 294.951173][T22740] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.967812][T24377] syz.9.6975: attempt to access beyond end of device [ 294.967812][T24377] loop9: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 294.981755][T24377] Buffer I/O error on dev loop9, logical block 75, lost async page write [ 294.991129][T24377] syz.9.6975: attempt to access beyond end of device [ 294.991129][T24377] loop9: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 295.004878][T24377] Buffer I/O error on dev loop9, logical block 76, lost async page write [ 295.015652][T24377] syz.9.6975: attempt to access beyond end of device [ 295.015652][T24377] loop9: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 295.037424][T24377] syz.9.6975: attempt to access beyond end of device [ 295.037424][T24377] loop9: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 295.054160][T24377] Buffer I/O error on dev loop9, logical block 87, lost async page write [ 295.062899][T24377] syz.9.6975: attempt to access beyond end of device [ 295.062899][T24377] loop9: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 295.092790][T24377] Buffer I/O error on dev loop9, logical block 88, lost async page write [ 295.104341][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 295.113907][T24377] syz.9.6975: attempt to access beyond end of device [ 295.113907][T24377] loop9: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 295.127546][T24408] netlink: 'syz.2.6980': attribute type 30 has an invalid length. [ 295.141556][T24377] syz.9.6975: attempt to access beyond end of device [ 295.141556][T24377] loop9: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 295.155794][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.155897][T24377] Buffer I/O error on dev loop9, logical block 91, lost async page write [ 295.184933][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.214338][T24417] loop8: detected capacity change from 0 to 128 [ 295.219337][T24377] syz.9.6975: attempt to access beyond end of device [ 295.219337][T24377] loop9: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 295.227338][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.244880][T24377] Buffer I/O error on dev loop9, logical block 92, lost async page write [ 295.287191][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.316052][T24425] syzkaller1: entered promiscuous mode [ 295.323252][T24425] syzkaller1: entered allmulticast mode [ 295.588981][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 295.588995][ T29] audit: type=1400 audit(1773195455.469:3951): avc: denied { shutdown } for pid=24436 comm="syz.8.6989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.702651][T24451] program syz.3.6992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.862631][T24460] ip6erspan1: entered allmulticast mode [ 295.911069][T24467] loop8: detected capacity change from 0 to 1024 [ 295.918123][T24467] EXT4-fs: inline encryption not supported [ 295.960632][T24467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.973391][ T29] audit: type=1400 audit(1773195455.829:3952): avc: denied { setopt } for pid=24470 comm="syz.6.7000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.014880][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.092959][T24481] loop8: detected capacity change from 0 to 128 [ 296.287331][T24490] serio: Serial port ttyS3 [ 296.356123][T24495] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.464725][T24504] loop9: detected capacity change from 0 to 1024 [ 296.477097][T24504] EXT4-fs: inline encryption not supported [ 296.497726][T24504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.554579][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.612049][T24513] loop8: detected capacity change from 0 to 1024 [ 296.639434][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 296.652979][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.671129][T24513] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.684300][T24513] EXT4-fs (loop8): shut down requested (1) [ 296.690859][ T29] audit: type=1400 audit(1773195456.569:3953): avc: denied { ioctl } for pid=24516 comm="syz.2.7019" path="/dev/hidraw0" dev="devtmpfs" ino=2761 ioctlcmd=0x4807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 296.725357][T17089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.797133][T24534] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7025'. [ 296.875584][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7029'. [ 296.887072][T24542] macsec0: entered promiscuous mode [ 296.892683][T24542] dummy0: entered promiscuous mode [ 296.897999][T24542] macsec0: entered allmulticast mode [ 296.903752][T24542] dummy0: entered allmulticast mode [ 296.911371][T24542] dummy0: left allmulticast mode [ 296.916982][ T29] audit: type=1400 audit(1773195456.789:3954): avc: denied { watch_reads } for pid=24545 comm="syz.3.7030" path="/439" dev="tmpfs" ino=2280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 296.940201][T24542] dummy0: left promiscuous mode [ 296.965866][ T29] audit: type=1400 audit(1773195456.839:3955): avc: denied { bind } for pid=24553 comm="syz.3.7035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 297.345014][ T29] audit: type=1400 audit(1773195457.219:3956): avc: denied { mounton } for pid=24583 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 297.564445][ T29] audit: type=1400 audit(1773195457.439:3957): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 297.678894][T24606] loop7: detected capacity change from 0 to 16384 [ 297.680820][ T2160] bond0 (unregistering): Released all slaves [ 297.750029][ T2160] hsr_slave_0: left promiscuous mode [ 297.763324][ T2160] hsr_slave_1: left promiscuous mode [ 297.870083][T24583] chnl_net:caif_netlink_parms(): no params data found [ 297.946141][T24583] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.953388][T24583] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.960999][T24583] bridge_slave_0: entered allmulticast mode [ 297.967550][T24583] bridge_slave_0: entered promiscuous mode [ 297.975055][T24583] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.982334][T24583] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.989711][T24583] bridge_slave_1: entered allmulticast mode [ 297.996312][T24583] bridge_slave_1: entered promiscuous mode [ 298.018453][T24583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.029161][T24583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.050003][T24583] team0: Port device team_slave_0 added [ 298.056666][T24583] team0: Port device team_slave_1 added [ 298.073298][T24583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.081966][T24583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.108063][T24583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.126501][T24583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.139209][T24583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.165484][T24583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.205254][T24583] hsr_slave_0: entered promiscuous mode [ 298.212062][T24583] hsr_slave_1: entered promiscuous mode [ 298.217897][T24583] debugfs: 'hsr0' already exists in 'hsr' [ 298.223886][T24583] Cannot create hsr debugfs directory [ 298.339159][ T29] audit: type=1400 audit(1773195458.209:3958): avc: denied { mounton } for pid=24661 comm="syz.3.7063" path="/448/file0" dev="tmpfs" ino=2332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 298.674928][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 298.715111][T24583] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.740649][T24583] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 298.761908][T24583] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 298.781987][ T29] audit: type=1400 audit(1773195458.659:3959): avc: denied { ioctl } for pid=24716 comm="syz.6.7079" path="socket:[72517]" dev="sockfs" ino=72517 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 298.833032][ T29] audit: type=1400 audit(1773195458.659:3960): avc: denied { read } for pid=24716 comm="syz.6.7079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 298.837687][T24583] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 298.894297][T24583] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.901392][T24583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.908629][T24583] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.915692][T24583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.932898][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.941042][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.965498][T24583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.977451][T24583] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.987272][ T2160] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.994414][ T2160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.004972][ T2160] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.012065][ T2160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.081654][T24583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.213948][T24583] veth0_vlan: entered promiscuous mode [ 299.221977][T24583] veth1_vlan: entered promiscuous mode [ 299.240368][T24583] veth0_macvtap: entered promiscuous mode [ 299.247736][T24583] veth1_macvtap: entered promiscuous mode [ 299.258616][T24583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.272676][T24583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.283369][T12920] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.294731][T12920] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.315675][T12920] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.329921][T12920] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.780544][T24891] team0 (unregistering): Port device team_slave_0 removed [ 299.791504][T24891] team0 (unregistering): Port device team_slave_1 removed [ 299.905721][T24916] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7110'. [ 299.933315][T24916] bond2: option primary_reselect: invalid value (8) [ 299.950693][T24916] bond2 (unregistering): Released all slaves [ 300.106612][T24945] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 300.458633][T25000] loop9: detected capacity change from 0 to 512 [ 300.479742][T25000] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.502456][T25000] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 300.524262][T25000] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 300.543604][T25000] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 300.552189][T25000] System zones: 0-2, 18-18, 34-35 [ 300.559361][T25000] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.599392][T22408] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.611854][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 300.611912][ T29] audit: type=1326 audit(1773195460.479:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda8c7c799 code=0x7ffc0000 [ 300.643410][ T29] audit: type=1326 audit(1773195460.479:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda8c7c799 code=0x7ffc0000 [ 300.667827][ T29] audit: type=1326 audit(1773195460.479:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fcda8c7c799 code=0x7ffc0000 [ 300.695742][ T29] audit: type=1326 audit(1773195460.479:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda8c7c799 code=0x7ffc0000 [ 300.721831][ T29] audit: type=1326 audit(1773195460.479:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.3.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda8c7c799 code=0x7ffc0000 [ 301.032224][T25030] loop9: detected capacity change from 0 to 8192 [ 301.071405][T25030] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.335557][T25073] netlink: 'syz.7.7152': attribute type 29 has an invalid length. [ 301.365954][T25073] netlink: 'syz.7.7152': attribute type 29 has an invalid length. [ 301.375593][T25073] netlink: 500 bytes leftover after parsing attributes in process `syz.7.7152'. [ 301.541261][ T29] audit: type=1400 audit(1773195461.419:3990): avc: denied { create } for pid=25110 comm="syz.7.7166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.564679][ T29] audit: type=1400 audit(1773195461.419:3991): avc: denied { write } for pid=25110 comm="syz.7.7166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.585055][T25065] chnl_net:caif_netlink_parms(): no params data found [ 301.632039][ T29] audit: type=1400 audit(1773195461.509:3992): avc: denied { create } for pid=25122 comm="syz.7.7169" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 301.663049][ T29] audit: type=1400 audit(1773195461.529:3993): avc: denied { read write } for pid=25122 comm="syz.7.7169" name="file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 301.685351][T25065] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.687444][ T29] audit: type=1400 audit(1773195461.529:3994): avc: denied { open } for pid=25122 comm="syz.7.7169" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 301.705093][T25065] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.725176][T25065] bridge_slave_0: entered allmulticast mode [ 301.732337][T25065] bridge_slave_0: entered promiscuous mode [ 301.745759][T25065] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.755030][T25065] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.762522][T25065] bridge_slave_1: entered allmulticast mode [ 301.769274][T25065] bridge_slave_1: entered promiscuous mode [ 301.802766][T25065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.814450][T25065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.868789][T25065] team0: Port device team_slave_0 added [ 301.879832][T25065] team0: Port device team_slave_1 added [ 301.904534][T25065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.911575][T25065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.939510][T25065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.975066][T25065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.990457][T25065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.037183][T25065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.063334][T25135] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7174'. [ 302.092318][T25065] hsr_slave_0: entered promiscuous mode [ 302.110478][T25065] hsr_slave_1: entered promiscuous mode [ 302.116622][T25065] debugfs: 'hsr0' already exists in 'hsr' [ 302.122449][T25065] Cannot create hsr debugfs directory [ 302.144743][T25139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.164471][T25139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.397837][T25181] netlink: 'syz.6.7183': attribute type 3 has an invalid length. [ 302.446835][T25065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.456490][T25065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.478076][T25065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.505529][T25201] netlink: 'syz.9.7187': attribute type 12 has an invalid length. [ 302.522891][T25065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.529836][T25203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7188'. [ 302.535084][T25201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7187'. [ 302.561548][T25201] netlink: 'syz.9.7187': attribute type 12 has an invalid length. [ 302.576483][T25216] loop7: detected capacity change from 0 to 16384 [ 302.583469][T25201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7187'. [ 302.585221][T25209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7189'. [ 302.602496][T12920] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.613166][T12920] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.629307][T12920] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.673520][T12920] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.684277][T25227] loop9: detected capacity change from 0 to 512 [ 302.725990][T25227] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.802392][T25065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.833034][T25238] netlink: 'syz.6.7196': attribute type 12 has an invalid length. [ 302.870247][T25238] netlink: 'syz.6.7196': attribute type 29 has an invalid length. [ 302.886392][T25238] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7196'. [ 302.917810][T25065] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.946068][ T2160] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.953164][ T2160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.998784][ T2160] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.005946][ T2160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.084587][T25065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.131607][ T3304] ================================================================== [ 303.139717][ T3304] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 303.147101][ T3304] [ 303.149414][ T3304] read-write to 0xffff88811b0136b8 of 8 bytes by interrupt on cpu 1: [ 303.157470][ T3304] __xa_clear_mark+0xf5/0x1e0 [ 303.162151][ T3304] __folio_end_writeback+0xf4/0x360 [ 303.167356][ T3304] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 303.173604][ T3304] folio_end_writeback+0x1c/0x70 [ 303.178545][ T3304] end_buffer_async_write+0x156/0x1f0 [ 303.183910][ T3304] end_bio_bh_io_sync+0x79/0xa0 [ 303.188758][ T3304] bio_endio+0x38a/0x420 [ 303.193012][ T3304] blk_update_request+0x338/0x740 [ 303.198025][ T3304] blk_mq_end_request+0x26/0x50 [ 303.202877][ T3304] lo_complete_rq+0x98/0x140 [ 303.207459][ T3304] blk_done_softirq+0x77/0xb0 [ 303.212129][ T3304] handle_softirqs+0xb9/0x2a0 [ 303.216795][ T3304] run_ksoftirqd+0x1c/0x30 [ 303.221196][ T3304] smpboot_thread_fn+0x32a/0x510 [ 303.226122][ T3304] kthread+0x22a/0x280 [ 303.230180][ T3304] ret_from_fork+0x150/0x360 [ 303.234770][ T3304] ret_from_fork_asm+0x1a/0x30 [ 303.239558][ T3304] [ 303.241860][ T3304] read to 0xffff88811b0136b8 of 8 bytes by task 3304 on cpu 0: [ 303.249383][ T3304] xas_find_marked+0x213/0x620 [ 303.254256][ T3304] filemap_get_folios_tag+0xfa/0x510 [ 303.259575][ T3304] filemap_write_and_wait_range+0x1f5/0x370 [ 303.265451][ T3304] bdev_release+0xeb/0x3d0 [ 303.269857][ T3304] blkdev_release+0x15/0x20 [ 303.274353][ T3304] __fput+0x29b/0x650 [ 303.278323][ T3304] fput_close_sync+0xad/0x190 [ 303.282987][ T3304] __x64_sys_close+0x55/0xf0 [ 303.287578][ T3304] x64_sys_call+0x275d/0x3020 [ 303.292247][ T3304] do_syscall_64+0x12c/0x370 [ 303.296816][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.302690][ T3304] [ 303.304991][ T3304] value changed: 0xffffffffffffffff -> 0xffffffffffff8000 [ 303.312076][ T3304] [ 303.314381][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 303.320514][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 303.330909][ T3304] Tainted: [W]=WARN [ 303.334709][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.344751][ T3304] ================================================================== [ 303.391053][T25065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.605160][T25065] veth0_vlan: entered promiscuous mode [ 303.615005][T25065] veth1_vlan: entered promiscuous mode [ 303.632562][T25065] veth0_macvtap: entered promiscuous mode [ 303.647314][T25065] veth1_macvtap: entered promiscuous mode [ 303.667194][T25065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.680416][T25065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.699340][ T2160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.712159][ T2160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.727716][ T2160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.747179][ T2160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0