last executing test programs: 6m3.937615076s ago: executing program 32 (id=462): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 5m44.949864689s ago: executing program 33 (id=1030): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb) 4m42.455866501s ago: executing program 34 (id=2471): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 3m46.103843313s ago: executing program 35 (id=4131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f00000000000c000500000000000000000008000200", @ANYRES32=r2], 0x30}, 0x4, 0x700000000000000}, 0x0) 3m46.070826425s ago: executing program 36 (id=4136): r0 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r0, r1, 0x0, 0x0, 0x1000) 3m40.714918764s ago: executing program 37 (id=4218): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r0, 0x0) r1 = syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0xb350, 0x800, 0x5, 0x10039}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1) 3m39.087863891s ago: executing program 38 (id=4243): r0 = syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 2m56.776077869s ago: executing program 39 (id=5071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)='}', 0x1}], 0x1}, 0xfffe) 2m44.792695354s ago: executing program 40 (id=5877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r1, 0x9}, 0xc) 2m34.132149098s ago: executing program 41 (id=6245): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000000c0)=""/128, 0x80) 2m26.839324516s ago: executing program 42 (id=5989): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2m19.137572791s ago: executing program 8 (id=6633): io_setup(0x800, &(0x7f0000000440)=0x0) r1 = eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}]) 2m19.03508006s ago: executing program 8 (id=6638): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) 2m18.770890486s ago: executing program 8 (id=6645): socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x2000c050) 2m18.731673488s ago: executing program 8 (id=6647): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 2m18.694129291s ago: executing program 8 (id=6650): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.580790528s ago: executing program 8 (id=6652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffff5b20, @private0, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2m18.565471085s ago: executing program 43 (id=6652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffff5b20, @private0, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2m8.345025928s ago: executing program 0 (id=7001): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2m8.184632276s ago: executing program 0 (id=7008): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 2m8.143058897s ago: executing program 0 (id=7011): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES16=r0], 0x15) 2m8.012939641s ago: executing program 0 (id=7016): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000880)='./file0\x00') 2m8.01282703s ago: executing program 0 (id=7017): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000540)={0x0, 0x800ce90, 0x10, 0x3, 0x40014333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2000002, @rand_addr=' \x01\x00', 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m7.891956246s ago: executing program 0 (id=7021): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xffffffffffffff08, [@ptr, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x8000001}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) chmod(&(0x7f00000000c0)='./file1/file0\x00', 0x2) 2m7.875860893s ago: executing program 44 (id=7021): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xffffffffffffff08, [@ptr, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x8000001}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) chmod(&(0x7f00000000c0)='./file1/file0\x00', 0x2) 2m4.134437052s ago: executing program 1 (id=7068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0x5, 0xffff}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) 2m4.096442865s ago: executing program 1 (id=7070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) 2m4.055080226s ago: executing program 1 (id=7072): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) futimesat(r0, 0x0, &(0x7f0000000100)) 2m3.645841194s ago: executing program 1 (id=7074): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000880)='./file0\x00') 2m3.53126629s ago: executing program 1 (id=7077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.381613439s ago: executing program 1 (id=7080): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 2m3.303021284s ago: executing program 45 (id=7080): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 1m25.443244481s ago: executing program 9 (id=8047): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x8000) 1m25.365937086s ago: executing program 9 (id=8050): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noauto_da_alloc}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) 1m25.04615639s ago: executing program 9 (id=8059): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @local}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000040)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 1m24.989173519s ago: executing program 9 (id=8061): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m24.942383589s ago: executing program 9 (id=8066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000800) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) 1m24.745053249s ago: executing program 9 (id=8068): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) close(r1) close(r2) 1m24.716942613s ago: executing program 46 (id=8068): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) close(r1) close(r2) 45.731278153s ago: executing program 4 (id=9096): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100), 0xb, 0x42f, &(0x7f0000000940)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x34a8) 45.648696095s ago: executing program 4 (id=9089): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r2, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106000f00"], 0x40}}, 0x0) 45.505094136s ago: executing program 4 (id=9093): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r0, &(0x7f00000000c0)="818f3d69", 0x4) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x80000000) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x2, 0x6, 0x2, 0x0, 0x12000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 45.358910836s ago: executing program 4 (id=9100): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 45.284845692s ago: executing program 4 (id=9102): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x64}, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x41) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="8d", 0x1}], 0x1}, 0x0) close(r0) 45.152574604s ago: executing program 4 (id=9108): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r0, 0x1}, 0x20) 45.152444944s ago: executing program 47 (id=9108): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r0, 0x1}, 0x20) 2.196663617s ago: executing program 7 (id=10144): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 2.024533122s ago: executing program 6 (id=10148): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 1.947019156s ago: executing program 6 (id=10151): r0 = epoll_create(0xf) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x30000001}) read$watch_queue(r1, &(0x7f0000004280)=""/144, 0x90) pselect6(0x40, &(0x7f0000000700)={0x1e, 0x2f, 0x7, 0x800, 0x2000000000000000, 0xfffffffffffffffb, 0x7ffd, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) 1.807356138s ago: executing program 6 (id=10154): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 1.696559585s ago: executing program 6 (id=10157): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2}}}}) 1.662187348s ago: executing program 2 (id=10158): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1.662020578s ago: executing program 6 (id=10159): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x140) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x2000004, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.477028811s ago: executing program 7 (id=10160): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000200080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 1.393771314s ago: executing program 2 (id=10161): r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) cachestat(r0, &(0x7f0000000040)={0x8, 0x12decca3}, &(0x7f0000000080), 0x0) 1.355811826s ago: executing program 3 (id=10164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84150da0d1787cc10d2", 0x22}], 0x3) 1.308909656s ago: executing program 7 (id=10165): r0 = syz_io_uring_setup(0x55fa, &(0x7f0000000540)={0x0, 0x7a7, 0x10100, 0x0, 0x37}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x50, 0x0, r4, 0x0, &(0x7f0000000000)="bd", 0x1, 0x100, 0x1}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, 0x0, 0x0) 1.296843254s ago: executing program 7 (id=10167): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x22, &(0x7f0000000340)=[{&(0x7f0000000580)=""/233, 0xe9}], 0x1) r0 = io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0xd59b, 0x8, 0x5, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1.201065865s ago: executing program 7 (id=10170): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x700}], 0x1, 0x0, 0x0, 0x0) 1.200543945s ago: executing program 3 (id=10171): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x6}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @local, 0x9}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x4008850) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1.059122216s ago: executing program 2 (id=10172): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 1.022739528s ago: executing program 2 (id=10173): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) timer_delete(r0) 941.260622ms ago: executing program 2 (id=10175): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 760.865075ms ago: executing program 6 (id=10179): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x1000) 760.693545ms ago: executing program 5 (id=10180): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 740.871291ms ago: executing program 5 (id=10181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x34, r1, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4896) 702.537143ms ago: executing program 5 (id=10182): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 694.641812ms ago: executing program 3 (id=10183): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 542.97534ms ago: executing program 3 (id=10184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000"], 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f0000000700), 0x0}, 0x20) 415.814375ms ago: executing program 5 (id=10185): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 344.818341ms ago: executing program 3 (id=10186): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 190.164299ms ago: executing program 5 (id=10187): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 23.247235ms ago: executing program 7 (id=10188): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x102, 0x0) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 21.076425ms ago: executing program 5 (id=10198): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) mount$cgroup(0x0, 0x0, 0x0, 0x2000080, &(0x7f0000000140)={[{@xattr}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 13.314693ms ago: executing program 3 (id=10189): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb18000000000000, 0x54a623}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8990, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5, priority 17 [ 345.526404][T17139] EXT4-fs (loop6): Free/Dirty block details [ 345.551762][T17139] EXT4-fs (loop6): free_blocks=0 [ 345.563905][T25033] loop3: detected capacity change from 0 to 1024 [ 345.572555][T17139] EXT4-fs (loop6): dirty_blocks=6655 [ 345.598715][T17139] EXT4-fs (loop6): Block reservation details [ 345.614728][T17139] EXT4-fs (loop6): i_reserved_data_blocks=6655 [ 345.621761][T25033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.644789][T25033] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.8566: corrupted xattr block 113: invalid header [ 345.670663][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.671655][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8569'. [ 345.688758][T25043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8569'. [ 345.783124][T25051] syzkaller1: entered promiscuous mode [ 345.790827][T25051] syzkaller1: entered allmulticast mode [ 345.818384][T17143] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 345.915265][T25057] loop2: detected capacity change from 0 to 512 [ 345.938676][T25057] EXT4-fs: inline encryption not supported [ 345.952945][T25057] EXT4-fs: Ignoring removed i_version option [ 345.960577][T25057] EXT4-fs (loop2): 1 orphan inode deleted [ 345.967182][T25057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.986429][ T28] audit: type=1400 audit(2000001010.255:1693): avc: denied { watch_reads } for pid=25056 comm="syz.2.8577" path="/534/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.025386][T25061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8578'. [ 346.044707][T25061] bond0: entered promiscuous mode [ 346.046340][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.049795][T25061] bond_slave_0: entered promiscuous mode [ 346.064757][T25061] bond_slave_1: entered promiscuous mode [ 346.072332][T25061] bond0: left promiscuous mode [ 346.077254][T25061] bond_slave_0: left promiscuous mode [ 346.082840][T25061] bond_slave_1: left promiscuous mode [ 346.269080][T25080] loop2: detected capacity change from 0 to 512 [ 346.280167][T25080] EXT4-fs: Ignoring removed oldalloc option [ 346.287176][T25080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.305262][T25080] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.8586: iget: bad i_size value: 38620345925642 [ 346.321233][T25080] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 346.321474][T25080] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8586: couldn't read orphan inode 15 (err -117) [ 346.330939][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 346.330978][ C0] EXT4-fs (loop2): initial error at time 2000001010: ext4_orphan_get:1391: inode 15 [ 346.331008][ C0] EXT4-fs (loop2): last error at time 2000001010: ext4_orphan_get:1391: inode 15 [ 346.370522][T25080] loop2: lost filesystem error report for type 5 error -117 [ 346.376048][T25080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.480108][T25091] loop3: detected capacity change from 0 to 512 [ 346.511828][ T35] tipc: Node number set to 2574051434 [ 346.534694][T25091] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8591: invalid indirect mapped block 256 (level 2) [ 346.580715][T25091] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 346.581061][T25091] EXT4-fs (loop3): 2 truncates cleaned up [ 346.596087][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 346.596110][ C1] EXT4-fs (loop3): initial error at time 2000001010: ext4_free_branches:1023: inode 11 [ 346.596139][ C1] EXT4-fs (loop3): last error at time 2000001010: ext4_free_branches:1023: inode 11 [ 346.636744][T25098] Cannot find del_set index 2 as target [ 346.747713][T25091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.813958][T25106] loop6: detected capacity change from 0 to 1024 [ 346.864907][T25106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.908976][T17139] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 346.922165][T17147] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 346.970909][T17139] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 346.994435][T17147] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 876 with error 117 [ 347.028819][T17139] EXT4-fs (loop2): This should not happen!! Data will be lost [ 347.028819][T17139] [ 347.045486][T17147] EXT4-fs (loop3): This should not happen!! Data will be lost [ 347.045486][T17147] [ 347.089446][T17139] EXT4-fs (loop2): Total free blocks count 0 [ 347.112305][T17139] EXT4-fs (loop2): Free/Dirty block details [ 347.132645][T17139] EXT4-fs (loop2): free_blocks=0 [ 347.137924][T17139] EXT4-fs (loop2): dirty_blocks=10124 [ 347.147245][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.153995][T17139] EXT4-fs (loop2): Block reservation details [ 347.178106][T17139] EXT4-fs (loop2): i_reserved_data_blocks=10124 [ 347.224948][T17139] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 347.245754][T25117] loop3: detected capacity change from 0 to 512 [ 347.272813][T25117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.293708][T25117] EXT4-fs (loop3): 1 truncate cleaned up [ 347.299919][T25117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.989762][T25159] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8619'. [ 347.995960][ T28] audit: type=1400 audit(2000001012.255:1694): avc: denied { create } for pid=25160 comm="syz.4.8620" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 348.702512][T25214] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8643'. [ 348.721572][T25214] netlink: 43 bytes leftover after parsing attributes in process `syz.5.8643'. [ 348.737179][T25214] netlink: 'syz.5.8643': attribute type 5 has an invalid length. [ 348.754067][T25214] netlink: 43 bytes leftover after parsing attributes in process `syz.5.8643'. [ 349.259505][T25255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8660'. [ 349.271016][T25255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8660'. [ 349.310174][T25261] ip6_vti0 speed is unknown, defaulting to 1000 [ 349.327231][T25265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8665'. [ 349.336824][T25265] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8665'. [ 349.843439][T25301] loop4: detected capacity change from 0 to 128 [ 349.860532][T25301] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 349.868983][T25301] FAT-fs (loop4): Filesystem has been set read-only [ 349.876477][T25301] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 349.930518][T25305] loop4: detected capacity change from 0 to 512 [ 349.947664][T25305] EXT4-fs: Ignoring removed oldalloc option [ 349.970508][T25305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.002666][T25305] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8680: iget: bad i_size value: 38620345925642 [ 350.018836][T25305] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 350.019050][T25305] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8680: couldn't read orphan inode 15 (err -117) [ 350.028280][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 350.028301][ C0] EXT4-fs (loop4): initial error at time 2000001014: ext4_orphan_get:1391: inode 15 [ 350.028331][ C0] EXT4-fs (loop4): last error at time 2000001014: ext4_orphan_get:1391: inode 15 [ 350.066481][T25305] loop4: lost filesystem error report for type 5 error -117 [ 350.067332][T25305] EXT4-fs mount: 3 callbacks suppressed [ 350.067347][T25305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.484192][T17134] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 350.502956][T17134] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 350.531604][T17134] EXT4-fs (loop4): This should not happen!! Data will be lost [ 350.531604][T17134] [ 350.558830][T17134] EXT4-fs (loop4): Total free blocks count 0 [ 350.580809][T17134] EXT4-fs (loop4): Free/Dirty block details [ 350.586868][T17134] EXT4-fs (loop4): free_blocks=0 [ 350.602672][T17134] EXT4-fs (loop4): dirty_blocks=16000 [ 350.626425][T17134] EXT4-fs (loop4): Block reservation details [ 350.633485][T17134] EXT4-fs (loop4): i_reserved_data_blocks=16000 [ 350.784361][T17139] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 350.852582][T25350] loop3: detected capacity change from 0 to 512 [ 350.876365][T25350] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 350.905140][T25350] EXT4-fs (loop3): 1 truncate cleaned up [ 350.913383][T25350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.105167][T25362] loop4: detected capacity change from 0 to 128 [ 351.131598][T25362] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.154282][T25362] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.194532][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.204377][T25365] loop6: detected capacity change from 0 to 4096 [ 351.218088][T25367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.227819][T25365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.229708][T25367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.251894][T20997] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.282590][T25365] EXT4-fs (loop6): shut down requested (1) [ 351.288878][T25365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 351.298082][T25365] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 351.299159][T25370] loop3: detected capacity change from 0 to 1024 [ 351.328719][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.341887][T25370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.396206][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.499462][T25391] netlink: 'syz.3.8715': attribute type 2 has an invalid length. [ 351.527733][ T28] audit: type=1326 audit(2000001015.795:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 351.551826][ T28] audit: type=1326 audit(2000001015.795:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 351.593337][ T28] audit: type=1326 audit(2000001015.795:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 351.632992][ T28] audit: type=1326 audit(2000001015.795:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 351.644570][T25401] loop6: detected capacity change from 0 to 1024 [ 351.671544][ T28] audit: type=1326 audit(2000001015.795:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 351.695770][ T28] audit: type=1326 audit(2000001015.805:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 351.696352][T25401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.719697][ T28] audit: type=1326 audit(2000001015.855:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feab674cfce code=0x7ffc0000 [ 351.756002][ T28] audit: type=1326 audit(2000001015.855:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feab674cfce code=0x7ffc0000 [ 351.776002][T25401] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: comm syz.6.8719: inode #3: comm syz.6.8719: iget: illegal inode # [ 351.779702][ T28] audit: type=1326 audit(2000001015.855:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feab674cfce code=0x7ffc0000 [ 351.795180][T25401] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.8719: error while reading EA inode 3 err=-117 [ 351.816102][ T28] audit: type=1326 audit(2000001015.855:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25392 comm="syz.5.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feab674cfce code=0x7ffc0000 [ 351.867028][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.902113][T25408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8722'. [ 351.949566][T25414] loop6: detected capacity change from 0 to 1024 [ 352.012327][T25419] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 352.040394][T25414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 352.052898][T25414] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.078537][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 353.001835][T25480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8749'. [ 353.041320][T25480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8749'. [ 353.143365][T25484] loop4: detected capacity change from 0 to 512 [ 353.313346][T25491] loop4: detected capacity change from 0 to 512 [ 353.371228][T25492] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8764'. [ 353.391304][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8755'. [ 353.424450][T25491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.458432][T25491] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.469459][T25495] gtp0: entered promiscuous mode [ 353.530738][T25495] gtp0: entered allmulticast mode [ 353.727586][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8759'. [ 353.784264][T25511] bond_slave_0: entered promiscuous mode [ 353.789983][T25511] bond_slave_1: entered promiscuous mode [ 353.870843][T25511] macvlan0: entered promiscuous mode [ 353.887448][T25511] bond0: entered promiscuous mode [ 353.914943][T25511] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 354.025588][T20997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.642289][T25550] EXT4-fs: inline encryption not supported [ 354.648325][T25550] EXT4-fs: Ignoring removed bh option [ 354.731791][T25550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.905548][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.916054][T25568] ip6_vti0 speed is unknown, defaulting to 1000 [ 354.936147][T25570] set_capacity_and_notify: 2 callbacks suppressed [ 354.936168][T25570] loop3: detected capacity change from 0 to 256 [ 354.981285][T25570] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.017855][T25576] loop6: detected capacity change from 0 to 512 [ 355.034790][T25570] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.218355][T25591] loop6: detected capacity change from 0 to 512 [ 355.260536][T25591] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 355.309998][T25591] EXT4-fs (loop6): 1 truncate cleaned up [ 355.340130][T25591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.707814][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.868843][T25631] loop2: detected capacity change from 0 to 512 [ 355.897361][T25631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.910263][T25631] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.936452][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.117277][T25647] openvswitch: netlink: Missing key (keys=40, expected=100) [ 356.219090][T25651] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.406649][T25656] sctp: [Deprecated]: syz.5.8814 (pid 25656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.406649][T25656] Use struct sctp_sack_info instead [ 356.629813][T25670] loop6: detected capacity change from 0 to 512 [ 356.642609][T25670] EXT4-fs: Ignoring removed oldalloc option [ 356.653867][T25670] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 356.678489][T25670] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.8821: bad orphan inode 131083 [ 356.711592][T25670] loop6: lost filesystem error report for type 5 error -117 [ 356.712309][T25670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.819893][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.897850][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 356.897870][ T28] audit: type=1400 audit(2000001021.165:1732): avc: denied { connect } for pid=25693 comm="syz.6.8831" lport=53609 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 356.935592][ T28] audit: type=1400 audit(2000001021.165:1733): avc: denied { name_connect } for pid=25693 comm="syz.6.8831" dest=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 356.981697][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 357.190891][T25715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8841'. [ 357.199924][T25715] netlink: 'syz.6.8841': attribute type 18 has an invalid length. [ 357.207874][T25715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8841'. [ 357.268688][ T28] audit: type=1400 audit(2000001021.535:1734): avc: denied { getopt } for pid=25718 comm="syz.3.8843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 357.890258][T25750] syzkaller1: entered promiscuous mode [ 357.896066][T25750] syzkaller1: entered allmulticast mode [ 358.433830][T25801] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8881'. [ 358.596535][T25811] ip6_vti0 speed is unknown, defaulting to 1000 [ 358.659809][T25825] loop6: detected capacity change from 0 to 128 [ 358.761766][ T28] audit: type=1400 audit(2000001023.025:1735): avc: denied { read } for pid=25828 comm="syz.6.8892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 358.800392][T25832] loop4: detected capacity change from 0 to 512 [ 358.807956][T25832] EXT4-fs: Ignoring removed orlov option [ 358.815003][ T28] audit: type=1400 audit(2000001023.085:1736): avc: denied { mounton } for pid=25831 comm="syz.4.8893" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="bpf" ino=76951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 358.864386][T25832] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 358.892190][T25832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 358.900851][T25832] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.8893: corrupted in-inode xattr: e_value size too large [ 358.915396][T25832] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 358.915653][T25832] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8893: couldn't read orphan inode 15 (err -117) [ 358.924882][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 358.924921][ C0] EXT4-fs (loop4): initial error at time 2000001023: ext4_iget_extra_inode:5025: inode 15 [ 358.924971][ C0] EXT4-fs (loop4): last error at time 2000001023: ext4_iget_extra_inode:5025: inode 15 [ 358.997364][T25832] loop4: lost filesystem error report for type 5 error -117 [ 358.998019][T25832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.021549][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 359.027780][ T9963] Bluetooth: hci0: command 0x1003 tx timeout [ 359.088417][T25832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.387132][T25850] loop2: detected capacity change from 0 to 512 [ 359.432271][T25850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.445473][T25850] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.491547][ T28] audit: type=1326 audit(2000001023.765:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.5.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 359.543550][ T28] audit: type=1326 audit(2000001023.765:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.5.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 359.567441][ T28] audit: type=1326 audit(2000001023.795:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.5.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 359.592090][ T28] audit: type=1326 audit(2000001023.795:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.5.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 359.594693][T25860] netlink: 'syz.4.8903': attribute type 1 has an invalid length. [ 359.616180][ T28] audit: type=1326 audit(2000001023.795:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.5.8902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 359.656535][T25860] loop4: detected capacity change from 0 to 128 [ 359.759614][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.000987][T25895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8917'. [ 360.055736][T25899] geneve2: entered promiscuous mode [ 360.086335][T25906] xt_hashlimit: size too large, truncated to 1048576 [ 360.255674][T25928] loop3: detected capacity change from 0 to 128 [ 360.699815][T25970] loop2: detected capacity change from 0 to 128 [ 360.717196][T25970] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.731084][T25970] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.765383][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.826843][ T2965] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 360.838702][T25978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8952'. [ 360.887432][T25984] netlink: 'syz.4.8955': attribute type 12 has an invalid length. [ 360.895486][T25984] netlink: 'syz.4.8955': attribute type 29 has an invalid length. [ 360.903521][T25984] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8955'. [ 360.913270][T25984] netlink: 59 bytes leftover after parsing attributes in process `syz.4.8955'. [ 361.116929][T26004] loop4: detected capacity change from 0 to 164 [ 361.137476][T26004] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 361.392089][T26028] loop6: detected capacity change from 0 to 256 [ 361.408015][T26028] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 361.418360][T26028] FAT-fs (loop6): Filesystem has been set read-only [ 361.425223][T26028] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 361.574418][T26036] loop6: detected capacity change from 0 to 512 [ 361.586014][T26036] EXT4-fs (loop6): 1 truncate cleaned up [ 361.593442][T26036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.633496][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.704816][T26048] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8983'. [ 361.714092][T26048] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8983'. [ 361.797546][T26057] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26057 comm=syz.2.8987 [ 361.846792][T26065] loop2: detected capacity change from 0 to 512 [ 361.862401][T26069] loop4: detected capacity change from 0 to 512 [ 361.869952][T26069] EXT4-fs: Ignoring removed orlov option [ 361.884726][T26065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.885500][T26069] EXT4-fs (loop4): 1 truncate cleaned up [ 361.908929][T26069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.910855][T26065] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.941790][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 361.941810][ T28] audit: type=1400 audit(2000001026.205:1796): avc: denied { append } for pid=26064 comm="syz.2.8991" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.954969][T26069] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8993: bg 0: block 465: padding at end of block bitmap is not set [ 361.981036][T26065] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 361.985772][ T28] audit: type=1400 audit(2000001026.245:1797): avc: denied { watch watch_reads } for pid=26075 comm="syz.6.8995" path="/349" dev="tmpfs" ino=1818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 362.002789][T26065] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28 [ 362.031958][T26069] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 362.040445][T26065] EXT4-fs (loop2): This should not happen!! Data will be lost [ 362.040445][T26065] [ 362.048086][T26069] EXT4-fs (loop4): This should not happen!! Data will be lost [ 362.048086][T26069] [ 362.063844][T26065] EXT4-fs (loop2): Total free blocks count 0 [ 362.067351][ T28] audit: type=1400 audit(2000001026.335:1798): avc: denied { watch watch_reads } for pid=26078 comm="syz.6.8996" path="/350/file0" dev="tmpfs" ino=1828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 362.073603][T26065] EXT4-fs (loop2): Free/Dirty block details [ 362.097887][T26069] EXT4-fs (loop4): Total free blocks count 0 [ 362.109290][T26069] EXT4-fs (loop4): Free/Dirty block details [ 362.120829][T26069] EXT4-fs (loop4): free_blocks=0 [ 362.124125][T26065] EXT4-fs (loop2): free_blocks=65280 [ 362.125922][T26069] EXT4-fs (loop4): dirty_blocks=65 [ 362.125939][T26069] EXT4-fs (loop4): Block reservation details [ 362.131693][T26065] EXT4-fs (loop2): dirty_blocks=31 [ 362.142299][T26069] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 362.146075][T26065] EXT4-fs (loop2): Block reservation details [ 362.160629][T26065] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 362.167029][T26065] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 362.195016][ T28] audit: type=1400 audit(2000001026.465:1799): avc: denied { create } for pid=26084 comm="syz.5.8999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.221055][T17134] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 362.235103][ T28] audit: type=1400 audit(2000001026.515:1800): avc: denied { setopt } for pid=26084 comm="syz.5.8999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.274700][ T28] audit: type=1400 audit(2000001026.535:1801): avc: denied { write } for pid=26084 comm="syz.5.8999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.321470][ T28] audit: type=1400 audit(2000001026.565:1802): avc: denied { name_bind } for pid=26087 comm="syz.4.9000" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 362.349156][ T28] audit: type=1326 audit(2000001026.575:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26088 comm="syz.5.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 362.373470][ T28] audit: type=1326 audit(2000001026.575:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26088 comm="syz.5.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 362.457175][ T28] audit: type=1326 audit(2000001026.575:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26088 comm="syz.5.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 362.508178][T26108] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.992365][ T2378] Bluetooth: hci0: Frame reassembly failed (-84) [ 363.231691][T26166] netlink: 'syz.3.9036': attribute type 10 has an invalid length. [ 363.240005][T26166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9036'. [ 363.249713][T26166] vlan0: entered promiscuous mode [ 363.255440][T26166] vlan0: entered allmulticast mode [ 363.260712][T26166] veth0_vlan: entered allmulticast mode [ 363.267249][T26166] bridge0: port 3(vlan0) entered blocking state [ 363.273659][T26166] bridge0: port 3(vlan0) entered disabled state [ 363.377145][T26179] ip6_vti0 speed is unknown, defaulting to 1000 [ 363.536733][T26194] geneve2: entered promiscuous mode [ 363.546204][T26196] loop2: detected capacity change from 0 to 1024 [ 363.553241][T26196] EXT4-fs: Ignoring removed oldalloc option [ 363.560677][T26196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.589486][T26196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.618095][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.956522][T26217] loop2: detected capacity change from 0 to 65536 [ 364.007872][T26222] loop2: detected capacity change from 0 to 1024 [ 364.015009][T26222] EXT4-fs: inline encryption not supported [ 364.024568][T26222] EXT4-fs: Ignoring removed bh option [ 364.032391][T26222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.069073][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.243778][T26232] EXT4-fs: Ignoring removed bh option [ 364.253806][T26232] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 364.266478][T26232] EXT4-fs (loop2): 1 truncate cleaned up [ 364.274533][T26232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.300679][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.353225][T26239] xt_hashlimit: size too large, truncated to 1048576 [ 364.587812][T26255] geneve2: entered promiscuous mode [ 364.612631][T26257] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.661209][T26258] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 365.030827][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 365.066620][T26288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 365.085532][T26288] EXT4-fs (loop4): 1 truncate cleaned up [ 365.093143][T26288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.098851][T26290] EXT4-fs: Ignoring removed orlov option [ 365.114298][T26288] EXT4-fs warning (device loop4): ext4_group_extend:1890: can't read last block, resize aborted [ 365.138018][T20997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.153043][T26290] EXT4-fs (loop6): 1 truncate cleaned up [ 365.160510][T26290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.188724][T26298] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.223079][T26298] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.244025][T26290] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9085: bg 0: block 465: padding at end of block bitmap is not set [ 365.303492][T26290] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 117 [ 365.316807][T26290] EXT4-fs (loop6): This should not happen!! Data will be lost [ 365.316807][T26290] [ 365.350356][ T36] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 365.363294][ T36] EXT4-fs (loop6): This should not happen!! Data will be lost [ 365.363294][ T36] [ 365.373148][ T36] EXT4-fs (loop6): Total free blocks count 0 [ 365.379450][ T36] EXT4-fs (loop6): Free/Dirty block details [ 365.386999][ T36] EXT4-fs (loop6): free_blocks=0 [ 365.392047][ T36] EXT4-fs (loop6): dirty_blocks=1 [ 365.397171][ T36] EXT4-fs (loop6): Block reservation details [ 365.429940][T26320] set_capacity_and_notify: 5 callbacks suppressed [ 365.429960][T26320] loop6: detected capacity change from 0 to 512 [ 365.443753][T26320] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 365.461375][T26320] EXT4-fs (loop6): 1 truncate cleaned up [ 365.467429][T26320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.523024][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.537245][T26330] loop3: detected capacity change from 0 to 1024 [ 365.579341][T26330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.594809][T26330] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.617543][T26330] EXT4-fs (loop3): shut down requested (1) [ 365.635717][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 365.787719][T26345] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.879533][T26345] chnl_net:caif_netlink_parms(): no params data found [ 365.922960][T26345] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.930235][T26345] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.938527][T26345] bridge_slave_0: entered allmulticast mode [ 365.945909][T26345] bridge_slave_0: entered promiscuous mode [ 365.952942][T26345] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.960467][T26345] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.969769][T26345] bridge_slave_1: entered allmulticast mode [ 365.976574][T26345] bridge_slave_1: entered promiscuous mode [ 365.994795][T26345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.005748][T26345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.026539][T26345] team0: Port device team_slave_0 added [ 366.033146][T26345] team0: Port device team_slave_1 added [ 366.051266][T26345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.058292][T26345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.086732][T26345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.098345][T26345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.105638][T26345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.132476][T26345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.161307][T26345] hsr_slave_0: entered promiscuous mode [ 366.167680][T26345] hsr_slave_1: entered promiscuous mode [ 366.173900][T26345] debugfs: 'hsr0' already exists in 'hsr' [ 366.179841][T26345] Cannot create hsr debugfs directory [ 366.278280][T26345] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.285423][T26345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.292793][T26345] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.299846][T26345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.402905][T26345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.511256][T26381] loop6: detected capacity change from 0 to 4096 [ 366.539698][T26381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.558009][T26386] loop3: detected capacity change from 0 to 512 [ 366.573107][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.596124][T26381] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.9119: corrupted inode contents [ 366.626470][T26386] EXT4-fs (loop3): orphan cleanup on readonly fs [ 366.643413][T26381] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.9119: mark_inode_dirty error [ 366.658418][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.660456][T26386] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.9120: Bad quota inum: 2, type: 1 [ 366.673707][T26381] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.9119: corrupted inode contents [ 366.676670][T26386] loop3: lost filesystem error report for type 5 error -117 [ 366.688715][T26386] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 366.696159][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 366.696181][ C1] EXT4-fs (loop3): last error at time 2000001030: ext4_quota_enable:7188 [ 366.712459][T26381] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.9119: mark_inode_dirty error [ 366.739126][T26381] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.9119: corrupted inode contents [ 366.752443][T26381] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.9119: mark_inode_dirty error [ 366.763943][T26386] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 366.771479][T26381] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.9119: corrupted inode contents [ 366.772784][T26345] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.783883][T26386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.802843][T26381] EXT4-fs error (device loop6): ext4_truncate:4587: inode #15: comm syz.6.9119: mark_inode_dirty error [ 366.814844][T26381] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem [ 366.847460][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.855060][T17147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.868785][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.875964][T17139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.882495][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.892650][T26386] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 366.940962][T26386] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 366.976011][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.045735][T26409] loop6: detected capacity change from 0 to 512 [ 367.068070][T26345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.075318][T26409] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 367.091870][T26409] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 367.234133][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 367.234154][ T28] audit: type=1400 audit(2000001031.505:1896): avc: denied { bind } for pid=26422 comm="syz.6.9129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.286743][ T28] audit: type=1400 audit(2000001031.505:1897): avc: denied { name_bind } for pid=26422 comm="syz.6.9129" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 367.330254][ T28] audit: type=1400 audit(2000001031.505:1898): avc: denied { node_bind } for pid=26422 comm="syz.6.9129" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 367.363736][T26345] veth0_vlan: entered promiscuous mode [ 367.373392][T26345] veth1_vlan: entered promiscuous mode [ 367.411903][T26345] veth0_macvtap: entered promiscuous mode [ 367.430364][T26345] veth1_macvtap: entered promiscuous mode [ 367.457669][T26345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.480172][T26345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.524379][ T28] audit: type=1400 audit(2000001031.795:1899): avc: denied { mounton } for pid=26345 comm="syz-executor" path="/root/syzkaller.lG2hQK/syz-tmp" dev="sda1" ino=2083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 367.593215][ T28] audit: type=1400 audit(2000001031.795:1900): avc: denied { mount } for pid=26345 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 367.634232][T26434] loop7: detected capacity change from 0 to 1024 [ 367.638727][ T28] audit: type=1400 audit(2000001031.795:1901): avc: denied { mounton } for pid=26345 comm="syz-executor" path="/root/syzkaller.lG2hQK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 367.641319][T26434] EXT4-fs: Ignoring removed oldalloc option [ 367.680251][T26434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.688586][ T28] audit: type=1400 audit(2000001031.795:1902): avc: denied { mounton } for pid=26345 comm="syz-executor" path="/root/syzkaller.lG2hQK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=78695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 367.717420][ T28] audit: type=1400 audit(2000001031.815:1903): avc: denied { mounton } for pid=26345 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 367.743664][T26434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.762202][ T28] audit: type=1400 audit(2000001031.815:1904): avc: denied { mount } for pid=26345 comm="syz-executor" name="/" dev="gadgetfs" ino=3997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 367.816726][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.856754][ T28] audit: type=1326 audit(2000001032.125:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26437 comm="syz.7.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802570c799 code=0x7ffc0000 [ 368.033368][T26445] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.239185][T26460] loop3: detected capacity change from 0 to 512 [ 368.589575][T26479] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9149'. [ 368.631335][T26479] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9149'. [ 368.704059][T26493] loop2: detected capacity change from 0 to 164 [ 369.049479][T26516] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.073870][T26520] loop6: detected capacity change from 0 to 512 [ 369.117898][T26520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.176429][T26520] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.286797][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.399444][T26529] loop6: detected capacity change from 0 to 128 [ 369.426875][T26529] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.454666][T26529] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 369.673366][T26534] EXT4-fs: Ignoring removed bh option [ 369.725157][T26534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.748011][T26534] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.877526][T26545] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 369.891348][T26544] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.9161: lblock 0 mapped to illegal pblock 0 (length 6) [ 369.920826][T26544] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 369.949882][T26544] EXT4-fs (loop6): This should not happen!! Data will be lost [ 369.949882][T26544] [ 369.994108][T26541] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.005553][T26544] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9161: bg 0: block 112: padding at end of block bitmap is not set [ 370.038794][T17147] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 370.071066][T17147] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 370.102876][T17147] EXT4-fs (loop6): This should not happen!! Data will be lost [ 370.102876][T17147] [ 370.142137][T26552] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.175920][T26552] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.199940][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 370.314873][T26560] EXT4-fs: Ignoring removed orlov option [ 370.342754][T26560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.598265][T26567] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.909964][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.642152][T26619] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.643027][T26620] 9p: Bad value for 'source' [ 371.993947][T26639] set_capacity_and_notify: 4 callbacks suppressed [ 371.993966][T26639] loop2: detected capacity change from 0 to 128 [ 372.330068][T26667] netlink: 'syz.2.9214': attribute type 3 has an invalid length. [ 372.415119][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 372.415137][ T28] audit: type=1400 audit(2000001036.685:1963): avc: denied { create } for pid=26672 comm="syz.3.9217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 372.463392][ T28] audit: type=1400 audit(2000001036.695:1964): avc: denied { lock } for pid=26677 comm="syz.7.9219" path="socket:[79149]" dev="sockfs" ino=79149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 372.528264][ T28] audit: type=1400 audit(2000001036.785:1965): avc: denied { kexec_image_load } for pid=26672 comm="syz.3.9217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 372.557246][T26684] ip6_vti0 speed is unknown, defaulting to 1000 [ 372.704210][T26696] loop7: detected capacity change from 0 to 8192 [ 372.802293][ T28] audit: type=1400 audit(2000001037.065:1966): avc: denied { ioctl } for pid=26711 comm="syz.5.9227" path="socket:[79185]" dev="sockfs" ino=79185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 372.956850][ T28] audit: type=1400 audit(2000001037.225:1967): avc: denied { setopt } for pid=26727 comm="syz.5.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.009323][ T28] audit: type=1400 audit(2000001037.245:1968): avc: denied { bind } for pid=26727 comm="syz.5.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.096395][ T28] audit: type=1400 audit(2000001037.255:1969): avc: denied { read } for pid=26727 comm="syz.5.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.139380][ T28] audit: type=1400 audit(2000001037.295:1970): avc: denied { write } for pid=26727 comm="syz.5.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.200914][ T28] audit: type=1400 audit(2000001037.355:1971): avc: denied { mount } for pid=26740 comm="syz.7.9233" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 373.260785][ T28] audit: type=1400 audit(2000001037.445:1972): avc: denied { unmount } for pid=26345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 373.322187][T26754] loop2: detected capacity change from 0 to 512 [ 373.374935][T26754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.396441][T26754] ext4 filesystem being mounted at /665/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.436478][T26754] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.487494][T26765] team0 (unregistering): Port device team_slave_0 removed [ 373.532547][T26765] team0 (unregistering): Port device team_slave_1 removed [ 373.726548][T26776] syzkaller1: entered promiscuous mode [ 373.742543][T26776] syzkaller1: entered allmulticast mode [ 373.885512][T26780] loop7: detected capacity change from 0 to 8192 [ 374.204207][T26804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9258'. [ 374.234005][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9260'. [ 374.244935][T26804] netlink: 'syz.7.9258': attribute type 30 has an invalid length. [ 374.272628][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9260'. [ 374.382729][T26822] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9267'. [ 374.855915][T26853] loop3: detected capacity change from 0 to 4096 [ 374.881707][T26853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.902314][T26864] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9282'. [ 374.918243][T26864] bond1: option primary_reselect: invalid value (8) [ 374.926968][T26864] bond1 (unregistering): Released all slaves [ 374.935567][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.083183][T26869] loop6: detected capacity change from 0 to 512 [ 375.100187][T26869] EXT4-fs: Ignoring removed bh option [ 375.118656][T26869] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 375.145013][T26869] EXT4-fs (loop6): 1 truncate cleaned up [ 375.258479][T26888] netlink: 'syz.6.9294': attribute type 4 has an invalid length. [ 375.385767][T26904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9303'. [ 375.492375][T26914] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9307'. [ 375.601808][T26923] loop6: detected capacity change from 0 to 512 [ 375.618120][T26923] EXT4-fs: Ignoring removed bh option [ 375.630277][T26923] EXT4-fs: inline encryption not supported [ 375.641993][T26923] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.664927][T26923] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 375.685612][T26923] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9310: bg 0: block 248: padding at end of block bitmap is not set [ 375.700507][T26923] loop6: lost filesystem error report for type 5 error -117 [ 375.700756][T26923] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.9310: Failed to acquire dquot type 1 [ 375.719362][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 375.719398][ C0] EXT4-fs (loop6): last error at time 2000001039: ext4_validate_block_bitmap:441 [ 375.737099][T26923] loop6: lost filesystem error report for type 5 error -117 [ 375.737700][T26923] EXT4-fs (loop6): 1 truncate cleaned up [ 375.894426][T17147] Bluetooth: hci0: Frame reassembly failed (-84) [ 376.064670][T26968] team_slave_0: entered promiscuous mode [ 376.070387][T26968] team_slave_1: entered promiscuous mode [ 376.077957][T26968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 376.097410][T26968] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 376.133044][T26971] loop7: detected capacity change from 0 to 512 [ 376.144158][T26971] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 376.166167][T26971] EXT4-fs (loop7): orphan cleanup on readonly fs [ 376.175621][T26974] loop2: detected capacity change from 0 to 512 [ 376.182856][T26971] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 376.209162][T26971] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 376.216460][T26971] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.9331: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 376.236534][T26974] ext4 filesystem being mounted at /674/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.247491][T26971] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 376.247743][T26971] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.9331: couldn't read orphan inode 13 (err -117) [ 376.257014][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 376.257034][ C1] EXT4-fs (loop7): last error at time 2000001040: ext4_ext_check_inode:521: inode 13 [ 376.286461][T26971] loop7: lost filesystem error report for type 5 error -117 [ 376.338133][T26980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26980 comm=syz.2.9334 [ 376.472787][T26992] loop2: detected capacity change from 0 to 1024 [ 376.509243][T26992] EXT4-fs: Ignoring removed orlov option [ 376.548302][T26992] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 376.611000][T27007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.705620][T27011] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.106557][T27048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9363'. [ 377.221216][T27053] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 377.290677][T27057] set_capacity_and_notify: 1 callbacks suppressed [ 377.290698][T27057] loop7: detected capacity change from 0 to 512 [ 377.329876][T27057] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 377.366850][T27057] EXT4-fs (loop7): orphan cleanup on readonly fs [ 377.383598][T27062] netlink: 'syz.5.9369': attribute type 39 has an invalid length. [ 377.405141][T27057] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 377.450900][T27062] hsr_slave_1 (unregistering): left promiscuous mode [ 377.467875][T27057] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 377.487877][T27057] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #16: comm syz.7.9367: inode has both inline data and extents flags [ 377.524165][T27057] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 377.524426][T27057] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.9367: couldn't read orphan inode 16 (err -117) [ 377.533668][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 377.533693][ C0] EXT4-fs (loop7): initial error at time 2000001041: ext4_orphan_get:1391: inode 16 [ 377.533724][ C0] EXT4-fs (loop7): last error at time 2000001041: ext4_orphan_get:1391: inode 16 [ 377.570777][T27057] loop7: lost filesystem error report for type 5 error -117 [ 377.624261][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 377.624277][ T28] audit: type=1400 audit(2000001041.895:2026): avc: denied { bind } for pid=27064 comm="syz.7.9370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.862144][ T28] audit: type=1400 audit(2000001042.125:2027): avc: denied { ioctl } for pid=27081 comm="syz.2.9378" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 377.901046][ T9963] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 378.501778][T27090] loop3: detected capacity change from 0 to 512 [ 378.686159][ T28] audit: type=1326 audit(2000001042.955:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.7.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802570c799 code=0x7ffc0000 [ 378.711819][T27090] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.9382: corrupted in-inode xattr: invalid ea_ino [ 378.722299][ T28] audit: type=1326 audit(2000001042.955:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.7.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802570c799 code=0x7ffc0000 [ 378.752950][ T28] audit: type=1326 audit(2000001042.955:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.7.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f802570c799 code=0x7ffc0000 [ 378.777748][ T28] audit: type=1326 audit(2000001042.955:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.7.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802570c799 code=0x7ffc0000 [ 378.802035][ T28] audit: type=1326 audit(2000001042.955:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27095 comm="syz.7.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802570c799 code=0x7ffc0000 [ 378.827532][T27090] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 378.830776][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 378.846421][ C1] EXT4-fs (loop3): initial error at time 2000001043: ext4_iget_extra_inode:5025: inode 15 [ 378.856568][ C1] EXT4-fs (loop3): last error at time 2000001043: ext4_iget_extra_inode:5025: inode 15 [ 378.866490][T27090] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.9382: couldn't read orphan inode 15 (err -117) [ 378.883755][T27106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9388'. [ 378.907934][T27090] loop3: lost filesystem error report for type 5 error -117 [ 378.921195][T27109] 9p: Bad value for 'rfdno' [ 378.975627][ T28] audit: type=1400 audit(2000001043.245:2033): avc: denied { ioctl } for pid=27115 comm="syz.5.9394" path="socket:[80819]" dev="sockfs" ino=80819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.030209][ T10] Process accounting resumed [ 379.035677][ T28] audit: type=1400 audit(2000001043.305:2034): avc: denied { execute_no_trans } for pid=27122 comm="syz.7.9395" path="/57/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.126772][ T28] audit: type=1400 audit(2000001043.395:2035): avc: denied { bind } for pid=27132 comm="syz.5.9401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.255433][T27149] loop3: detected capacity change from 0 to 128 [ 379.328368][T27151] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9407'. [ 379.338730][T27149] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9407'. [ 379.479007][T27164] vcan0: tx address claim with different name [ 379.548881][T27171] xt_CT: No such helper "snmp_trap" [ 379.736343][T27187] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.915379][T27190] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.102503][T27262] loop2: detected capacity change from 0 to 2048 [ 381.143925][ T9889] loop2: p1 p2 [ 381.150306][T27262] loop2: p1 p2 [ 381.168877][ T9863] udevd[9863]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 381.169718][ T9889] udevd[9889]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 381.216199][ T9889] udevd[9889]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 381.226387][ T9863] udevd[9863]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 382.540111][T27318] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9479'. [ 382.653406][T27330] loop3: detected capacity change from 0 to 1024 [ 382.660056][T27330] EXT4-fs: Ignoring removed orlov option [ 382.665815][T27330] EXT4-fs: inline encryption not supported [ 382.681707][T27330] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 382.695943][T27330] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 382.708376][T27330] EXT4-fs (loop3): invalid journal inode [ 382.717520][T27330] EXT4-fs (loop3): can't get journal size [ 382.815783][T27330] EXT4-fs mount: 16 callbacks suppressed [ 382.816130][T27340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9487'. [ 382.832115][T27330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.921487][T23720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.981041][T27358] loop6: detected capacity change from 0 to 1024 [ 382.994400][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 382.994418][ T28] audit: type=1400 audit(2000001047.265:2096): avc: denied { mount } for pid=27361 comm="syz.5.9499" name="/" dev="ramfs" ino=82151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 383.042146][T27358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.188874][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.420885][T27404] loop6: detected capacity change from 0 to 128 [ 383.561039][ T28] audit: type=1400 audit(2000001047.835:2097): avc: denied { read } for pid=27416 comm="syz.3.9522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 383.854473][T27455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9538'. [ 383.902883][ T28] audit: type=1326 audit(2000001048.175:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 383.933537][ T28] audit: type=1326 audit(2000001048.175:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 383.987010][ T28] audit: type=1326 audit(2000001048.175:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 384.021050][ T28] audit: type=1326 audit(2000001048.175:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 384.064949][ T28] audit: type=1326 audit(2000001048.175:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 384.098398][ T28] audit: type=1326 audit(2000001048.175:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 384.120981][T27480] loop2: detected capacity change from 0 to 512 [ 384.122429][ T28] audit: type=1326 audit(2000001048.175:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 384.152809][T27480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 384.170311][ T28] audit: type=1326 audit(2000001048.175:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27374 comm="syz.2.9502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7fc00000 [ 384.203206][T27480] EXT4-fs (loop2): 1 truncate cleaned up [ 384.209609][T27480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.225303][T27487] loop7: detected capacity change from 0 to 512 [ 384.259502][T27487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.273048][T27487] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.297163][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.307636][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.364486][T27503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9557'. [ 384.400944][T27509] loop2: detected capacity change from 0 to 256 [ 385.878593][T27592] loop6: detected capacity change from 0 to 128 [ 385.897415][T27592] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 385.910637][T27592] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 385.934018][T17147] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 385.953581][T27596] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9594'. [ 385.970199][T27596] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9594'. [ 387.502504][T27677] netlink: 'syz.6.9631': attribute type 15 has an invalid length. [ 387.813163][T27694] loop2: detected capacity change from 0 to 1024 [ 387.828814][T27694] EXT4-fs: Ignoring removed bh option [ 387.835823][T27694] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 387.848683][T27694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 387.872885][T27694] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.9636: lblock 2 mapped to illegal pblock 2 (length 1) [ 387.877109][T27705] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27705 comm=syz.7.9642 [ 387.891951][T27694] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 387.900788][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 387.916485][ C0] EXT4-fs (loop2): initial error at time 2000001052: ext4_map_blocks:776: inode 3: block 2 [ 387.926519][ C0] EXT4-fs (loop2): last error at time 2000001052: ext4_map_blocks:776: inode 3: block 2 [ 387.942259][T27694] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.9636: lblock 0 mapped to illegal pblock 48 (length 1) [ 387.966715][T27694] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 387.966904][T27694] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.9636: Failed to acquire dquot type 0 [ 388.003976][T27694] loop2: lost filesystem error report for type 5 error -117 [ 388.018498][T27694] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 388.030856][T27694] loop2: lost filesystem error report for type 5 error -117 [ 388.030966][T27694] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.9636: mark_inode_dirty error [ 388.050481][T27694] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 388.050643][T27694] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 388.070801][T27694] EXT4-fs (loop2): 1 orphan inode deleted [ 388.077236][T27694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.091203][T17143] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 388.113744][T27724] syzkaller1: entered promiscuous mode [ 388.126517][T27694] EXT4-fs (loop2): shut down requested (1) [ 388.126537][T17143] __quota_error: 34 callbacks suppressed [ 388.126552][T17143] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 388.148728][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.169318][T27724] syzkaller1: entered allmulticast mode [ 388.204918][T27731] loop2: detected capacity change from 0 to 512 [ 388.226139][T27731] EXT4-fs: Ignoring removed nobh option [ 388.258805][ T28] audit: type=1400 audit(2000001052.525:2138): avc: denied { write } for pid=27737 comm="syz.7.9656" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 388.302625][T27731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.328512][T27731] ext4 filesystem being mounted at /732/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.347333][T22951] kernel write not supported for file bpf-prog (pid: 22951 comm: kworker/1:9) [ 388.428774][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.548566][T27757] loop2: detected capacity change from 0 to 512 [ 388.567732][T27757] EXT4-fs: Ignoring removed nobh option [ 388.583947][T27757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.613248][T27757] EXT4-fs (loop2): 1 truncate cleaned up [ 388.629737][T27757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.652277][T27757] EXT4-fs (loop2): shut down requested (0) [ 388.700959][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.764972][T27766] tipc: Enabled bearer , priority 10 [ 388.842246][ T28] audit: type=1400 audit(2000001053.105:2139): avc: denied { read } for pid=27778 comm="syz.2.9669" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 388.917073][ T28] audit: type=1400 audit(2000001053.105:2140): avc: denied { open } for pid=27778 comm="syz.2.9669" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 389.164610][ T28] audit: type=1326 audit(2000001053.435:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27793 comm="syz.2.9677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7ffc0000 [ 389.209868][ T28] audit: type=1326 audit(2000001053.465:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27793 comm="syz.2.9677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7ffc0000 [ 389.252304][ T28] audit: type=1326 audit(2000001053.465:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27793 comm="syz.2.9677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f5cfffac799 code=0x7ffc0000 [ 389.290477][ T28] audit: type=1326 audit(2000001053.465:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27793 comm="syz.2.9677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7ffc0000 [ 389.314860][ T28] audit: type=1326 audit(2000001053.465:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27793 comm="syz.2.9677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfffac799 code=0x7ffc0000 [ 390.128272][ T28] audit: type=1400 audit(2000001054.395:2146): avc: denied { write } for pid=27844 comm="syz.3.9695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 391.581288][T27929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.589822][T27929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.595510][T27925] delete_channel: no stack [ 393.067883][T27980] loop6: detected capacity change from 0 to 1024 [ 393.092264][T27980] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 393.103939][T27980] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 393.120377][T27980] JBD2: no valid journal superblock found [ 393.127959][T27980] EXT4-fs (loop6): Could not load journal inode [ 393.166825][T27980] ip6_vti0 speed is unknown, defaulting to 1000 [ 393.203816][T27984] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 393.278847][T27988] Invalid argument reading file caps for ./file0 [ 393.288697][T27985] loop6: detected capacity change from 0 to 8192 [ 393.309921][T27985] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 393.543938][T28001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.607168][T28003] syzkaller1: entered promiscuous mode [ 393.620802][T28003] syzkaller1: entered allmulticast mode [ 394.035888][T28020] loop7: detected capacity change from 0 to 1024 [ 394.057224][T28020] EXT4-fs: Ignoring removed orlov option [ 394.097067][T28020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.184615][T28020] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 394.204015][T28032] loop2: detected capacity change from 0 to 4096 [ 394.230151][T28032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.254682][T28032] EXT4-fs (loop2): shut down requested (0) [ 394.269883][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.320304][T28044] loop7: detected capacity change from 0 to 128 [ 394.327083][T28040] netlink: 'syz.5.9775': attribute type 12 has an invalid length. [ 394.335772][T28040] netlink: 'syz.5.9775': attribute type 5 has an invalid length. [ 394.344152][T28040] netlink: 'syz.5.9775': attribute type 2 has an invalid length. [ 394.344362][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.352767][T28040] netlink: 'syz.5.9775': attribute type 7 has an invalid length. [ 394.352784][T28040] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9775'. [ 394.387805][T28047] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.9773'. [ 394.398713][T28046] netlink: 'syz.5.9778': attribute type 83 has an invalid length. [ 394.409378][T28044] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.9773'. [ 394.460654][T28051] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.650697][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 394.650717][ T28] audit: type=1326 audit(2000001058.915:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.721030][ T28] audit: type=1326 audit(2000001058.915:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.745550][ T28] audit: type=1326 audit(2000001058.925:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.772386][ T28] audit: type=1326 audit(2000001058.925:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.796811][ T28] audit: type=1326 audit(2000001058.925:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.820491][ T28] audit: type=1326 audit(2000001058.925:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.845016][ T28] audit: type=1326 audit(2000001058.925:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.869255][ T28] audit: type=1326 audit(2000001058.925:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.893536][ T28] audit: type=1326 audit(2000001058.925:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 394.942106][ T28] audit: type=1326 audit(2000001058.925:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28064 comm="syz.5.9783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7feab678c799 code=0x7ffc0000 [ 395.068938][T28087] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 395.164665][T28094] loop6: detected capacity change from 0 to 512 [ 395.174363][T28094] EXT4-fs: Ignoring removed bh option [ 395.187147][T28094] EXT4-fs: inline encryption not supported [ 395.195832][T28094] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.214130][T28094] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 395.233092][T28094] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9796: bg 0: block 248: padding at end of block bitmap is not set [ 395.266691][T28094] loop6: lost filesystem error report for type 5 error -117 [ 395.266898][T28094] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.9796: Failed to acquire dquot type 1 [ 395.274545][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 395.274570][ C1] EXT4-fs (loop6): last error at time 2000001059: ext4_validate_block_bitmap:441 [ 395.310842][T28094] loop6: lost filesystem error report for type 5 error -117 [ 395.311383][T28094] EXT4-fs (loop6): 1 truncate cleaned up [ 395.326870][T28102] netlink: 'syz.5.9799': attribute type 6 has an invalid length. [ 395.359909][T28094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 395.436902][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 395.505575][T28114] loop6: detected capacity change from 0 to 512 [ 395.536229][T28114] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.9803: invalid indirect mapped block 256 (level 2) [ 395.600404][T28114] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 395.600812][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 395.616672][ C0] EXT4-fs (loop6): initial error at time 2000001059: ext4_free_branches:1023: inode 11 [ 395.626628][ C0] EXT4-fs (loop6): last error at time 2000001059: ext4_free_branches:1023: inode 11 [ 395.669725][T28114] EXT4-fs (loop6): 2 truncates cleaned up [ 395.676100][T28114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.953321][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.993328][T28141] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9818'. [ 395.994001][T28143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.030610][T28143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.059832][T28146] loop7: detected capacity change from 0 to 512 [ 396.081495][T28146] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 396.116141][T28146] EXT4-fs (loop7): 1 truncate cleaned up [ 396.131168][T28146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.190281][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.729005][T17139] tipc: Subscription rejected, illegal request [ 396.987940][T28190] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.721812][T28195] ip6_vti0 speed is unknown, defaulting to 1000 [ 398.024812][T28167] kexec: Could not allocate control_code_buffer [ 398.142414][T28207] loop7: detected capacity change from 0 to 1024 [ 398.169514][T28207] EXT4-fs: Ignoring removed bh option [ 398.177443][T28195] IPVS: You probably need to specify IP address on multicast interface. [ 398.196838][T28195] IPVS: Error connecting to the multicast addr [ 398.217439][T28207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 398.241489][T28207] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.327834][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 398.541877][T28225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9850'. [ 398.562259][T28225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9850'. [ 398.846645][T28254] loop2: detected capacity change from 0 to 1024 [ 398.868994][T28254] EXT4-fs: Ignoring removed oldalloc option [ 398.878143][T28256] loop7: detected capacity change from 0 to 512 [ 398.888893][T28254] EXT4-fs: Ignoring removed bh option [ 398.921966][T28256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.940273][T28254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.950923][T28256] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.969034][T28265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.008491][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.034560][T28256] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.9864: corrupted inode contents [ 399.076759][T28256] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.9864: mark_inode_dirty error [ 399.099124][T28271] Invalid argument reading file caps for ./file0 [ 399.099057][T28256] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.9864: corrupted inode contents [ 399.120711][T28256] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.9864: mark_inode_dirty error [ 399.160363][T28272] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.9864: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 399.160363][T28272] [ 399.231688][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.323911][T28295] tun0: tun_chr_ioctl cmd 1074025675 [ 399.349752][T28295] tun0: persist enabled [ 399.358176][T28295] tun0: tun_chr_ioctl cmd 1074025675 [ 399.364227][T28295] tun0: persist enabled [ 399.464490][T28307] ip6_vti0 speed is unknown, defaulting to 1000 [ 399.689861][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 399.689881][ T28] audit: type=1400 audit(2000001063.955:2190): avc: denied { write } for pid=28339 comm="syz.6.9896" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 399.887053][T28355] netlink: 148 bytes leftover after parsing attributes in process `syz.7.9903'. [ 399.908957][T28355] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 399.949856][ T28] audit: type=1400 audit(2000001064.215:2191): avc: denied { read write } for pid=28358 comm="syz.6.9905" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 399.978804][T28361] sock: sock_set_timeout: `syz.7.9906' (pid 28361) tries to set negative timeout [ 399.979705][ T28] audit: type=1400 audit(2000001064.215:2192): avc: denied { open } for pid=28358 comm="syz.6.9905" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 400.174073][ T28] audit: type=1326 audit(2000001064.445:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28376 comm="syz.6.9914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x0 [ 400.208179][T28380] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 400.258733][ T28] audit: type=1400 audit(2000001064.525:2194): avc: denied { create } for pid=28386 comm="syz.7.9918" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 400.292618][ T28] audit: type=1400 audit(2000001064.545:2195): avc: denied { write } for pid=28386 comm="syz.7.9918" name="file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 400.326872][ T28] audit: type=1400 audit(2000001064.555:2196): avc: denied { open } for pid=28386 comm="syz.7.9918" path="/156/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 400.406424][T28402] loop6: detected capacity change from 0 to 512 [ 400.418697][T28402] EXT4-fs (loop6): 1 truncate cleaned up [ 400.435161][T28402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.470254][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.528026][T28411] loop7: detected capacity change from 0 to 512 [ 400.562630][T28411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.644422][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.699725][T28415] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.958533][T28415] netlink: 'syz.6.9930': attribute type 16 has an invalid length. [ 400.970827][T28415] netlink: 'syz.6.9930': attribute type 17 has an invalid length. [ 400.983180][T28415] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.124567][T28448] loop6: detected capacity change from 0 to 1024 [ 401.133174][T28448] EXT4-fs: inline encryption not supported [ 401.147838][T28448] EXT4-fs: Ignoring removed i_version option [ 401.163799][T28448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.182041][ T28] audit: type=1400 audit(2000001065.455:2197): avc: denied { create } for pid=28447 comm="syz.6.9943" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 401.228530][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.248891][T28409] Set syz1 is full, maxelem 65536 reached [ 401.307731][T28454] loop3: detected capacity change from 0 to 1024 [ 401.315058][T28454] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 401.326608][T28454] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 401.337498][T28454] JBD2: no valid journal superblock found [ 401.343970][T28454] EXT4-fs (loop3): Could not load journal inode [ 401.364675][T28454] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.434668][T28455] loop3: detected capacity change from 0 to 8192 [ 401.443687][T28455] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 401.873108][T28473] vhci_hcd vhci_hcd.2: invalid port number 96 [ 401.893793][T28473] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 401.934061][ T28] audit: type=1400 audit(2000001066.195:2198): avc: denied { write } for pid=28483 comm="syz.3.9959" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.011404][T28493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9964'. [ 402.011428][T28494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.041701][T28493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9964'. [ 402.324449][T28520] loop2: detected capacity change from 0 to 512 [ 402.334277][T28520] EXT4-fs: Ignoring removed orlov option [ 402.354463][T28520] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 402.364816][T28520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 402.375015][T28520] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.9974: corrupted in-inode xattr: e_value size too large [ 402.392495][T28520] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 402.393522][T28520] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.9974: couldn't read orphan inode 15 (err -117) [ 402.402774][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 402.402798][ C0] EXT4-fs (loop2): initial error at time 2000001066: ext4_iget_extra_inode:5025: inode 15 [ 402.402841][ C0] EXT4-fs (loop2): last error at time 2000001066: ext4_iget_extra_inode:5025: inode 15 [ 402.441893][T28520] loop2: lost filesystem error report for type 5 error -117 [ 402.442610][T28520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.515735][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.558879][ T28] audit: type=1326 audit(2000001066.825:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28533 comm="syz.3.9980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5b6dc799 code=0x7ffc0000 [ 403.009413][T28560] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.200885][T28576] netlink: 'syz.3.9997': attribute type 4 has an invalid length. [ 403.209104][T28576] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 403.523916][T28601] wireguard1: entered promiscuous mode [ 403.537846][T28601] wireguard1: entered allmulticast mode [ 403.625596][T28612] netlink: 'syz.7.10012': attribute type 29 has an invalid length. [ 403.643636][T28612] netlink: 'syz.7.10012': attribute type 29 has an invalid length. [ 403.663747][T28612] netlink: 500 bytes leftover after parsing attributes in process `syz.7.10012'. [ 403.684771][T28616] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10014'. [ 403.782226][T28622] loop2: detected capacity change from 0 to 8192 [ 403.950374][T28635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10021'. [ 403.970897][T28635] netlink: 88 bytes leftover after parsing attributes in process `syz.5.10021'. [ 404.276084][T28652] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10027'. [ 404.285613][T28652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10027'. [ 404.427953][T28668] loop6: detected capacity change from 0 to 512 [ 404.434809][T28668] EXT4-fs: Ignoring removed orlov option [ 404.441738][T28668] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 404.450520][T28668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 404.459338][T28668] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.10045: corrupted in-inode xattr: e_value size too large [ 404.473829][T28668] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 404.474061][T28668] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.10045: couldn't read orphan inode 15 (err -117) [ 404.483282][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 404.483323][ C1] EXT4-fs (loop6): initial error at time 2000001068: ext4_iget_extra_inode:5025: inode 15 [ 404.483350][ C1] EXT4-fs (loop6): last error at time 2000001068: ext4_iget_extra_inode:5025: inode 15 [ 404.521431][T28668] loop6: lost filesystem error report for type 5 error -117 [ 404.521976][T28668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.569836][T21175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.739757][T28675] loop7: detected capacity change from 0 to 1024 [ 404.751329][T28675] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 404.764969][T28675] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 404.767839][T28677] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10038'. [ 404.776754][T28675] JBD2: no valid journal superblock found [ 404.789774][T28675] EXT4-fs (loop7): Could not load journal inode [ 404.821589][T28675] ip6_vti0 speed is unknown, defaulting to 1000 [ 404.890460][T28678] loop7: detected capacity change from 0 to 8192 [ 404.897642][T28678] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 405.269018][T28685] netlink: 'syz.2.10041': attribute type 29 has an invalid length. [ 405.299578][T28685] netlink: 'syz.2.10041': attribute type 29 has an invalid length. [ 405.307665][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 405.307681][ T28] audit: type=1326 audit(2000001069.565:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.342791][T28685] __nla_validate_parse: 1 callbacks suppressed [ 405.342809][T28685] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10041'. [ 405.360781][ T28] audit: type=1326 audit(2000001069.565:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.398183][ T28] audit: type=1326 audit(2000001069.615:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.463568][ T28] audit: type=1326 audit(2000001069.615:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.526614][ T28] audit: type=1326 audit(2000001069.615:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.604310][ T28] audit: type=1326 audit(2000001069.615:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.651307][ T28] audit: type=1326 audit(2000001069.615:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.693585][T28714] sctp: [Deprecated]: syz.6.10056 (pid 28714) Use of int in maxseg socket option. [ 405.693585][T28714] Use struct sctp_assoc_value instead [ 405.732763][ T28] audit: type=1326 audit(2000001069.625:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.798420][ T28] audit: type=1326 audit(2000001069.625:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.841158][ T28] audit: type=1326 audit(2000001069.625:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28689 comm="syz.6.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f855bdcc799 code=0x7ffc0000 [ 405.903764][T28728] 9p: Bad value for 'rfdno' [ 405.964177][T28732] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.167559][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.194856][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.220155][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.239648][T28754] loop7: detected capacity change from 0 to 256 [ 406.246918][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.265537][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.284286][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.303972][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.316244][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.325131][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.334227][T28747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.425714][T28732] netlink: 'syz.5.10065': attribute type 16 has an invalid length. [ 406.442020][T28732] netlink: 'syz.5.10065': attribute type 17 has an invalid length. [ 406.705540][T28774] loop2: detected capacity change from 0 to 1024 [ 406.742123][T28774] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 406.759153][T28774] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 406.759566][T28780] loop6: detected capacity change from 0 to 164 [ 406.776027][T28774] JBD2: no valid journal superblock found [ 406.776232][T28780] iso9660: Unknown parameter 'hideuession' [ 406.784014][T28774] EXT4-fs (loop2): Could not load journal inode [ 406.854580][T28774] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.956153][T28790] loop2: detected capacity change from 0 to 8192 [ 406.970941][T28790] msdos: Unknown parameter 'e…WFct̝3 L;-n9;' [ 406.992808][T28793] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.393307][T28793] netlink: 'syz.7.10093': attribute type 16 has an invalid length. [ 407.403686][T28793] netlink: 'syz.7.10093': attribute type 17 has an invalid length. [ 407.736742][T28850] tipc: Started in network mode [ 407.742191][T28850] tipc: Node identity ac14140f, cluster identity 4711 [ 407.749360][T28850] tipc: Enabled bearer , priority 10 [ 408.241238][T28872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.356239][T28886] bond0: left promiscuous mode [ 408.362731][T28886] bond_slave_0: left promiscuous mode [ 408.368151][T28886] bond_slave_1: left promiscuous mode [ 408.381407][T28886] macvlan0: left promiscuous mode [ 408.391070][T28886] netlink: 'syz.5.10135': attribute type 1 has an invalid length. [ 408.413427][T28886] netlink: 'syz.5.10135': attribute type 2 has an invalid length. [ 408.592958][T28905] loop7: detected capacity change from 0 to 512 [ 408.601083][T28903] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 408.602914][T28907] syzkaller1: entered promiscuous mode [ 408.615992][T28907] syzkaller1: entered allmulticast mode [ 408.656120][T28905] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.10144: corrupted inode contents [ 408.675685][T28905] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 408.680757][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 408.696328][ C1] EXT4-fs (loop7): initial error at time 2000001072: ext4_do_update_inode:5569: inode 3 [ 408.706101][ C1] EXT4-fs (loop7): last error at time 2000001072: ext4_do_update_inode:5569: inode 3 [ 408.731023][T28905] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #3: comm syz.7.10144: mark_inode_dirty error [ 408.742424][ T35] tipc: Node number set to 2886997007 [ 408.759529][T28905] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 408.767462][T28905] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.10144: corrupted inode contents [ 408.794149][T28905] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 408.794380][T28905] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.10144: mark_inode_dirty error [ 408.815835][T28905] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 408.816682][T28905] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.10144: Failed to acquire dquot type 0 [ 408.837816][T28905] loop7: lost filesystem error report for type 5 error -117 [ 408.838300][T28905] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.10144: corrupted inode contents [ 408.863467][T28905] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 408.863703][T28905] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #16: comm syz.7.10144: mark_inode_dirty error [ 408.885167][T28905] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 408.885360][T28905] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.10144: corrupted inode contents [ 408.909005][T28905] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 408.909237][T28905] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.10144: mark_inode_dirty error [ 408.930516][T28905] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 408.930780][T28905] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.10144: corrupted inode contents [ 408.956565][T28905] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 408.956763][T28905] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 408.981715][T28905] loop7: lost filesystem error report for type 5 error -117 [ 408.981941][T28905] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.10144: corrupted inode contents [ 408.983842][T28928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10153'. [ 408.989729][T28905] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 409.010513][T28928] netlink: 75 bytes leftover after parsing attributes in process `syz.2.10153'. [ 409.011086][T28905] EXT4-fs error (device loop7): ext4_truncate:4587: inode #16: comm syz.7.10144: mark_inode_dirty error [ 409.050913][T28905] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 409.060804][T28905] loop7: lost filesystem error report for type 5 error -117 [ 409.061315][T28905] EXT4-fs (loop7): 1 truncate cleaned up [ 409.075001][T28905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.092739][T28905] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.188053][T28940] loop2: detected capacity change from 0 to 8192 [ 409.203362][T28940] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.308491][T26345] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.441495][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10163'. [ 409.456765][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10163'. [ 410.477435][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10186'. [ 410.504759][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 410.504777][ T28] audit: type=1400 audit(2000001074.775:2316): avc: denied { setopt } for pid=29002 comm="syz.5.10185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.607308][T29005] 9p: Bad value for 'wfdno' [ 410.796349][T29014] loop2: detected capacity change from 0 to 1024 [ 410.803763][ T9889] ================================================================== [ 410.811860][ T9889] BUG: KCSAN: data-race in set_nlink / set_nlink [ 410.818213][ T9889] [ 410.820528][ T9889] read to 0xffff888145086c50 of 4 bytes by task 3001 on cpu 1: [ 410.828341][ T9889] set_nlink+0x29/0xb0 [ 410.832424][ T9889] kernfs_iop_permission+0x1e2/0x220 [ 410.837720][ T9889] inode_permission+0x31f/0x3b0 [ 410.842596][ T9889] link_path_walk+0x779/0xe30 [ 410.847304][ T9889] path_lookupat+0x8c/0x500 [ 410.851812][ T9889] filename_lookup+0x190/0x390 [ 410.856584][ T9889] vfs_statx+0x96/0x170 [ 410.860744][ T9889] vfs_fstatat+0x118/0x170 [ 410.865274][ T9889] __se_sys_newfstatat+0x55/0x3e0 [ 410.870310][ T9889] __x64_sys_newfstatat+0x55/0x70 [ 410.875428][ T9889] x64_sys_call+0x2c64/0x3020 [ 410.880113][ T9889] do_syscall_64+0x12c/0x370 [ 410.884724][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.890639][ T9889] [ 410.893053][ T9889] write to 0xffff888145086c50 of 4 bytes by task 9889 on cpu 0: [ 410.900682][ T9889] set_nlink+0x99/0xb0 [ 410.904931][ T9889] kernfs_iop_permission+0x1e2/0x220 [ 410.910228][ T9889] inode_permission+0x31f/0x3b0 [ 410.915083][ T9889] link_path_walk+0x779/0xe30 [ 410.919773][ T9889] path_openat+0x1c6/0x2050 [ 410.924372][ T9889] do_file_open+0x16c/0x290 [ 410.928897][ T9889] do_sys_openat2+0x94/0x130 [ 410.933514][ T9889] __x64_sys_openat+0xf2/0x120 [ 410.938303][ T9889] x64_sys_call+0x1e39/0x3020 [ 410.943042][ T9889] do_syscall_64+0x12c/0x370 [ 410.947815][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.953726][ T9889] [ 410.956071][ T9889] value changed: 0x00000008 -> 0x00000009 [ 410.961871][ T9889] [ 410.964212][ T9889] Reported by Kernel Concurrency Sanitizer on: [ 410.970539][ T9889] CPU: 0 UID: 0 PID: 9889 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 410.979478][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.989555][ T9889] ================================================================== [ 411.009121][T29014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.048130][T19052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.301348][ C1] net_ratelimit: 1018 callbacks suppressed [ 418.301392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.315799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog