last executing test programs: 6m54.481666298s ago: executing program 32 (id=225): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x160, 0x30, 0x400, 0x71bd23, 0x25dfdbff, {}, [{0x14c, 0x1, [@m_csum={0x148, 0x14, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xa9, 0xffffffffffffffff, 0x3, 0x1}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0xffffffff, 0x7, 0x2, 0x100}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd6b, 0x0, 0x10000007, 0x9, 0x2}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2a, 0x9, 0x2, 0x4, 0x6}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0x2, 0x1}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0x20000000, 0x8, 0x6}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0xcda8, 0x2, 0x1}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x10000000, 0x800, 0x3}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x3, 0x7e89, 0x1}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7dd0, 0xffffffff, 0x2, 0x0, 0x7f}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m19.093175945s ago: executing program 33 (id=3731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 4m44.548902222s ago: executing program 34 (id=4456): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x40, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 4m25.35500817s ago: executing program 35 (id=5406): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @multicast2}}}, 0x118) 4m22.83114602s ago: executing program 36 (id=5469): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) 4m21.235287649s ago: executing program 37 (id=5503): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 4m13.435160826s ago: executing program 38 (id=5794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3m31.086045299s ago: executing program 39 (id=6757): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x5}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 2m48.081435963s ago: executing program 40 (id=8374): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 2m44.262872907s ago: executing program 41 (id=8460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0xf0ffff, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.854020937s ago: executing program 42 (id=8523): setresuid(0xee00, 0xee00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="86", 0x1}], 0x1}}], 0x2, 0x2400c0c6) 1m41.949818227s ago: executing program 43 (id=10189): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) 1m28.857264359s ago: executing program 44 (id=10539): r0 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x9, 0x0, 0x8, 0x4, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) 1m26.412186383s ago: executing program 8 (id=10595): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0xa, 0x3, 0xffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1m26.411750393s ago: executing program 8 (id=10597): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}], 0x18}}], 0x1, 0x4000810) 1m26.387793918s ago: executing program 8 (id=10598): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xe, 0x747f}, 0xa, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) wait4(r0, 0x0, 0x2, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000080)={0x5, 0x3, 0x69b, 0x10000, 0x50b7}) 1m25.637420371s ago: executing program 8 (id=10612): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m25.606311365s ago: executing program 8 (id=10613): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2a020400) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) 1m25.349307119s ago: executing program 8 (id=10618): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m25.346141398s ago: executing program 45 (id=10618): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m16.197570269s ago: executing program 4 (id=10858): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2007}) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x3) 1m16.128759376s ago: executing program 4 (id=10863): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "82420589"}]}, 0x24}}, 0x0) 1m16.061529404s ago: executing program 4 (id=10867): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) write(r0, &(0x7f00000001c0)="f300", 0x2) 1m16.061140184s ago: executing program 4 (id=10869): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 1m16.002117683s ago: executing program 4 (id=10870): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x84) 1m15.862544678s ago: executing program 4 (id=10877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0xa21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m15.862463448s ago: executing program 46 (id=10877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0xa21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m5.011031108s ago: executing program 1 (id=11150): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 1m4.041281641s ago: executing program 1 (id=11170): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4f20, @private=0xa010100}], 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m3.191761966s ago: executing program 1 (id=11186): creat(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x0, 0x10000, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1m3.152273459s ago: executing program 1 (id=11188): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 1m3.131307445s ago: executing program 1 (id=11189): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[], 0x2, 0x245, &(0x7f00000007c0)="$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") recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x40002000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m2.990152089s ago: executing program 1 (id=11191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') 1m2.976985127s ago: executing program 47 (id=11191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') 38.462086854s ago: executing program 7 (id=11879): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000800000043000e007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/167, &(0x7f0000000040), &(0x7f0000001b40), 0x3, r0}, 0x38) 38.375540088s ago: executing program 7 (id=11881): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) 37.980343056s ago: executing program 7 (id=11888): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r1, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000140)=0x8) 37.89415565s ago: executing program 7 (id=11890): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 37.877492777s ago: executing program 7 (id=11891): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 37.694112794s ago: executing program 7 (id=11896): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0xe64e}, @void, @eth={@remote, @multicast, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2b, 0x3c, 0x64, 0x6000, 0x2, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x18}}, @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x0, 0x2, 0x8001, 0x0, 0x3, 0x1, 0x5, 0x2, 0x3, 0x5, 0x202, 0x4e20, 0x4e24}, 0x1, 0x4}, 0x0, 0x1}}}}}}}}, 0x52) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b000100697036746e6c000010000280050009000400000004001300080004"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 37.693964774s ago: executing program 48 (id=11896): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0xe64e}, @void, @eth={@remote, @multicast, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2b, 0x3c, 0x64, 0x6000, 0x2, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x18}}, @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x0, 0x2, 0x8001, 0x0, 0x3, 0x1, 0x5, 0x2, 0x3, 0x5, 0x202, 0x4e20, 0x4e24}, 0x1, 0x4}, 0x0, 0x1}}}}}}}}, 0x52) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b000100697036746e6c000010000280050009000400000004001300080004"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 15.287015436s ago: executing program 9 (id=12463): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) 15.238042467s ago: executing program 9 (id=12464): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$read(0xb, r0, &(0x7f0000000000)=""/201, 0xc9) 15.176995266s ago: executing program 9 (id=12466): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) 15.130777928s ago: executing program 9 (id=12468): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 15.013899067s ago: executing program 9 (id=12471): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x900}], 0x1, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfffffeb6}], 0x1, 0x0) 14.901220356s ago: executing program 9 (id=12475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x8, 0x5, "d58838"}]}}}}}}, 0x4e) 14.842225965s ago: executing program 49 (id=12475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x8, 0x4, 0x0, 0x3e, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x4, 0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x8, 0x5, "d58838"}]}}}}}}, 0x4e) 2.556954547s ago: executing program 2 (id=12775): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4174, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x5e6a, 0x4968, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x2, 0x9a800000], 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c, 0x0}}], 0x1, 0x4c040) 2.40713057s ago: executing program 6 (id=12785): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[], 0x118}, 0x40000c0) 2.311055792s ago: executing program 6 (id=12790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2.265190044s ago: executing program 6 (id=12794): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 2.217857315s ago: executing program 6 (id=12796): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000300)={0xa, 0x0, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)='=', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 2.203247033s ago: executing program 2 (id=12798): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/248, 0xf8}, 0xff}], 0x1, 0x60010002, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2.149912673s ago: executing program 6 (id=12799): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@init_itable}, {@quota}, {@nojournal_checksum}, {@grpjquota}, {@lazytime}, {@block_validity}, {}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 2.106725755s ago: executing program 2 (id=12802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x9, 0x8, 0x1, 0x0, 0xd0, 0x6, 0x2}, 0x9c) 2.053803256s ago: executing program 6 (id=12804): socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.244644967s ago: executing program 2 (id=12837): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sigaltstack(&(0x7f0000000000)={0x0, 0x80000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 392.572452ms ago: executing program 2 (id=12863): r0 = socket(0x2, 0x80805, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) fcntl$lock(r0, 0x24, &(0x7f0000001080)={0x9d9561b5b84021fa, 0x1, 0x543117db}) 382.986831ms ago: executing program 5 (id=12864): unshare(0x40480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000a0000002f4900007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) 382.675251ms ago: executing program 3 (id=12865): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 347.285644ms ago: executing program 5 (id=12866): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) readv(r0, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/224, 0xe0}], 0x1) 345.690864ms ago: executing program 2 (id=12867): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x66642, 0x99) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 281.865242ms ago: executing program 0 (id=12869): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x4f) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 281.769612ms ago: executing program 0 (id=12870): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7fff) 275.684861ms ago: executing program 0 (id=12871): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 252.891347ms ago: executing program 3 (id=12874): close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) 212.34119ms ago: executing program 3 (id=12875): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 158.148449ms ago: executing program 3 (id=12876): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03084003158cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 118.140772ms ago: executing program 5 (id=12877): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f00000000c0)=0x8) 96.657049ms ago: executing program 0 (id=12878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6, 0x0, 0x6c}]}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 22.041175ms ago: executing program 0 (id=12879): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) 21.675175ms ago: executing program 3 (id=12880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460064060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="9010000090"], 0x0) 21.465224ms ago: executing program 5 (id=12881): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 21.262404ms ago: executing program 0 (id=12882): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 21.112414ms ago: executing program 5 (id=12883): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0xeb46) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 20.984534ms ago: executing program 3 (id=12889): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) exit(0x0) 0s ago: executing program 5 (id=12884): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0000-000000000000. [ 407.804916][T31606] FAT-fs (loop5): Directory bread(block 64) failed [ 407.811784][T31606] FAT-fs (loop5): Directory bread(block 65) failed [ 407.818508][T31606] FAT-fs (loop5): Directory bread(block 66) failed [ 407.825832][T31606] FAT-fs (loop5): Directory bread(block 67) failed [ 407.832880][T31606] FAT-fs (loop5): Directory bread(block 68) failed [ 407.839512][T31606] FAT-fs (loop5): Directory bread(block 69) failed [ 407.846135][T31606] FAT-fs (loop5): Directory bread(block 70) failed [ 407.852876][T31606] FAT-fs (loop5): Directory bread(block 71) failed [ 407.859566][T31606] FAT-fs (loop5): Directory bread(block 72) failed [ 407.869517][T31606] FAT-fs (loop5): Directory bread(block 73) failed [ 407.991569][T31628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11345'. [ 408.005167][T31628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11345'. [ 408.032668][T31633] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 408.048278][T31633] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.186096][T31648] EXT4-fs: Ignoring removed nobh option [ 408.196876][T31648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.211873][T31648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.250445][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.481247][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 408.481261][ T28] audit: type=1400 audit(2000000215.141:3201): avc: denied { bind } for pid=31666 comm="syz.6.11358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.515412][T31669] EXT4-fs: Ignoring removed orlov option [ 408.523753][T31669] EXT4-fs: Ignoring removed nobh option [ 408.553466][T31669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.604070][ T28] audit: type=1400 audit(2000000215.261:3202): avc: denied { write } for pid=31676 comm="syz.3.11362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.672164][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.681251][ T28] audit: type=1400 audit(2000000215.331:3203): avc: denied { connect } for pid=31682 comm="syz.3.11364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.719328][T31687] set_capacity_and_notify: 8 callbacks suppressed [ 408.719343][T31687] loop6: detected capacity change from 0 to 1024 [ 408.736505][T31687] EXT4-fs: inline encryption not supported [ 408.744793][T31687] EXT4-fs: Ignoring removed bh option [ 408.759901][T31687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.776523][ T28] audit: type=1400 audit(2000000215.441:3204): avc: denied { mounton } for pid=31686 comm="syz.6.11365" path="/24/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 408.794776][T31693] loop3: detected capacity change from 0 to 512 [ 408.816639][T31693] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 408.828182][ T28] audit: type=1400 audit(2000000215.441:3205): avc: denied { append } for pid=31686 comm="syz.6.11365" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 408.839325][T31693] EXT4-fs (loop3): 1 truncate cleaned up [ 408.853088][ T28] audit: type=1400 audit(2000000215.481:3206): avc: denied { remove_name } for pid=31237 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.858276][T31693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.882034][ T28] audit: type=1400 audit(2000000215.481:3207): avc: denied { rmdir } for pid=31237 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.918681][ T28] audit: type=1400 audit(2000000215.481:3208): avc: denied { unlink } for pid=31237 comm="syz-executor" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 408.918951][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.941449][ T28] audit: type=1400 audit(2000000215.491:3209): avc: denied { unlink } for pid=31237 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 408.978803][ T28] audit: type=1400 audit(2000000215.491:3210): avc: denied { unmount } for pid=31237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 408.999560][T31693] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.11368: invalid indirect mapped block 4294901760 (level 0) [ 409.014904][T31693] EXT4-fs (loop3): Remounting filesystem read-only [ 409.046000][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.140040][T31711] loop7: detected capacity change from 0 to 1024 [ 409.154656][T31713] loop5: detected capacity change from 0 to 1024 [ 409.156741][T31711] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.199324][T31713] EXT4-fs: Ignoring removed orlov option [ 409.200096][T31711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 409.217570][T31711] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.240287][T31713] EXT4-fs: Ignoring removed nobh option [ 409.254896][T31713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.267315][T31711] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.11376: bg 0: block 112: padding at end of block bitmap is not set [ 409.309656][T31711] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 409.322233][T31711] EXT4-fs (loop7): This should not happen!! Data will be lost [ 409.322233][T31711] [ 409.350822][ T3706] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm kworker/u8:15: lblock 3 mapped to illegal pblock 3 (length 3) [ 409.366777][ T3706] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 409.383755][ T3706] EXT4-fs (loop7): This should not happen!! Data will be lost [ 409.383755][ T3706] [ 409.403553][ T3719] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:21: lblock 8 mapped to illegal pblock 8 (length 8) [ 409.421282][ T3719] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 409.435789][ T3719] EXT4-fs (loop7): This should not happen!! Data will be lost [ 409.435789][ T3719] [ 409.448931][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 409.465884][T31727] loop3: detected capacity change from 0 to 4096 [ 409.505780][T31727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.531119][T31732] loop7: detected capacity change from 0 to 512 [ 409.539057][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.555878][T31732] EXT4-fs (loop7): orphan cleanup on readonly fs [ 409.565510][T31732] EXT4-fs error (device loop7): ext4_quota_enable:7188: comm syz.7.11384: Bad quota inum: 2, type: 1 [ 409.579427][T31732] loop7: lost filesystem error report for type 5 error -117 [ 409.579896][T31732] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 409.601780][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 409.601796][ C0] EXT4-fs (loop7): last error at time 2000000216: ext4_quota_enable:7188 [ 409.631390][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.640959][T31732] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 409.650507][T31732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.684775][T31732] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 409.699802][T31732] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 8 [ 409.725310][T31745] __nla_validate_parse: 2 callbacks suppressed [ 409.725323][T31745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11390'. [ 409.753085][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.792524][T31756] loop0: detected capacity change from 0 to 128 [ 409.829267][T31760] lo: Caught tx_queue_len zero misconfig [ 409.879532][T31766] loop3: detected capacity change from 0 to 1024 [ 409.896274][T31766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.918804][T31766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 409.939846][T31766] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c018, mo2=0002] [ 409.955649][T31766] System zones: 0-1, 3-36 [ 409.963751][T31766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.009483][T31766] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 410.028355][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.057572][T31775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11401'. [ 410.086696][T31777] loop5: detected capacity change from 0 to 512 [ 410.112742][T31777] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.11402: inode has both inline data and extents flags [ 410.126861][T31779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11403'. [ 410.143132][T31779] bond0: ARP target 8.4.0.0 is already present [ 410.150331][T31777] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 410.150390][T31779] bond0: option arp_ip_target: invalid value (1032) [ 410.158783][T31777] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.11402: couldn't read orphan inode 15 (err -117) [ 410.159553][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 410.166101][T31777] loop5: lost filesystem error report for type 5 error -117 [ 410.169200][T31777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.178018][ C0] EXT4-fs (loop5): initial error at time 2000000216: ext4_orphan_get:1391: inode 15 [ 410.213443][ C0] EXT4-fs (loop5): last error at time 2000000216: ext4_orphan_get:1396 [ 410.325357][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.334731][T31784] loop3: detected capacity change from 0 to 4096 [ 410.389352][T31784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.459517][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.484261][T31797] xt_CT: No such helper "snmp_trap" [ 410.561256][T31807] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 410.573456][T31807] EXT4-fs (loop6): 1 truncate cleaned up [ 410.599862][T31807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.630386][T31813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.665668][T31813] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.716189][ T3709] Bluetooth: hci0: Frame reassembly failed (-84) [ 410.754337][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.839811][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.864121][T31828] netlink: 'syz.6.11424': attribute type 2 has an invalid length. [ 410.899298][T31832] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 410.910122][T31832] EXT4-fs (loop3): 1 truncate cleaned up [ 410.916039][T31832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.939330][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.137841][T31855] xt_hashlimit: size too large, truncated to 1048576 [ 411.211546][T31860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11447'. [ 411.446269][T14097] Process accounting resumed [ 411.486365][T31881] EXT4-fs: Ignoring removed bh option [ 411.497281][T31881] EXT4-fs: Ignoring removed oldalloc option [ 411.503472][T31881] EXT4-fs: Ignoring removed nobh option [ 411.530441][T31881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.545641][T31881] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.11445: Allocating blocks 497-513 which overlap fs metadata [ 411.552927][T31877] Process accounting resumed [ 411.577347][T31881] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.11445: Allocating blocks 497-513 which overlap fs metadata [ 411.592689][T31881] EXT4-fs (loop5): pa ffff8881075eff50: logic 16, phys. 129, len 24 [ 411.600697][T31881] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 411.626970][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.866618][T31905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11457'. [ 411.932522][T31910] netlink: 'syz.7.11459': attribute type 1 has an invalid length. [ 412.273760][ T3399] kernel write not supported for file bpf-prog (pid: 3399 comm: kworker/1:4) [ 412.378281][T31955] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 412.389241][T31955] team0: Port device batadv1 added [ 412.424290][T31960] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 412.440442][T31960] EXT4-fs (loop6): 1 truncate cleaned up [ 412.446732][T31960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.481909][T31966] hsr0: entered allmulticast mode [ 412.504186][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.512059][T31966] hsr_slave_0: entered allmulticast mode [ 412.543638][T31966] hsr_slave_1: entered allmulticast mode [ 412.548873][T31969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11485'. [ 412.619512][T31969] hsr_slave_0: left promiscuous mode [ 412.626080][T31969] hsr_slave_1: left promiscuous mode [ 412.648036][T31969] hsr0 (unregistering): left allmulticast mode [ 412.662742][T31983] sctp: [Deprecated]: syz.3.11492 (pid 31983) Use of int in max_burst socket option. [ 412.662742][T31983] Use struct sctp_assoc_value instead [ 412.748791][ T7485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 412.754887][T28084] Bluetooth: hci0: command 0x1003 tx timeout [ 412.771347][T31994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11496'. [ 412.860473][T32000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11499'. [ 413.111445][T32018] netlink: 'syz.3.11507': attribute type 1 has an invalid length. [ 413.120694][T32018] netlink: 'syz.3.11507': attribute type 2 has an invalid length. [ 413.556787][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 413.556801][ T28] audit: type=1400 audit(2000000220.211:3285): avc: denied { create } for pid=32024 comm="syz.5.11510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.583953][ T28] audit: type=1400 audit(2000000220.241:3286): avc: denied { connect } for pid=32024 comm="syz.5.11510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.589986][T32030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11512'. [ 413.604642][ T28] audit: type=1400 audit(2000000220.241:3287): avc: denied { write } for pid=32024 comm="syz.5.11510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.618154][T32030] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11512'. [ 413.635177][ T28] audit: type=1400 audit(2000000220.301:3288): avc: denied { read } for pid=32024 comm="syz.5.11510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.661871][ T28] audit: type=1400 audit(2000000220.311:3289): avc: denied { read } for pid=32029 comm="syz.6.11512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.711569][T31818] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.922806][T32043] set_capacity_and_notify: 6 callbacks suppressed [ 413.922885][T32043] loop7: detected capacity change from 0 to 1024 [ 413.941679][T32043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.967913][ T28] audit: type=1400 audit(2000000220.621:3290): avc: denied { create } for pid=32042 comm="syz.7.11518" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 413.999029][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.038330][ T28] audit: type=1400 audit(2000000220.621:3291): avc: denied { add_name } for pid=32042 comm="syz.7.11518" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 414.078867][T32050] loop7: detected capacity change from 0 to 512 [ 414.099447][ T28] audit: type=1326 audit(2000000220.751:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32051 comm="syz.6.11520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 414.101446][T32050] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 414.157732][T32050] EXT4-fs (loop7): 1 truncate cleaned up [ 414.164000][T32050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.165686][ T28] audit: type=1326 audit(2000000220.751:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32051 comm="syz.6.11520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 414.248623][ T28] audit: type=1326 audit(2000000220.801:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32051 comm="syz.6.11520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 414.376924][ T3717] bridge_slave_1: left allmulticast mode [ 414.388815][ T3717] bridge_slave_1: left promiscuous mode [ 414.403629][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.416264][ T3717] bridge_slave_0: left allmulticast mode [ 414.430642][ T3717] bridge_slave_0: left promiscuous mode [ 414.436411][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.508673][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.560797][T32071] loop7: detected capacity change from 0 to 128 [ 414.622008][ T3717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.638917][ T3717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.651943][T32076] loop7: detected capacity change from 0 to 1024 [ 414.669711][ T3717] bond0 (unregistering): Released all slaves [ 414.677077][T32076] EXT4-fs: Ignoring removed bh option [ 414.683415][T32076] EXT4-fs: Ignoring removed oldalloc option [ 414.697386][T32076] EXT4-fs: Ignoring removed nobh option [ 414.725031][T32076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.737352][ T3717] hsr_slave_0: left promiscuous mode [ 414.744938][ T3717] hsr_slave_1: left promiscuous mode [ 414.765505][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.767203][T32087] loop5: detected capacity change from 0 to 128 [ 414.779091][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.786867][T32076] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.11530: Allocating blocks 497-513 which overlap fs metadata [ 414.806347][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.813086][T32087] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 414.815702][T32076] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.11530: Allocating blocks 497-513 which overlap fs metadata [ 414.825727][ T3717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.859771][ T3717] veth1_macvtap: left promiscuous mode [ 414.865558][ T3717] veth0_macvtap: left promiscuous mode [ 414.865579][T32076] EXT4-fs (loop7): pa ffff8881075efee0: logic 16, phys. 129, len 24 [ 414.865604][T32076] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 414.867175][T32087] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 414.872976][ T3717] veth1_vlan: left promiscuous mode [ 414.907581][ T3709] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 414.926403][ T3717] veth0_vlan: left promiscuous mode [ 414.938070][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.969087][T32093] loop7: detected capacity change from 0 to 1024 [ 414.976000][T32093] EXT4-fs: Ignoring removed orlov option [ 414.982939][T32093] EXT4-fs (loop7): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 415.008730][T32093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.038174][ T3717] team0 (unregistering): Port device team_slave_1 removed [ 415.049453][ T3717] team0 (unregistering): Port device team_slave_0 removed [ 415.057243][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.241315][T32065] chnl_net:caif_netlink_parms(): no params data found [ 415.299461][T32065] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.306548][T32065] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.313879][T32065] bridge_slave_0: entered allmulticast mode [ 415.324437][T32065] bridge_slave_0: entered promiscuous mode [ 415.332931][T32122] loop7: detected capacity change from 0 to 512 [ 415.333650][ T3717] IPVS: stop unused estimator thread 0... [ 415.342692][T32065] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.348730][T32122] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 415.352868][T32065] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.369791][T32065] bridge_slave_1: entered allmulticast mode [ 415.376111][T32122] EXT4-fs (loop7): 1 truncate cleaned up [ 415.376192][T32065] bridge_slave_1: entered promiscuous mode [ 415.398706][T32122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.414088][T32065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.431428][T32065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.493523][T32065] team0: Port device team_slave_0 added [ 415.510733][T32065] team0: Port device team_slave_1 added [ 415.519408][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.551587][T32065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.558668][T32065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.587180][T32065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.599052][T32065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.605982][T32065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.633764][T32065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.704353][T32065] hsr_slave_0: entered promiscuous mode [ 415.711492][T32065] hsr_slave_1: entered promiscuous mode [ 415.718435][T32065] debugfs: 'hsr0' already exists in 'hsr' [ 415.725813][T32065] Cannot create hsr debugfs directory [ 415.808355][T32065] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.815424][T32065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.822758][T32065] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.829809][T32065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.864762][T32065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.883282][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.895827][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.917591][T32065] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.944685][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.951767][ T3689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.966932][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.974000][ T3709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.997288][T32154] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11554'. [ 416.002035][T32065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.016843][T32065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.034921][T32153] syzkaller1: entered promiscuous mode [ 416.045492][T32153] syzkaller1: entered allmulticast mode [ 416.130802][T32065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.142335][T32164] loop5: detected capacity change from 0 to 512 [ 416.156738][T32164] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 416.234399][T32164] EXT4-fs (loop5): 1 truncate cleaned up [ 416.242030][T32164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.296617][T32065] veth0_vlan: entered promiscuous mode [ 416.304126][T32065] veth1_vlan: entered promiscuous mode [ 416.322257][T32065] veth0_macvtap: entered promiscuous mode [ 416.329541][T32065] veth1_macvtap: entered promiscuous mode [ 416.340436][T32065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.351526][T32065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.402181][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.510344][T32201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11567'. [ 416.532382][T32203] loop5: detected capacity change from 0 to 512 [ 416.564062][T32208] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 416.577639][T32203] EXT4-fs: Ignoring removed orlov option [ 416.577717][T32207] IPVS: stopping master sync thread 32208 ... [ 416.609555][T32212] loop6: detected capacity change from 0 to 1024 [ 416.617451][T32212] EXT4-fs: Ignoring removed bh option [ 416.638404][T32203] EXT4-fs: Ignoring removed bh option [ 416.638625][T32212] EXT4-fs: Ignoring removed oldalloc option [ 416.654197][T32203] EXT4-fs: Ignoring removed oldalloc option [ 416.654470][T32212] EXT4-fs: Ignoring removed nobh option [ 416.666660][T32203] ext4: Unknown parameter 'smackfsfloor' [ 416.702548][T32212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.750317][T32212] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.11572: Allocating blocks 497-513 which overlap fs metadata [ 416.817370][T32212] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.11572: Allocating blocks 497-513 which overlap fs metadata [ 416.849980][T32212] EXT4-fs (loop6): pa ffff8881075efe70: logic 16, phys. 129, len 24 [ 416.857999][T32212] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 416.931726][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.062245][T32232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.104756][T24221] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.611389][T32283] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.668608][T32293] EXT4-fs: Ignoring removed bh option [ 417.680084][T32293] EXT4-fs: Ignoring removed oldalloc option [ 417.686076][T32293] EXT4-fs: Ignoring removed nobh option [ 417.725456][T32301] xt_hashlimit: size too large, truncated to 1048576 [ 417.736228][T32293] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.11604: Allocating blocks 497-513 which overlap fs metadata [ 417.771920][T32293] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.11604: Allocating blocks 497-513 which overlap fs metadata [ 417.787898][T32293] EXT4-fs (loop3): pa ffff8881075f0000: logic 16, phys. 129, len 24 [ 417.795995][T32293] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 417.829447][T32310] netlink: 35284 bytes leftover after parsing attributes in process `syz.5.11613'. [ 417.839652][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11613'. [ 417.963099][T32318] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.978165][T32318] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.11616: lblock 0 mapped to illegal pblock 0 (length 6) [ 417.992785][T32318] EXT4-fs error (device loop5): ext4_ext_remove_space:2954: inode #15: comm syz.5.11616: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 418.013872][T32318] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.11616: lblock 0 mapped to illegal pblock 0 (length 1) [ 418.027570][T32318] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 418.040664][T32318] EXT4-fs (loop5): This should not happen!! Data will be lost [ 418.040664][T32318] [ 418.128024][T32346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11629'. [ 418.164156][T32346] team0: Port device team_slave_0 removed [ 418.233125][T32350] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.238536][T32352] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.263309][T32352] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.11632: corrupted inode contents [ 418.275959][T32352] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.11632: mark_inode_dirty error [ 418.287873][T32352] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.11632: corrupted inode contents [ 418.300582][T32352] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.11632: mark_inode_dirty error [ 418.314437][T32352] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.11632: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 418.314437][T32352] [ 418.551839][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 418.552971][T32375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.570150][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 418.570437][T32375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.685894][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 418.685910][ T28] audit: type=1400 audit(2000000225.341:3325): avc: denied { write } for pid=32381 comm="syz.7.11643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 418.761311][T32384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11645'. [ 418.774265][T32384] netlink: 'syz.7.11645': attribute type 1 has an invalid length. [ 418.813185][ T28] audit: type=1400 audit(2000000225.471:3326): avc: denied { read write } for pid=32391 comm="syz.5.11648" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 418.840409][ T28] audit: type=1400 audit(2000000225.471:3327): avc: denied { open } for pid=32391 comm="syz.5.11648" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 418.864764][ T28] audit: type=1400 audit(2000000225.471:3328): avc: denied { ioctl } for pid=32391 comm="syz.5.11648" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 418.899019][T32399] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11651'. [ 418.918202][ T28] audit: type=1400 audit(2000000225.571:3329): avc: denied { read } for pid=32398 comm="syz.7.11651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 419.216728][ T28] audit: type=1400 audit(2000000225.871:3330): avc: denied { firmware_load } for pid=32416 comm="syz.3.11658" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 419.275088][T32422] set_capacity_and_notify: 6 callbacks suppressed [ 419.275100][T32422] loop3: detected capacity change from 0 to 512 [ 419.301093][T32422] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.314159][T32422] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.11659: corrupted inode contents [ 419.326499][T32422] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.11659: mark_inode_dirty error [ 419.339718][T32422] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.11659: corrupted inode contents [ 419.352043][T32422] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.11659: mark_inode_dirty error [ 419.364763][T32425] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.11659: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 419.364763][T32425] [ 419.427862][ T28] audit: type=1400 audit(2000000226.081:3331): avc: denied { mount } for pid=32426 comm="syz.3.11660" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 419.467464][T32430] loop6: detected capacity change from 0 to 512 [ 419.474758][T32427] loop3: detected capacity change from 0 to 512 [ 419.481986][T32430] EXT4-fs: Ignoring removed bh option [ 419.492132][T32430] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 419.502226][T32430] EXT4-fs (loop6): 1 truncate cleaned up [ 419.528474][ T28] audit: type=1400 audit(2000000226.181:3332): avc: denied { setattr } for pid=32429 comm="syz.6.11661" name=".pending_reads" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 419.578801][ T28] audit: type=1400 audit(2000000226.231:3333): avc: denied { read } for pid=32432 comm="syz.6.11662" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 419.602660][T32427] EXT4-fs: Ignoring removed orlov option [ 419.613414][T32427] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 419.622187][T32427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 419.630586][T32427] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.11660: corrupted in-inode xattr: e_value size too large [ 419.645402][T32427] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 419.645544][T32427] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.11660: couldn't read orphan inode 15 (err -117) [ 419.654685][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 419.654699][ C0] EXT4-fs (loop3): initial error at time 2000000226: ext4_iget_extra_inode:5025: inode 15 [ 419.654724][ C0] EXT4-fs (loop3): last error at time 2000000226: ext4_iget_extra_inode:5025: inode 15 [ 419.695252][T32427] loop3: lost filesystem error report for type 5 error -117 [ 419.696564][ T28] audit: type=1400 audit(2000000226.231:3334): avc: denied { open } for pid=32432 comm="syz.6.11662" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 419.771415][T32439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11664'. [ 420.083468][T32471] bond0: entered promiscuous mode [ 420.089559][T32471] bond_slave_0: entered promiscuous mode [ 420.096124][T32471] bond_slave_1: entered promiscuous mode [ 420.106930][T32471] batadv0: entered promiscuous mode [ 420.114883][T32471] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 420.126712][T32471] bond0: left promiscuous mode [ 420.131584][T32471] bond_slave_0: left promiscuous mode [ 420.137118][T32471] bond_slave_1: left promiscuous mode [ 420.146708][T32471] batadv0: left promiscuous mode [ 420.161392][T32480] netlink: 'syz.7.11686': attribute type 21 has an invalid length. [ 420.173056][T32482] loop5: detected capacity change from 0 to 128 [ 420.195343][T32482] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 420.203917][T32482] FAT-fs (loop5): Filesystem has been set read-only [ 420.210572][T32482] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 420.432084][T32509] serio: Serial port ptm0 [ 420.523806][T32523] loop3: detected capacity change from 0 to 128 [ 420.542016][T32525] loop5: detected capacity change from 0 to 512 [ 420.562461][T32525] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.635212][T32536] loop3: detected capacity change from 0 to 512 [ 420.663174][T32536] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.780680][T32551] loop5: detected capacity change from 0 to 256 [ 420.840599][T32555] netlink: 'syz.5.11718': attribute type 15 has an invalid length. [ 421.129577][T32574] loop7: detected capacity change from 0 to 164 [ 421.137958][T32574] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 421.151228][T32574] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 421.168110][T32574] rock: directory entry would overflow storage [ 421.174557][T32574] rock: sig=0x4f50, size=4, remaining=3 [ 421.180340][T32574] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 421.213599][T32576] netlink: 'syz.7.11728': attribute type 10 has an invalid length. [ 421.229136][T32576] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11728'. [ 421.238341][T32576] vlan0: entered promiscuous mode [ 421.243655][T32576] vlan0: entered allmulticast mode [ 421.249497][T32576] veth0_vlan: entered allmulticast mode [ 421.255578][T32576] bridge0: port 3(vlan0) entered blocking state [ 421.262011][T32576] bridge0: port 3(vlan0) entered disabled state [ 421.331371][T32586] loop7: detected capacity change from 0 to 4096 [ 421.480473][T32595] EXT4-fs: Ignoring removed nobh option [ 421.486166][T32595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.750375][T32613] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.860799][T32627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11748'. [ 421.942786][T32640] syzkaller1: entered promiscuous mode [ 421.948319][T32640] syzkaller1: entered allmulticast mode [ 422.144583][T32652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11759'. [ 422.493759][T32680] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.500924][T32680] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.614308][T32692] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.646403][T32690] SELinux: ebitmap: truncated map [ 422.652585][T32690] SELinux: failed to load policy [ 422.962679][T32727] SELinux: failed to load policy [ 423.798484][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 423.798500][ T28] audit: type=1400 audit(2000000230.451:3376): avc: denied { create } for pid=32760 comm="syz.6.11807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 423.844505][ T28] audit: type=1400 audit(2000000230.491:3377): avc: denied { setopt } for pid=32760 comm="syz.6.11807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 423.920120][T32763] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.048609][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.056650][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.066819][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.074649][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.084462][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.092570][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.102601][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.110450][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.120441][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.128075][ T3364] hid-generic 00A0:0086:0003.000C: unknown main item tag 0x0 [ 424.144591][ T3364] hid-generic 00A0:0086:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 424.189798][ T306] fido_id[306]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 424.539364][ T336] set_capacity_and_notify: 8 callbacks suppressed [ 424.539399][ T336] loop7: detected capacity change from 0 to 8192 [ 424.584904][ T339] netlink: 'syz.6.11824': attribute type 83 has an invalid length. [ 424.618482][ T345] loop6: detected capacity change from 0 to 1024 [ 424.702269][ T28] audit: type=1400 audit(2000000231.361:3378): avc: denied { rename } for pid=344 comm="syz.6.11826" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 424.748870][ T28] audit: type=1326 audit(2000000231.401:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.6.11828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 424.772531][ T28] audit: type=1326 audit(2000000231.411:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.6.11828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 424.796921][ T28] audit: type=1326 audit(2000000231.411:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.6.11828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 424.821170][ T28] audit: type=1326 audit(2000000231.411:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.6.11828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 424.874781][ T358] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 424.911237][ T366] loop7: detected capacity change from 0 to 512 [ 424.918126][ T366] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 424.929668][ T366] EXT4-fs (loop7): 1 truncate cleaned up [ 425.108860][ T376] loop0: detected capacity change from 0 to 512 [ 425.139476][ T376] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.334872][ T397] loop7: detected capacity change from 0 to 8192 [ 425.345939][ T397] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.520476][ T405] loop0: detected capacity change from 0 to 256 [ 425.530596][ T405] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 425.545295][ T405] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.698004][ T28] audit: type=1400 audit(2000000232.351:3383): avc: denied { create } for pid=422 comm="syz.0.11858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 425.743207][ T28] audit: type=1400 audit(2000000232.381:3384): avc: denied { write } for pid=422 comm="syz.0.11858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 426.009025][ T28] audit: type=1326 audit(2000000232.671:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=438 comm="syz.6.11865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 426.374319][ T455] loop3: detected capacity change from 0 to 512 [ 426.385025][ T455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.397760][ T455] EXT4-fs (loop3): orphan cleanup on readonly fs [ 426.404630][ T455] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.11872: Bad quota inum: 2, type: 2 [ 426.415624][ T455] loop3: lost filesystem error report for type 5 error -117 [ 426.415807][ T455] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 426.423166][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 426.423190][ C0] EXT4-fs (loop3): last error at time 2000000233: ext4_quota_enable:7188 [ 426.455945][ T455] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 426.466528][ T455] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 426.515279][ T462] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11874'. [ 426.673400][T20945] Process accounting resumed [ 426.816788][ T467] Process accounting resumed [ 426.933864][ T483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11882'. [ 427.360124][ T500] 9p: Bad value for 'source' [ 427.576454][ T525] netlink: 'syz.3.11898': attribute type 25 has an invalid length. [ 427.605505][ T525] netlink: 'syz.3.11898': attribute type 7 has an invalid length. [ 427.620938][ T525] netlink: 'syz.3.11898': attribute type 2 has an invalid length. [ 427.719730][ T528] chnl_net:caif_netlink_parms(): no params data found [ 427.752964][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.760028][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.767115][ T528] bridge_slave_0: entered allmulticast mode [ 427.773426][ T528] bridge_slave_0: entered promiscuous mode [ 427.780130][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.787170][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.794548][ T528] bridge_slave_1: entered allmulticast mode [ 427.801035][ T528] bridge_slave_1: entered promiscuous mode [ 427.816893][ T528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.826991][ T528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.845946][ T528] team0: Port device team_slave_0 added [ 427.852397][ T528] team0: Port device team_slave_1 added [ 427.867021][ T528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.874102][ T528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.900089][ T528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.911250][ T528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.918169][ T528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.944030][ T528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.968729][ T528] hsr_slave_0: entered promiscuous mode [ 427.974662][ T528] hsr_slave_1: entered promiscuous mode [ 427.980518][ T528] debugfs: 'hsr0' already exists in 'hsr' [ 427.986215][ T528] Cannot create hsr debugfs directory [ 428.038561][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.045609][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.052927][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.059960][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.089836][ T528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.102052][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.109995][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.120588][ T528] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.133383][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.140460][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.149571][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.156599][ T3709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.219169][ T528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.306639][ T528] veth0_vlan: entered promiscuous mode [ 428.315281][ T528] veth1_vlan: entered promiscuous mode [ 428.333125][ T528] veth0_macvtap: entered promiscuous mode [ 428.341745][ T528] veth1_macvtap: entered promiscuous mode [ 428.357141][ T528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.370004][ T528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.437111][ T573] loop0: detected capacity change from 0 to 4096 [ 428.455204][ T573] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.11913: corrupted inode contents [ 428.474361][ T573] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.11913: mark_inode_dirty error [ 428.490532][ T573] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.11913: corrupted inode contents [ 428.509206][ T573] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.11913: mark_inode_dirty error [ 428.521126][ T573] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.11913: corrupted inode contents [ 428.534197][ T573] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.11913: mark_inode_dirty error [ 428.545811][ T573] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.11913: corrupted inode contents [ 428.558499][ T573] EXT4-fs error (device loop0): ext4_truncate:4587: inode #15: comm syz.0.11913: mark_inode_dirty error [ 428.572869][ T573] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem [ 428.772064][ T609] loop9: detected capacity change from 0 to 1024 [ 428.792009][ T609] EXT4-fs: Ignoring removed orlov option [ 428.803482][ T609] EXT4-fs: Ignoring removed nobh option [ 428.811012][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 428.811024][ T28] audit: type=1400 audit(2000000235.471:3420): avc: denied { remove_name } for pid=616 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=21723 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.817294][ T618] loop3: detected capacity change from 0 to 128 [ 428.855585][ T28] audit: type=1400 audit(2000000235.511:3421): avc: denied { unlink } for pid=616 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=21723 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 428.953313][ T28] audit: type=1400 audit(2000000235.611:3422): avc: denied { lock } for pid=606 comm="syz.9.11910" path="/2/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 428.981661][ T28] audit: type=1400 audit(2000000235.611:3423): avc: denied { link } for pid=606 comm="syz.9.11910" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 429.102680][ T640] EXT4-fs: Ignoring removed orlov option [ 429.117320][ T640] EXT4-fs (loop3): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 429.213358][ T28] audit: type=1400 audit(2000000235.871:3424): avc: denied { mounton } for pid=647 comm="syz.0.11922" path="/72/file0/bus" dev="loop0" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 429.414117][ T662] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 429.471468][ T665] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11929: invalid indirect mapped block 256 (level 2) [ 429.495596][ T665] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 429.495900][ T665] EXT4-fs (loop5): 2 truncates cleaned up [ 429.505110][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 429.505125][ C1] EXT4-fs (loop5): initial error at time 2000000236: ext4_free_branches:1023: inode 11 [ 429.505162][ C1] EXT4-fs (loop5): last error at time 2000000236: ext4_free_branches:1023: inode 11 [ 429.547972][ T671] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 429.571823][ T28] audit: type=1400 audit(2000000236.231:3425): avc: denied { watch } for pid=669 comm="syz.6.11931" path="/159/file1" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 429.609282][ T28] audit: type=1400 audit(2000000236.261:3426): avc: denied { read } for pid=672 comm="syz.5.11932" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.835011][ T698] set_capacity_and_notify: 5 callbacks suppressed [ 429.835028][ T698] loop6: detected capacity change from 0 to 128 [ 429.858135][ T698] vfat: Unknown parameter ']P:t#+QhP;RK}Ts;Sz?&\n[Jv7t@ vVTBC*L~' [ 429.922661][ T698] SELinux: failed to load policy [ 429.955532][ T28] audit: type=1400 audit(2000000236.611:3427): avc: denied { write } for pid=709 comm="syz.6.11950" path="socket:[106015]" dev="sockfs" ino=106015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.004906][ T28] audit: type=1400 audit(2000000236.661:3428): avc: denied { name_bind } for pid=713 comm="syz.6.11952" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 430.045252][ T716] loop9: detected capacity change from 0 to 1024 [ 430.052995][ T716] EXT4-fs: Ignoring removed bh option [ 430.060647][ T716] EXT4-fs: Ignoring removed oldalloc option [ 430.073901][ T716] EXT4-fs: Ignoring removed nobh option [ 430.081092][ T28] audit: type=1400 audit(2000000236.731:3429): avc: denied { ioctl } for pid=719 comm="syz.5.11955" path="socket:[106048]" dev="sockfs" ino=106048 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 430.094743][ T722] loop6: detected capacity change from 0 to 128 [ 430.129866][ T722] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 430.142583][ T716] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.11953: Allocating blocks 497-513 which overlap fs metadata [ 430.163751][ T3706] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 430.178803][ T3706] FAT-fs (loop6): Filesystem has been set read-only [ 430.186384][ T3706] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 430.196232][ T716] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.11953: Allocating blocks 497-513 which overlap fs metadata [ 430.228965][ T716] EXT4-fs (loop9): pa ffff8881075f0000: logic 16, phys. 129, len 24 [ 430.236973][ T716] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 430.294642][ T738] loop0: detected capacity change from 0 to 128 [ 430.380543][ T749] Invalid argument reading file caps for ./file0 [ 430.460273][ T758] netlink: 'syz.0.11971': attribute type 39 has an invalid length. [ 430.469036][ T760] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11972'. [ 430.482290][ T760] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11972'. [ 430.508934][ T758] hsr_slave_1 (unregistering): left promiscuous mode [ 430.654301][ T769] loop0: detected capacity change from 0 to 1024 [ 430.674326][ T769] EXT4-fs: Ignoring removed bh option [ 430.681675][ T769] EXT4-fs: Ignoring removed oldalloc option [ 430.694546][ T769] EXT4-fs: Ignoring removed nobh option [ 430.721286][ T769] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.11973: Allocating blocks 497-513 which overlap fs metadata [ 430.779798][ T781] syzkaller1: entered promiscuous mode [ 430.785323][ T781] syzkaller1: entered allmulticast mode [ 430.799358][ T769] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.11973: Allocating blocks 497-513 which overlap fs metadata [ 430.866161][ T769] EXT4-fs (loop0): pa ffff8881075eff50: logic 16, phys. 129, len 24 [ 430.874271][ T769] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 431.894327][ T784] kexec: Could not allocate control_code_buffer [ 432.227862][ T838] loop6: detected capacity change from 0 to 1024 [ 432.340899][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12010'. [ 432.703635][ T873] loop6: detected capacity change from 0 to 1024 [ 432.712855][ T875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12019'. [ 432.720667][ T873] EXT4-fs: inline encryption not supported [ 432.727867][ T873] EXT4-fs: Ignoring removed bh option [ 432.782281][ T873] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 432.822827][ T873] EXT4-fs (loop6): Remounting filesystem read-only [ 433.096393][ T908] loop6: detected capacity change from 0 to 4096 [ 433.105843][ T910] loop9: detected capacity change from 0 to 512 [ 433.114757][ T910] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 433.136331][ T908] EXT4-fs (loop6): shut down requested (1) [ 433.148386][ T908] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 433.162431][ T910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 433.172640][ T908] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 433.179817][ T910] EXT4-fs (loop9): orphan cleanup on readonly fs [ 433.224024][ T910] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.12036: bad orphan inode 3 [ 433.248990][ T916] IPv6: NLM_F_REPLACE set, but no existing node found! [ 433.255934][ T910] loop9: lost filesystem error report for type 5 error -117 [ 433.256089][ T910] EXT4-fs (loop9): Remounting filesystem read-only [ 433.263385][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 433.263405][ C1] EXT4-fs (loop9): initial error at time 2000000239: ext4_orphan_get:1417 [ 433.263424][ C1] EXT4-fs (loop9): last error at time 2000000239: ext4_orphan_get:1417 [ 433.308135][ T910] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.12036: dx entry: limit 0 != root limit 125 [ 433.321355][ T910] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.12036: Corrupt directory, running e2fsck is recommended [ 433.917028][ T1000] loop6: detected capacity change from 0 to 512 [ 433.932055][ T1000] EXT4-fs mount: 58 callbacks suppressed [ 433.932069][ T1000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.953917][ T1000] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.987678][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.032362][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 434.032377][ T28] audit: type=1400 audit(2000000240.691:3448): avc: denied { mounton } for pid=1007 comm="syz.6.12075" path="/206/file0" dev="tmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 434.062904][ T1008] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 434.173989][ T28] audit: type=1400 audit(2000000240.831:3449): avc: denied { lock } for pid=1009 comm="syz.5.12076" path="socket:[107154]" dev="sockfs" ino=107154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 434.200797][ T1016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 434.213102][ T1016] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.228934][ T1016] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.12079: lblock 0 mapped to illegal pblock 0 (length 6) [ 434.252450][ T1016] EXT4-fs error (device loop6): ext4_ext_remove_space:2954: inode #15: comm syz.6.12079: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 434.272652][ T28] audit: type=1400 audit(2000000240.931:3450): avc: denied { write } for pid=1019 comm="syz.5.12080" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 434.299795][ T1016] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.12079: lblock 0 mapped to illegal pblock 0 (length 1) [ 434.314382][ T1016] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 434.348904][ T1016] EXT4-fs (loop6): This should not happen!! Data will be lost [ 434.348904][ T1016] [ 434.374316][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 434.545331][ T1029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12085'. [ 434.554476][ T1029] netlink: 'syz.6.12085': attribute type 1 has an invalid length. [ 434.653321][ T1042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.739572][ T28] audit: type=1326 audit(2000000241.401:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.6.12098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 434.771482][ T1062] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.12097: corrupted in-inode xattr: invalid ea_ino [ 434.819488][ T1062] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 434.819683][ T1062] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.12097: couldn't read orphan inode 15 (err -117) [ 434.828871][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 434.828887][ C0] EXT4-fs (loop0): initial error at time 2000000241: ext4_iget_extra_inode:5025: inode 15 [ 434.828917][ C0] EXT4-fs (loop0): last error at time 2000000241: ext4_iget_extra_inode:5025: inode 15 [ 434.882528][ T28] audit: type=1326 audit(2000000241.401:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.6.12098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 434.920393][ T28] audit: type=1326 audit(2000000241.421:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.6.12098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 434.944994][ T1042] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.955465][ T1062] loop0: lost filesystem error report for type 5 error -117 [ 434.956099][ T1062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.979843][ T28] audit: type=1326 audit(2000000241.421:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.6.12098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 435.034261][ T28] audit: type=1326 audit(2000000241.441:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.6.12098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 435.058720][T32065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.072084][ T28] audit: type=1326 audit(2000000241.441:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.6.12098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x0 [ 435.099735][ T28] audit: type=1326 audit(2000000241.471:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.6.12098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 435.149526][ T1075] 9pnet: p9_errstr2errno: server reported unknown error [ 435.166575][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.223207][ T1091] set_capacity_and_notify: 3 callbacks suppressed [ 435.223223][ T1091] loop0: detected capacity change from 0 to 128 [ 435.307858][ T1101] bond0: entered promiscuous mode [ 435.314130][ T1101] bond_slave_0: entered promiscuous mode [ 435.320302][ T1101] bond_slave_1: entered promiscuous mode [ 435.341048][ T1101] batadv0: entered promiscuous mode [ 435.416695][ T1101] debugfs: 'hsr0' already exists in 'hsr' [ 435.424597][ T1108] loop9: detected capacity change from 0 to 512 [ 435.441120][ T1108] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 435.461146][ T1108] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 435.475683][ T1101] Cannot create hsr debugfs directory [ 435.492771][ T1101] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 435.499708][ T1108] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 435.512187][ T1108] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 435.521076][ T1108] System zones: 0-2, 18-18, 34-35 [ 435.526751][ T1108] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.542010][ T1101] bond0: left promiscuous mode [ 435.546819][ T1101] bond_slave_0: left promiscuous mode [ 435.554005][ T1101] bond_slave_1: left promiscuous mode [ 435.562398][ T1101] batadv0: left promiscuous mode [ 435.570701][ T528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.669835][ T1124] loop0: detected capacity change from 0 to 512 [ 435.677601][ T1124] EXT4-fs: Ignoring removed bh option [ 435.686936][ T1124] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 435.703674][ T1124] EXT4-fs (loop0): 1 truncate cleaned up [ 435.713026][ T1124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.766591][T32065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.844724][ T1130] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 436.057875][ T1148] loop6: detected capacity change from 0 to 128 [ 436.178712][ T1163] loop0: detected capacity change from 0 to 512 [ 436.195665][ T1158] loop6: detected capacity change from 0 to 8192 [ 436.196365][ T1167] loop9: detected capacity change from 0 to 128 [ 436.231469][ T1163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.312887][ T1163] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.342478][ T1163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.425656][T20945] hid_parser_main: 9 callbacks suppressed [ 436.425722][T20945] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 436.449809][ T1186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.456835][T20945] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 436.458303][ T1186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.958736][ T1224] loop5: detected capacity change from 0 to 1024 [ 436.974701][ T1224] EXT4-fs: Ignoring removed nobh option [ 436.980773][ T1224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.021797][ T1224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.093795][ T1230] netlink: 'syz.9.12169': attribute type 21 has an invalid length. [ 437.233798][ T1237] loop9: detected capacity change from 0 to 164 [ 437.244482][ T1237] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.264024][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.275242][ T1237] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.288149][ T1237] rock: directory entry would overflow storage [ 437.295097][ T1237] rock: sig=0x4f50, size=4, remaining=3 [ 437.305343][ T1237] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 437.355581][ T1243] netlink: 'syz.5.12177': attribute type 10 has an invalid length. [ 437.385769][ T1243] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12177'. [ 437.396558][ T1243] vlan0: entered promiscuous mode [ 437.402042][ T1243] vlan0: entered allmulticast mode [ 437.411074][ T1243] veth0_vlan: entered allmulticast mode [ 437.418559][ T1243] bridge0: port 3(vlan0) entered blocking state [ 437.426451][ T1243] bridge0: port 3(vlan0) entered disabled state [ 437.433789][ T1243] bridge0: port 3(vlan0) entered blocking state [ 437.440177][ T1243] bridge0: port 3(vlan0) entered forwarding state [ 437.514249][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12180'. [ 437.543817][ T1254] netlink: 'syz.0.12180': attribute type 30 has an invalid length. [ 437.663853][ T1281] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12187'. [ 437.739300][ T1290] loop0: detected capacity change from 0 to 512 [ 437.760824][ T1290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.783560][ T1290] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.829911][T32065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.975249][ T1202] kexec: Could not allocate control_code_buffer [ 438.380933][ T1323] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 438.394554][ T1323] FAT-fs (loop6): Filesystem has been set read-only [ 438.403465][ T1323] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 438.679555][ T1344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.965939][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.039714][ T28] kauditd_printk_skb: 299 callbacks suppressed [ 439.039727][ T28] audit: type=1326 audit(2000000245.701:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.3.12219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 439.073947][ T28] audit: type=1326 audit(2000000245.731:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.3.12219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 439.107621][ T28] audit: type=1326 audit(2000000245.731:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.3.12219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 439.139143][ T28] audit: type=1326 audit(2000000245.731:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.3.12219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 439.182631][ T28] audit: type=1400 audit(2000000245.841:3761): avc: denied { create } for pid=1372 comm="syz.6.12223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.221739][ T28] audit: type=1400 audit(2000000245.861:3762): avc: denied { setopt } for pid=1372 comm="syz.6.12223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.258508][ T28] audit: type=1400 audit(2000000245.861:3763): avc: denied { bind } for pid=1372 comm="syz.6.12223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.620166][ T1397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12244'. [ 439.636903][ T28] audit: type=1326 audit(2000000246.291:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.6.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 439.637048][ T1397] netlink: 'syz.3.12244': attribute type 30 has an invalid length. [ 439.661322][ T28] audit: type=1326 audit(2000000246.291:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.6.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 439.698821][ T28] audit: type=1326 audit(2000000246.291:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1393 comm="syz.6.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 440.277080][ T3689] Bluetooth: hci0: Frame reassembly failed (-84) [ 440.543123][ T1447] set_capacity_and_notify: 2 callbacks suppressed [ 440.543153][ T1447] loop6: detected capacity change from 0 to 2048 [ 440.580503][ T1447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.604608][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.664612][ T1453] loop6: detected capacity change from 0 to 8192 [ 440.880333][ T1468] loop3: detected capacity change from 0 to 128 [ 440.888137][ T1468] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.982907][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12265'. [ 441.297164][ T1491] SELinux: ebitmap: truncated map [ 441.303427][ T1491] SELinux: failed to load policy [ 441.636858][ T1505] Process accounting paused [ 442.349385][ T7485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 442.351779][T28084] Bluetooth: hci0: command 0x1003 tx timeout [ 442.364935][ T1435] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 442.380475][ T1547] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.12293'. [ 442.858823][ T3689] Bluetooth: hci0: Frame reassembly failed (-84) [ 443.399308][ T1606] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.406534][ T1606] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.537647][ T1608] SELinux: failed to load policy [ 443.682379][ T1614] loop3: detected capacity change from 0 to 256 [ 443.697428][ T1617] serio: Serial port ptm1 [ 443.703026][ T1618] loop9: detected capacity change from 0 to 128 [ 443.913949][ T1630] netlink: 'syz.3.12336': attribute type 83 has an invalid length. [ 444.022792][ T1641] SELinux: failed to load policy [ 444.037034][ T1647] loop9: detected capacity change from 0 to 1024 [ 444.044728][ T1647] EXT4-fs: Ignoring removed orlov option [ 444.050917][ T1647] EXT4-fs: Ignoring removed bh option [ 444.060305][ T1647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.091227][ T1647] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 444.121534][ T528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.778911][ T1682] loop5: detected capacity change from 0 to 512 [ 444.792012][ T1682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.817206][ T1682] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.872241][ T1680] SELinux: failed to load policy [ 444.909518][ T7485] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 444.918254][ T1579] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 445.225687][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.295778][ T1701] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12357'. [ 445.319258][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 445.319269][ T28] audit: type=1400 audit(2000000251.981:3769): avc: denied { listen } for pid=1702 comm="syz.9.12369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 445.362613][ T1705] loop6: detected capacity change from 0 to 164 [ 445.390645][ T1705] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 445.401987][ T1705] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 445.410751][ T1705] rock: directory entry would overflow storage [ 445.416927][ T1705] rock: sig=0x4f50, size=4, remaining=3 [ 445.436615][ T1705] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 445.475880][ T1708] loop0: detected capacity change from 0 to 512 [ 445.493624][ T1708] EXT4-fs: Ignoring removed oldalloc option [ 445.520109][ T1708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 445.592558][ T1708] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.12361: bad orphan inode 131083 [ 445.620795][ T1708] loop0: lost filesystem error report for type 5 error -117 [ 445.621318][ T1708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.713552][T32065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.752986][ T28] audit: type=1400 audit(2000000252.411:3770): avc: denied { bind } for pid=1719 comm="syz.6.12364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 445.816921][ T1718] SELinux: failed to load policy [ 445.850021][ T28] audit: type=1400 audit(2000000252.511:3771): avc: denied { ioctl } for pid=1728 comm="syz.6.12370" path="socket:[109224]" dev="sockfs" ino=109224 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 446.046130][ T1741] loop0: detected capacity change from 0 to 164 [ 446.065242][ T1741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 446.076129][ T1741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 446.085531][ T1741] rock: directory entry would overflow storage [ 446.093023][ T1741] rock: sig=0x4f50, size=4, remaining=3 [ 446.099423][ T1741] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 446.197473][ T1747] loop0: detected capacity change from 0 to 8192 [ 446.208705][ T1747] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.305056][ T1751] loop9: detected capacity change from 0 to 1024 [ 446.311442][ T1753] loop5: detected capacity change from 0 to 512 [ 446.318164][ T1753] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 446.337285][ T1753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 446.353626][ T1751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.353813][ T1753] EXT4-fs (loop5): orphan cleanup on readonly fs [ 446.372484][ T1753] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.12379: bad orphan inode 3 [ 446.390787][ T1753] loop5: lost filesystem error report for type 5 error -117 [ 446.398831][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 446.412566][ C1] EXT4-fs (loop5): initial error at time 2000000253: ext4_orphan_get:1417 [ 446.421105][ C1] EXT4-fs (loop5): last error at time 2000000253: ext4_orphan_get:1417 [ 446.431030][ T1753] EXT4-fs (loop5): Remounting filesystem read-only [ 446.444663][ T1753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 446.482743][ T1753] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.12379: dx entry: limit 0 != root limit 125 [ 446.495170][ T1753] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.12379: Corrupt directory, running e2fsck is recommended [ 446.535385][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 446.545090][ T528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.608873][ T1770] loop9: detected capacity change from 0 to 256 [ 446.616498][ T1770] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 446.642119][ T1770] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.965278][ T1802] loop3: detected capacity change from 0 to 512 [ 446.975639][ T1802] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 446.986003][ T1802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 446.994670][ T1802] EXT4-fs (loop3): orphan cleanup on readonly fs [ 447.002008][ T1802] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.12402: bad orphan inode 3 [ 447.012199][ T1802] loop3: lost filesystem error report for type 5 error -117 [ 447.012452][ T1802] EXT4-fs (loop3): Remounting filesystem read-only [ 447.019779][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 447.019797][ C0] EXT4-fs (loop3): initial error at time 2000000253: ext4_orphan_get:1417 [ 447.019839][ C0] EXT4-fs (loop3): last error at time 2000000253: ext4_orphan_get:1417 [ 447.051842][ T1802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 447.068423][ T1802] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.12402: dx entry: limit 0 != root limit 125 [ 447.080603][ T1802] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.12402: Corrupt directory, running e2fsck is recommended [ 447.105213][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 447.296878][ T1820] loop9: detected capacity change from 0 to 512 [ 447.314452][ T1820] EXT4-fs: Ignoring removed oldalloc option [ 447.324743][ T1820] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.12410: invalid block [ 447.337218][ T1820] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 447.337609][ T1820] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.12410: invalid indirect mapped block 4294967295 (level 1) [ 447.346779][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 447.346800][ C0] EXT4-fs (loop9): initial error at time 2000000253: ext4_get_branch:178: inode 11: block 4294967295 [ 447.346830][ C0] EXT4-fs (loop9): last error at time 2000000253: ext4_get_branch:178: inode 11: block 4294967295 [ 447.391654][ T1820] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 447.391853][ T1820] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.12410: invalid indirect mapped block 4294967295 (level 1) [ 447.415744][ T1820] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 447.415940][ T1820] EXT4-fs (loop9): 2 truncates cleaned up [ 447.431939][ T1820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.459035][ T528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.769723][ T1844] loop6: detected capacity change from 0 to 512 [ 447.778338][ T1844] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 447.792818][ T1844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 447.803280][ T1844] EXT4-fs (loop6): orphan cleanup on readonly fs [ 447.807152][ T1849] loop9: detected capacity change from 0 to 512 [ 447.810775][ T1844] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.12419: bad orphan inode 3 [ 447.826752][ T1844] loop6: lost filesystem error report for type 5 error -117 [ 447.826902][ T1844] EXT4-fs (loop6): Remounting filesystem read-only [ 447.834218][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 447.834239][ C1] EXT4-fs (loop6): initial error at time 2000000254: ext4_orphan_get:1417 [ 447.834263][ C1] EXT4-fs (loop6): last error at time 2000000254: ext4_orphan_get:1417 [ 447.834894][ T1849] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 447.841837][ T1844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 447.853450][ T1849] EXT4-fs (loop9): 1 truncate cleaned up [ 447.877656][ T1844] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.12419: dx entry: limit 0 != root limit 125 [ 447.899311][ T1849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.905043][ T1844] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.12419: Corrupt directory, running e2fsck is recommended [ 447.931023][ T1849] EXT4-fs error (device loop9): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.9.12421: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 447.952071][ T28] audit: type=1400 audit(2000000254.591:3772): avc: denied { rename } for pid=1848 comm="syz.9.12421" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.974870][ T1849] EXT4-fs (loop9): Remounting filesystem read-only [ 447.975074][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 447.981453][ T1849] EXT4-fs warning (device loop9): ext4_rename_delete:3729: inode #2: comm syz.9.12421: Deleting old file: nlink 5, error=-117 [ 448.018778][ T28] audit: type=1400 audit(2000000254.671:3773): avc: denied { create } for pid=1848 comm="syz.9.12421" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 448.044069][ T528] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.281939][ T1864] loop3: detected capacity change from 0 to 1024 [ 448.290098][ T1864] EXT4-fs: inline encryption not supported [ 448.295907][ T1864] EXT4-fs: Ignoring removed nobh option [ 448.306641][ T1864] EXT4-fs: Ignoring removed nobh option [ 448.312472][ T1864] EXT4-fs: Ignoring removed bh option [ 448.322298][ T1864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.337123][ T1864] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.12436: Allocating blocks 385-513 which overlap fs metadata [ 448.352056][ T1864] EXT4-fs (loop3): pa ffff8881075eff50: logic 16, phys. 129, len 24 [ 448.360160][ T1864] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 448.391531][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.568313][ T28] audit: type=1326 audit(2000000255.221:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.9.12431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc359d7c799 code=0x7ffc0000 [ 448.592899][ T28] audit: type=1326 audit(2000000255.221:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.9.12431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc359d7c799 code=0x7ffc0000 [ 448.617359][ T1883] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 448.626599][ T28] audit: type=1326 audit(2000000255.221:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.9.12431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fc359d7c799 code=0x7ffc0000 [ 448.651154][ T1883] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 448.659445][ T28] audit: type=1326 audit(2000000255.221:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.9.12431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc359d7c799 code=0x7ffc0000 [ 448.683129][ T28] audit: type=1326 audit(2000000255.221:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1880 comm="syz.9.12431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc359d7c799 code=0x7ffc0000 [ 448.715868][ T1883] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 448.813367][ T1883] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 448.858210][ T1883] System zones: 0-2, 18-18, 34-35 [ 448.874762][ T1883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.988923][T26803] bridge0: port 3(vlan0) entered disabled state [ 449.009895][T26803] bridge_slave_1: left allmulticast mode [ 449.016638][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.046012][T26803] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.054392][T26803] bridge_slave_0: left allmulticast mode [ 449.073080][T26803] bridge_slave_0: left promiscuous mode [ 449.085276][T26803] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.231875][T26803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.245154][T26803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.255294][T26803] bond0 (unregistering): Released all slaves [ 449.290582][T26803] tipc: Disabling bearer [ 449.295616][T26803] tipc: Left network mode [ 449.308625][T26803] hsr_slave_0: left promiscuous mode [ 449.321316][T26803] hsr_slave_1: left promiscuous mode [ 449.332843][T26803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.358956][T26803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.382895][T26803] veth1_macvtap: left promiscuous mode [ 449.388395][T26803] veth0_macvtap: left promiscuous mode [ 449.397975][T26803] veth1_vlan: left promiscuous mode [ 449.481429][T26803] team0 (unregistering): Port device team_slave_1 removed [ 449.495187][T26803] team0 (unregistering): Port device team_slave_0 removed [ 449.648905][ T1933] hsr0: entered allmulticast mode [ 449.654101][ T1933] hsr_slave_0: entered allmulticast mode [ 449.664651][ T1933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12453'. [ 449.700571][ T1933] hsr_slave_0: left promiscuous mode [ 449.710325][ T1933] hsr0 (unregistering): left allmulticast mode [ 449.728543][ T1937] SELinux: ebitmap: truncated map [ 449.735182][ T1937] SELinux: failed to load policy [ 449.783029][T26803] IPVS: stop unused estimator thread 0... [ 449.837516][ T1949] netlink: 'syz.0.12472': attribute type 25 has an invalid length. [ 449.849313][ T1949] netlink: 'syz.0.12472': attribute type 7 has an invalid length. [ 449.862351][ T1949] netlink: 'syz.0.12472': attribute type 2 has an invalid length. [ 450.287483][ T1979] SELinux: ebitmap: truncated map [ 450.316304][ T1979] SELinux: failed to load policy [ 450.344492][T26803] bridge_slave_1: left allmulticast mode [ 450.350220][T26803] bridge_slave_1: left promiscuous mode [ 450.355920][T26803] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.363563][T26803] bridge_slave_0: left allmulticast mode [ 450.369455][T26803] bridge_slave_0: left promiscuous mode [ 450.375134][T26803] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.490411][ T1986] 9p: Bad value for 'source' [ 450.527567][T26803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.537216][T26803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.549723][T26803] bond0 (unregistering): Released all slaves [ 450.592081][T26803] hsr_slave_0: left promiscuous mode [ 450.597846][T26803] hsr_slave_1: left promiscuous mode [ 450.603660][T26803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.611252][T26803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.618819][T26803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.626173][T26803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.637493][T26803] veth1_macvtap: left promiscuous mode [ 450.643170][T26803] veth0_macvtap: left promiscuous mode [ 450.648639][T26803] veth1_vlan: left promiscuous mode [ 450.654474][T26803] veth0_vlan: left promiscuous mode [ 450.766701][T26803] team0 (unregistering): Port device team_slave_1 removed [ 450.779019][T26803] team0 (unregistering): Port device team_slave_0 removed [ 450.840259][ T1997] netlink: 'syz.0.12479': attribute type 1 has an invalid length. [ 450.859767][ T1997] netlink: 'syz.0.12479': attribute type 2 has an invalid length. [ 450.983820][ T1983] chnl_net:caif_netlink_parms(): no params data found [ 451.067369][ T1983] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.078476][ T1983] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.085871][ T1983] bridge_slave_0: entered allmulticast mode [ 451.092872][ T2020] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 451.099129][ T1983] bridge_slave_0: entered promiscuous mode [ 451.109533][ T2020] SELinux: failed to load policy [ 451.109902][ T1983] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.123230][ T1983] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.130644][ T1983] bridge_slave_1: entered allmulticast mode [ 451.137282][ T1983] bridge_slave_1: entered promiscuous mode [ 451.154495][ T1983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.166074][ T1983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.175445][ T2031] set_capacity_and_notify: 2 callbacks suppressed [ 451.175515][ T2031] loop3: detected capacity change from 0 to 8192 [ 451.188306][ T1983] team0: Port device team_slave_0 added [ 451.197305][ T1983] team0: Port device team_slave_1 added [ 451.212291][ T1983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.219317][ T1983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.245578][ T1983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.256951][ T1983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.263935][ T1983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.289902][ T1983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.317119][ T1983] hsr_slave_0: entered promiscuous mode [ 451.323207][ T1983] hsr_slave_1: entered promiscuous mode [ 451.329057][ T1983] debugfs: 'hsr0' already exists in 'hsr' [ 451.334757][ T1983] Cannot create hsr debugfs directory [ 451.384055][ T1983] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.391182][ T1983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.398385][ T1983] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.405415][ T1983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.429039][ T1983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.439188][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.447450][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.472141][ T1983] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.481865][T26803] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.489065][T26803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.499680][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.506742][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.557208][ T1983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.636902][ T1983] veth0_vlan: entered promiscuous mode [ 451.646209][ T1983] veth1_vlan: entered promiscuous mode [ 451.660263][ T1983] veth0_macvtap: entered promiscuous mode [ 451.667375][ T1983] veth1_macvtap: entered promiscuous mode [ 451.677880][ T1983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.688208][ T1983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.738799][ T2064] loop6: detected capacity change from 0 to 512 [ 451.748572][ T2064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.760319][ T2064] EXT4-fs (loop6): orphan cleanup on readonly fs [ 451.767209][ T2064] EXT4-fs error (device loop6): ext4_quota_enable:7188: comm syz.6.12503: Bad quota inum: 2, type: 2 [ 451.778530][ T2064] loop6: lost filesystem error report for type 5 error -117 [ 451.778757][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 451.792461][ C1] EXT4-fs (loop6): last error at time 2000000258: ext4_quota_enable:7188 [ 451.802165][ T2064] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 451.821935][ T2064] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 451.829213][ T2064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.844349][ T2064] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 451.870142][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.383469][ T2081] 9p: Bad value for 'source' [ 452.485994][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 452.486008][ T28] audit: type=1400 audit(2000000259.141:3785): avc: denied { name_connect } for pid=2095 comm="syz.3.12499" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 452.533468][ T2102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12506'. [ 452.921158][ T2141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12525'. [ 452.998260][ T2151] loop2: detected capacity change from 0 to 4096 [ 453.010169][ T2151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.033574][ T2151] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.12514: corrupted inode contents [ 453.060639][ T2151] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.12514: mark_inode_dirty error [ 453.072428][ T2151] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.12514: corrupted inode contents [ 453.085174][ T2151] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.12514: mark_inode_dirty error [ 453.096736][ T2151] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.12514: corrupted inode contents [ 453.135556][ T2151] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.12514: mark_inode_dirty error [ 453.147133][ T2151] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.12514: corrupted inode contents [ 453.161103][ T2151] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.12514: mark_inode_dirty error [ 453.179997][ T2151] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 453.222980][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.497332][ T2195] loop3: detected capacity change from 0 to 256 [ 453.510807][ T2180] 9p: Bad value for 'source' [ 453.527805][ T2195] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 453.573232][ T2201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12534'. [ 453.587409][ T2200] loop0: detected capacity change from 0 to 512 [ 453.602272][ T2200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.618997][ T2201] team0: Port device team_slave_0 removed [ 453.625986][ T2200] EXT4-fs (loop0): orphan cleanup on readonly fs [ 453.634216][ T2200] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.12533: Bad quota inum: 2, type: 2 [ 453.652172][ T2200] loop0: lost filesystem error report for type 5 error -117 [ 453.652303][ T2200] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 453.659626][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 453.659644][ C1] EXT4-fs (loop0): last error at time 2000000260: ext4_quota_enable:7188 [ 453.707700][ T2200] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 453.721523][ T2200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.750369][ T2212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12539'. [ 453.781653][ T2200] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 453.865417][T32065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.965074][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12552'. [ 454.187421][ T2246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12549'. [ 454.211536][ T2246] team0: Port device team_slave_0 removed [ 454.556838][ T2253] 9p: Bad value for 'source' [ 454.981428][ T28] audit: type=1400 audit(2000000261.641:3786): avc: denied { attach_queue } for pid=2258 comm="syz.0.12555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 455.005587][ T2261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12554'. [ 455.025254][ T2263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12565'. [ 455.061357][ T2266] xt_hashlimit: size too large, truncated to 1048576 [ 455.100375][ T28] audit: type=1326 audit(2000000261.761:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.166797][ T28] audit: type=1326 audit(2000000261.761:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.195712][ T28] audit: type=1326 audit(2000000261.761:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.230680][ T28] audit: type=1326 audit(2000000261.761:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.255339][ T28] audit: type=1326 audit(2000000261.791:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.282739][ T28] audit: type=1326 audit(2000000261.791:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.306540][ T28] audit: type=1326 audit(2000000261.791:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.330856][ T28] audit: type=1326 audit(2000000261.791:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2269 comm="syz.0.12558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d88ddc799 code=0x7ffc0000 [ 455.446986][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12566'. [ 455.490440][ T2290] team0: Port device team_slave_0 removed [ 455.620083][ T2305] syzkaller1: entered promiscuous mode [ 455.634220][ T2305] syzkaller1: entered allmulticast mode [ 455.934949][ T2322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12590'. [ 456.081855][ T2334] loop5: detected capacity change from 0 to 128 [ 456.362537][ T2342] netlink: 'syz.5.12587': attribute type 39 has an invalid length. [ 456.372414][ T2341] xt_hashlimit: size too large, truncated to 1048576 [ 456.733180][ T2349] loop2: detected capacity change from 0 to 128 [ 456.735167][ T2348] Invalid argument reading file caps for ./file0 [ 456.742771][ T2349] vfat: Unknown parameter ']P:t#+QhP;RK}Ts;Sz?&\n[Jv7t@ vVTBC*L~' [ 456.787968][ T2350] team_slave_0 (unregistering): left promiscuous mode [ 456.794977][ T2350] team_slave_0 (unregistering): left allmulticast mode [ 456.796085][ T2349] SELinux: failed to load policy [ 456.809212][ T2350] team0: Port device team_slave_0 removed [ 456.900576][ T2336] Process accounting paused [ 457.050803][ T2378] loop3: detected capacity change from 0 to 128 [ 457.074521][ T2378] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 457.099235][ T3709] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 457.108510][ T3709] FAT-fs (loop3): Filesystem has been set read-only [ 457.119956][ T3709] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 457.128602][ T2384] loop6: detected capacity change from 0 to 164 [ 457.157126][ T2384] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 457.231663][ T2391] loop6: detected capacity change from 0 to 512 [ 457.275915][ T2393] xt_hashlimit: size too large, truncated to 1048576 [ 457.286784][ T2395] loop0: detected capacity change from 0 to 512 [ 457.291636][ T2397] loop5: detected capacity change from 0 to 512 [ 457.304575][ T2397] EXT4-fs: Ignoring removed oldalloc option [ 457.328161][ T2395] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.12612: invalid indirect mapped block 256 (level 2) [ 457.329220][ T2397] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.12622: invalid indirect mapped block 4294967295 (level 1) [ 457.348803][ T2395] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 457.355817][ T2397] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 457.355908][ T2395] EXT4-fs (loop0): 2 truncates cleaned up [ 457.364939][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 457.364974][ C0] EXT4-fs (loop0): initial error at time 2000000264: ext4_free_branches:1023: inode 11 [ 457.365004][ C0] EXT4-fs (loop0): last error at time 2000000264: ext4_free_branches:1023: inode 11 [ 457.365430][ T2397] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.12622: invalid indirect mapped block 4294967295 (level 1) [ 457.379907][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 457.379926][ C1] EXT4-fs (loop5): initial error at time 2000000264: ext4_free_branches:1023: inode 11 [ 457.379954][ C1] EXT4-fs (loop5): last error at time 2000000264: ext4_free_branches:1023: inode 11 [ 457.383643][ T2395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.386552][ T2397] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 457.460622][ T2397] EXT4-fs (loop5): 2 truncates cleaned up [ 457.461533][T32065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.470322][ T2397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.517876][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.519309][ T2403] loop0: detected capacity change from 0 to 128 [ 458.396606][ T2420] loop2: detected capacity change from 0 to 512 [ 458.406073][ T2423] loop6: detected capacity change from 0 to 512 [ 458.414137][ T2420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 458.433249][ T2420] EXT4-fs (loop2): 1 truncate cleaned up [ 458.442534][ T2420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.443835][ T2423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.468733][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.484719][ T2423] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.522358][T31237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.540992][ T2433] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 458.585973][ T2440] loop2: detected capacity change from 0 to 764 [ 458.769392][ T2452] syzkaller1: entered promiscuous mode [ 458.775014][ T2452] syzkaller1: entered allmulticast mode [ 458.864675][ T2456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.901117][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.945723][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 458.945736][ T28] audit: type=1400 audit(2000000265.601:3806): avc: denied { read } for pid=2461 comm="syz.5.12637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 459.112603][ T2470] __nla_validate_parse: 5 callbacks suppressed [ 459.112625][ T2470] netlink: 104 bytes leftover after parsing attributes in process `syz.5.12641'. [ 459.469540][ T28] audit: type=1326 audit(2000000266.131:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2493 comm="syz.6.12660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f244633c799 code=0x0 [ 459.541344][ T2499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.621779][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.172569][ T28] audit: type=1400 audit(2000000266.831:3808): avc: denied { append } for pid=2572 comm="syz.0.12688" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 460.198042][ T28] audit: type=1400 audit(2000000266.861:3809): avc: denied { map } for pid=2572 comm="syz.0.12688" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 460.244175][ T28] audit: type=1400 audit(2000000266.861:3810): avc: denied { execute } for pid=2572 comm="syz.0.12688" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 460.339864][ T2578] geneve2: entered promiscuous mode [ 460.379773][ T2584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.402578][ T2584] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.416982][ T28] audit: type=1400 audit(2000000267.081:3811): avc: denied { create } for pid=2583 comm="syz.5.12692" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 460.431885][ T2584] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.12692: corrupted inode contents [ 460.452438][ T2584] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.12692: mark_inode_dirty error [ 460.465872][ T2584] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.12692: corrupted inode contents [ 460.478273][ T2584] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12692: mark_inode_dirty error [ 460.484098][ T2595] EXT4-fs (loop5): shut down requested (2) [ 460.498978][ T2596] EXT4-fs: inline encryption not supported [ 460.505364][ T2596] EXT4-fs: Ignoring removed bh option [ 460.527633][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.546219][ T2596] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 460.561644][ T2596] EXT4-fs (loop0): Remounting filesystem read-only [ 460.658166][ T2615] serio: Serial port ptm0 [ 460.668842][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12707'. [ 460.678932][ T28] audit: type=1326 audit(2000000267.321:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2619 comm="syz.6.12707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 460.702949][ T28] audit: type=1326 audit(2000000267.321:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2619 comm="syz.6.12707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 460.729515][ T28] audit: type=1326 audit(2000000267.321:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2619 comm="syz.6.12707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 460.731729][ T2625] syzkaller1: entered promiscuous mode [ 460.753655][ T28] audit: type=1326 audit(2000000267.361:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2619 comm="syz.6.12707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244633c799 code=0x7ffc0000 [ 460.759150][ T2625] syzkaller1: entered allmulticast mode [ 461.020823][ T2640] EXT4-fs (loop3): shut down requested (1) [ 461.030548][ T2640] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 461.039465][ T2640] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 461.157122][ T2654] batadv_slave_1: Caught tx_queue_len zero misconfig [ 461.165543][ T2654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12721'. [ 461.192468][ T2658] EXT4-fs: Ignoring removed oldalloc option [ 461.209643][ T2660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.220190][ T2664] syzkaller1: entered promiscuous mode [ 461.225808][ T2664] syzkaller1: entered allmulticast mode [ 461.230118][ T2658] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 461.252205][ T2663] lo: Caught tx_queue_len zero misconfig [ 461.257826][ T2663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 461.507099][ T2687] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.988422][ T2721] syzkaller1: entered promiscuous mode [ 461.997498][ T2721] syzkaller1: entered allmulticast mode [ 462.194201][ T2738] set_capacity_and_notify: 9 callbacks suppressed [ 462.194232][ T2738] loop6: detected capacity change from 0 to 512 [ 462.210054][ T2738] EXT4-fs: Ignoring removed i_version option [ 462.220463][ T2738] EXT4-fs: Ignoring removed bh option [ 462.252572][ T2738] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.571253][ T2773] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 462.579372][ T2771] loop3: detected capacity change from 0 to 512 [ 462.587722][ T2775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12771'. [ 462.639256][ T2771] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.649804][ T2785] loop5: detected capacity change from 0 to 1024 [ 462.785658][ T2802] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 462.997174][ T2836] loop6: detected capacity change from 0 to 128 [ 463.043192][ T2841] syzkaller1: entered promiscuous mode [ 463.048662][ T2841] syzkaller1: entered allmulticast mode [ 463.081333][ T2843] loop6: detected capacity change from 0 to 512 [ 463.098064][ T2843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.132009][ T2843] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.251244][ T3689] Bluetooth: hci0: Frame reassembly failed (-84) [ 463.498758][ T2887] batadv_slave_0: Caught tx_queue_len zero misconfig [ 463.564609][ T2891] ref_ctr_offset mismatch. inode: 0x835 offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 463.690226][ T2906] bridge_slave_1: Caught tx_queue_len zero misconfig [ 463.724734][ T2911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12829'. [ 463.749045][ T2911] vlan1: entered allmulticast mode [ 463.762060][ T2911] bridge0: port 4(vlan1) entered blocking state [ 463.768347][ T2911] bridge0: port 4(vlan1) entered disabled state [ 463.775379][ T2911] vlan1: entered promiscuous mode [ 463.984096][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 463.984112][ T28] audit: type=1326 audit(2000000270.640:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.032666][ T28] audit: type=1326 audit(2000000270.680:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.057034][ T28] audit: type=1326 audit(2000000270.680:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.081215][ T28] audit: type=1326 audit(2000000270.680:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.105053][ T28] audit: type=1326 audit(2000000270.680:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.130045][ T28] audit: type=1326 audit(2000000270.680:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.155468][ T28] audit: type=1326 audit(2000000270.710:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.179239][ T28] audit: type=1326 audit(2000000270.710:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.203958][ T28] audit: type=1326 audit(2000000270.710:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.242388][ T28] audit: type=1326 audit(2000000270.710:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.3.12838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcaa7ecc799 code=0x7ffc0000 [ 464.273790][ T2948] loop5: detected capacity change from 0 to 512 [ 464.290850][ T2948] EXT4-fs mount: 16 callbacks suppressed [ 464.290864][ T2948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.309800][ T2948] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.323793][ T2948] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.12842: corrupted inode contents [ 464.335887][ T2948] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.12842: mark_inode_dirty error [ 464.350227][ T2948] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.12842: corrupted inode contents [ 464.363700][ T2948] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.12842: mark_inode_dirty error [ 464.398113][ T2955] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.12842: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 464.398113][ T2955] [ 464.447370][T20945] IPVS: starting estimator thread 0... [ 464.468460][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.500311][ T2972] loop5: detected capacity change from 0 to 4096 [ 464.512566][ T2972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.536680][ T2972] EXT4-fs (loop5): shut down requested (1) [ 464.548884][ T2965] IPVS: using max 2448 ests per chain, 122400 per kthread [ 464.562051][T29579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.600512][ T2982] loop3: detected capacity change from 0 to 512 [ 464.609388][ T2982] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.12856: corrupted in-inode xattr: invalid ea_ino [ 464.623022][ T2982] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.623294][ T2982] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.12856: couldn't read orphan inode 15 (err -117) [ 464.632524][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 464.632542][ C0] EXT4-fs (loop3): initial error at time 2000000271: ext4_iget_extra_inode:5025: inode 15 [ 464.632567][ C0] EXT4-fs (loop3): last error at time 2000000271: ext4_iget_extra_inode:5025: inode 15 [ 464.644694][ T2978] 9pnet: p9_errstr2errno: server reported unknown error [ 464.652403][ T2982] loop3: lost filesystem error report for type 5 error -117 [ 464.678306][ T2982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.722617][T29804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.731846][ T2993] loop5: detected capacity change from 0 to 128 [ 464.762313][ T2996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12860'. [ 464.819096][ T3005] syzkaller1: entered promiscuous mode [ 464.824573][ T3005] syzkaller1: entered allmulticast mode [ 464.957350][ T3027] bond0: entered promiscuous mode [ 464.962492][ T3027] bond_slave_0: entered promiscuous mode [ 464.968305][ T3027] bond_slave_1: entered promiscuous mode [ 464.975458][ T3027] batadv0: entered promiscuous mode [ 464.981335][ T3027] debugfs: 'hsr0' already exists in 'hsr' [ 464.987090][ T3027] Cannot create hsr debugfs directory [ 464.992724][ T3027] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 465.001440][ T3027] bond0: left promiscuous mode [ 465.006267][ T3027] bond_slave_0: left promiscuous mode [ 465.012346][ T3027] bond_slave_1: left promiscuous mode [ 465.018498][ T3027] batadv0: left promiscuous mode [ 465.193692][ T3051] netlink: 'syz.0.12882': attribute type 8 has an invalid length. [ 465.201632][ T3051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12882'. [ 465.308855][T28084] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 465.308965][ T7485] ================================================================== [ 465.322999][ T7485] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 465.329573][ T7485] [ 465.331873][ T7485] write to 0xffffffff86c80330 of 8 bytes by task 28084 on cpu 0: [ 465.339565][ T7485] data_alloc+0x31c/0x390 [ 465.343878][ T7485] prb_reserve+0x8d7/0xae0 [ 465.348278][ T7485] vprintk_store+0x54a/0x910 [ 465.352845][ T7485] vprintk_emit+0x1a4/0x600 [ 465.357325][ T7485] vprintk_default+0x26/0x30 [ 465.361898][ T7485] vprintk+0x1d/0x30 [ 465.365770][ T7485] _printk+0x79/0xa0 [ 465.369639][ T7485] bt_err+0xa7/0xd0 [ 465.373420][ T7485] hci_dev_open_sync+0xfa4/0x2290 [ 465.378421][ T7485] hci_power_on+0xef/0x390 [ 465.382812][ T7485] process_scheduled_works+0x4de/0x9e0 [ 465.388251][ T7485] worker_thread+0x581/0x770 [ 465.392825][ T7485] kthread+0x22a/0x280 [ 465.396868][ T7485] ret_from_fork+0x150/0x360 [ 465.401437][ T7485] ret_from_fork_asm+0x1a/0x30 [ 465.406183][ T7485] [ 465.408484][ T7485] read to 0xffffffff86c80330 of 8 bytes by task 7485 on cpu 1: [ 465.416000][ T7485] prb_reserve+0x207/0xae0 [ 465.420398][ T7485] vprintk_store+0x54a/0x910 [ 465.424965][ T7485] vprintk_emit+0x1a4/0x600 [ 465.429448][ T7485] vprintk_default+0x26/0x30 [ 465.434039][ T7485] vprintk+0x1d/0x30 [ 465.437911][ T7485] _printk+0x79/0xa0 [ 465.441780][ T7485] bt_err+0xa7/0xd0 [ 465.445560][ T7485] hci_cmd_timeout+0x97/0x140 [ 465.450212][ T7485] process_scheduled_works+0x4de/0x9e0 [ 465.455651][ T7485] worker_thread+0x581/0x770 [ 465.460219][ T7485] kthread+0x22a/0x280 [ 465.464261][ T7485] ret_from_fork+0x150/0x360 [ 465.468849][ T7485] ret_from_fork_asm+0x1a/0x30 [ 465.473610][ T7485] [ 465.475908][ T7485] value changed: 0x000000000000eb48 -> 0x00000000000c88f8 [ 465.482984][ T7485] [ 465.485292][ T7485] Reported by Kernel Concurrency Sanitizer on: [ 465.491417][ T7485] CPU: 1 UID: 0 PID: 7485 Comm: kworker/u9:2 Tainted: G W syzkaller #0 PREEMPT(full) [ 465.502415][ T7485] Tainted: [W]=WARN [ 465.506189][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.516220][ T7485] Workqueue: hci0 hci_cmd_timeout [ 465.521226][ T7485] ================================================================== [ 465.308838][ T7485] Bluetooth: hci0: command 0x1003 tx timeout [ 466.190692][ T3489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.390353][ T3489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration