last executing test programs: 13m10.375912529s ago: executing program 32 (id=1038): r0 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\x89cqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4w\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) fcntl$addseals(r0, 0x409, 0x4) fallocate(r0, 0x0, 0x9100, 0x3) 12m53.856527872s ago: executing program 33 (id=1052): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x1}, 'port0\x00', 0x511e365990236e8, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) futex_waitv(&(0x7f0000004040)=[{0x92a7, &(0x7f0000000080)=0x2, 0x2}], 0x1, 0x0, 0x0, 0x1) 10m2.201402588s ago: executing program 34 (id=7878): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc03, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) 9m50.824092188s ago: executing program 35 (id=7792): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 9m3.059211011s ago: executing program 36 (id=9494): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x50}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m7.792161833s ago: executing program 37 (id=11042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 7m50.557394372s ago: executing program 38 (id=11489): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 7m7.742861241s ago: executing program 39 (id=13090): r0 = socket(0x10, 0x803, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 5m32.329403511s ago: executing program 40 (id=15610): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @multicast2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, 0x0, 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 5m28.836116233s ago: executing program 41 (id=15725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) 4m5.039798621s ago: executing program 42 (id=18141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840000095030400108008001540"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2m28.720166355s ago: executing program 43 (id=20548): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 2m9.459160024s ago: executing program 44 (id=21003): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)) 2m9.400846017s ago: executing program 5 (id=21008): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'veth1\x00'}}, 0x1e) close(r0) 2m9.310058291s ago: executing program 5 (id=21011): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8) 2m9.090520662s ago: executing program 5 (id=21015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0007}]}) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 2m9.012414406s ago: executing program 45 (id=21016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m9.007726805s ago: executing program 5 (id=21018): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 2m8.740884129s ago: executing program 5 (id=21020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc000000050000000006001500020000001400168010000880"], 0x38}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="bf000000000000003c001a803800048034"], 0x5c}}, 0x8000) 2m8.694319242s ago: executing program 5 (id=21022): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) read(r0, &(0x7f0000000080)=""/221, 0xdd) 2m8.651430453s ago: executing program 46 (id=21022): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) read(r0, &(0x7f0000000080)=""/221, 0xdd) 1m41.726502839s ago: executing program 2 (id=21617): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x82002) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x14440, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m40.818941514s ago: executing program 2 (id=21628): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000300)="5ddda8182e", 0x5, 0x8000e71) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r1, 0x3, 0x4100, 0x8000c62) 1m40.683401441s ago: executing program 2 (id=21635): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4173, &(0x7f0000000180)={0x0, 0xbf55, 0x10000, 0x2, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000000)={0x8, 0x401, 0x9}, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m40.320028949s ago: executing program 7 (id=21646): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(0xffffffffffffffff, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)=ANY=[]) 1m40.200212625s ago: executing program 2 (id=21649): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = eventfd(0x5e) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000240)=r2, 0x1) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m40.09622419s ago: executing program 2 (id=21652): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x17d) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x201) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m40.025042693s ago: executing program 2 (id=21654): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x16) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) 1m40.024390803s ago: executing program 7 (id=21664): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[], 0x2, 0x245, &(0x7f00000007c0)="$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") recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x40002000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m39.932279718s ago: executing program 7 (id=21657): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) close(0x3) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x36, 0x4, 0x0, @void, @value=r0}, 0x20) 1m39.839512793s ago: executing program 7 (id=21672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m39.757954747s ago: executing program 7 (id=21665): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x17d) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x201) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m39.661728781s ago: executing program 7 (id=21670): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) close(0x3) 1m24.531617076s ago: executing program 47 (id=21670): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) close(0x3) 1m24.511642338s ago: executing program 48 (id=21654): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x16) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) 45.991141655s ago: executing program 0 (id=22655): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffd, r1, &(0x7f00000003c0)="95", 0x1}]) 45.672207621s ago: executing program 0 (id=22670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000028bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000082c"], 0x42) 45.520650468s ago: executing program 0 (id=22685): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 45.345296397s ago: executing program 0 (id=22686): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 45.311256888s ago: executing program 0 (id=22688): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 45.218946623s ago: executing program 0 (id=22693): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000d8000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f00002f0000/0x3000)=nil, 0x3000) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 45.201481834s ago: executing program 49 (id=22693): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00000d8000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f00002f0000/0x3000)=nil, 0x3000) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 25.095821644s ago: executing program 3 (id=23273): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_clone3(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 25.017342378s ago: executing program 3 (id=23276): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000280)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000100)) 24.072099445s ago: executing program 3 (id=23292): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2000000b}) 24.017096197s ago: executing program 3 (id=23293): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x125045, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) 23.97260563s ago: executing program 3 (id=23294): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x3442, &(0x7f00000001c0)={0x0, 0xddae, 0x8, 0x2, 0x31a}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000440)=[{}], 0x1, 0x0, 0x0, 0x0) 23.75867661s ago: executing program 3 (id=23295): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 23.733411242s ago: executing program 50 (id=23295): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.563019983s ago: executing program 4 (id=23884): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x3) bind$bt_l2cap(r0, &(0x7f0000002c40)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) listen(r0, 0x90004) accept(r0, 0x0, 0x0) 1.448878099s ago: executing program 4 (id=23886): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, r1}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 1.340076095s ago: executing program 4 (id=23890): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 1.104988116s ago: executing program 4 (id=23900): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x60, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x52, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x3e, 0x0, @gue={{0x1, 0x1, 0x1, 0x29, 0x0, @void}, "13289421def9f4ee424efb27cbd5559b912145fd25834606938fd76ead0492871b9d2388b4581379a70f94d4bcfca9b508c6"}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4044cc0}, 0x8000002) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/53, 0x35}], 0x13) 1.104783106s ago: executing program 8 (id=23902): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0xe, 0x0, "5496a5dddc12b8ad4394a6a4d4dd5e5003c2cc26e095388c3dcf697675feed1499a8e540d53a3993d6386d8607e255ec6bf788c74746e54dbb6129e96bc8b7ce178a7c9e3ef1cf49704783a34f4df6f5"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, 0x0, 0x0, 0x2, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 1.069509718s ago: executing program 8 (id=23905): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300", @ANYRES32, @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 1.034812779s ago: executing program 8 (id=23908): io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x126, @time={0xfffffff1, 0xfffffffe}, 0x0, {}, 0x2, 0x0, 0xf}) 902.226956ms ago: executing program 8 (id=23914): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x66200, 0x99) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20040, 0x0) 696.302656ms ago: executing program 9 (id=23934): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) 671.866287ms ago: executing program 1 (id=23924): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone3(&(0x7f00000006c0)={0x100080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/95, 0x5f}, {0x0}], 0x2, &(0x7f0000001f00)=[{&(0x7f0000000740)=""/253, 0xfd}], 0x1, 0x0) capset(0x0, 0x0) 671.768937ms ago: executing program 9 (id=23925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 670.292577ms ago: executing program 6 (id=23936): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, 0x0) 641.085089ms ago: executing program 1 (id=23926): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="8fd6032e42e1e60450b9071516560313587d89775e2c6003f14df6c398e06562a2b66d5889b49ef24f109b56185fe4ef7327cc2a1001ac649e88e542bd46c73047aa0c69c6cafd2d06209a1103720653035021b9a38cd449a170507e71ab378f5cbfc782de67406a1e2e5cbce300dd022d5b6a15a0f8034d2aa27ec310f39e63aed7c573ea018eac8823f2a88f321eb6bf4455ff955a9549df0535bb0ec1d34e7f65c44ad173e835f65c2347e008c9289f3e39612f28495ad51bc23c63ae4ffdfeb6f905d5d7b86058f246f05740e2adf845"}, {&(0x7f0000000100)="40a681186b2989387bf0ce05934b494def9ba167d3e9f367f8441a834772748ac2c33d2a623ffd7d4d9d041e5447b5b1c6181c26"}, {&(0x7f0000000600)="df37020000fb413a00aa45c368f6d341fd64b475b6632e58e9e878691ce1a8fa2fc7"}, {&(0x7f0000000340)="b4b001b898d182a5002b91abc22b77cd0924fd17882ee395b6fb7853f81d1de305f76452680ac35d8ae3e91d3efe9e27248ee86effbcd662d6ffccb475933470fd2c8e35e314b53dc1d643ceebde5ad58fe7df871d36ddc9"}, {&(0x7f00000003c0)="53cbea7694163a80b924c080cf1d34f3fcdf4e426e7fec8aac428f368543d235c53c8aab3df7e2d6a3df41c6aa18ff581c0f966bc884e17242cb94d7262f505eb922de891e19f30f3ba94edc3c9d10a55f2a53d735918c0838c2aa92ed4fe1e6cbbc50610040843bc946"}], 0x0, &(0x7f0000000580)=[@cred, @cred], 0x0, 0x80}}, {{&(0x7f00000006c0)=@file={0x1, './file0/file0\x00'}, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)="c188b535ad6af88913a80cb1e9a9b30a2ca5d1c7814397f589daa13c0200000094729d2105afad86bf7fffb0fcf4b0274df41bca"}, {&(0x7f0000000740)="4ea50911e68114722d3e4e1eb834348a"}, {&(0x7f0000000780)="a56bfec4ef6447ca814da2fe35c32b250f099f43e0684cfbae62d8cca721a5abfc47181675e8a0ee07805974ed8dff73afcdcaef6b627b55d5cb76dd8ad4308a80967a9415a3171a9533f594c78fe19fe7b769f891c72c7d50610ce7d7f7794087b1faaac88b0d874324b6e79b7642ac4e906469fa21303773d75ea66c983db1ec548940288483875a8072bddb1c4acd28f1057621ce78"}], 0x0, &(0x7f0000000880)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred], 0x0, 0x20044041}}], 0x37, 0x0) close(0x3) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 640.241499ms ago: executing program 9 (id=23939): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x398, 0x0, 0x268, 0x268, 0x268, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@loopback, @rand_addr=0x64010101, 0x0, 0xffffffff, 'dvmrp0\x00', 'lo\x00', {}, {0xff}, 0x2e, 0x8b859fdf66f2437e, 0x28}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xae, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x4, 0x0}, 0xffffffff, 0x0, 'macvlan0\x00', 'nicvf0\x00', {}, {0xff}, 0x89, 0x3, 0x42}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, 0x0, 0xd, [0x16, 0x34, 0x1f, 0x7, 0x1b, 0x39, 0x21, 0x32, 0x3, 0x20, 0xb, 0x29, 0x9, 0x2f, 0x8], 0x0, 0x4303, 0x8000000000000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 575.362792ms ago: executing program 1 (id=23927): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0xe, 0x0, "5496a5dddc12b8ad4394a6a4d4dd5e5003c2cc26e095388c3dcf697675feed1499a8e540d53a3993d6386d8607e255ec6bf788c74746e54dbb6129e96bc8b7ce178a7c9e3ef1cf49704783a34f4df6f5"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, 0x0, 0x0, 0x2, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 575.272592ms ago: executing program 6 (id=23929): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) 573.066132ms ago: executing program 9 (id=23942): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x100, 0x80000000004}, 0xa822, 0x4005, 0xb, 0x3, 0x2, 0xff000000, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x878, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x8000, 0x7, 0xe7ac, 0x8, 0x1, 0x7, 0x7, 0x4, 0xff, 0x8d3c, 0x8, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9c, 0x6, 0x80, 0x7, 0x3, 0x44, 0x1000, 0x8, 0x80000000, 0x100, 0x8, 0x7, 0x8cc, 0xe3ad, 0x7, 0x7, 0x1b, 0x7f, 0x0, 0x2, 0x16, 0x8372, 0x4, 0x7, 0x9, 0x8, 0x7fffffff, 0x3, 0xc64, 0x4, 0x3, 0x7fff, 0x2f, 0xe, 0x7480, 0x7, 0x1, 0x2, 0x5, 0x1a700000, 0x2, 0x3ff, 0x5, 0x40, 0x401, 0x7, 0x1, 0x2, 0x0, 0x0, 0x5, 0x2, 0x5, 0x5a90, 0xfffffffb, 0x400, 0x8, 0x8000, 0x3, 0x80000000, 0xe93, 0x200, 0xfffffff9, 0x7, 0x6, 0x7, 0x9, 0xb0, 0x3f1, 0x80000000, 0x7, 0x8, 0xfffffff3, 0x8, 0x40, 0xfffffff6, 0x4, 0xfffffffa, 0xffffff0c, 0x1000, 0xb1, 0xfff, 0xffff8001, 0xffffffc0, 0x5, 0x8001, 0x3, 0x340, 0x9, 0x6, 0x7, 0x7, 0x3ff, 0xfffffeff, 0x3, 0x4, 0x9, 0xfffffffd, 0x5, 0x0, 0x1, 0xfffffffe, 0xff, 0x200, 0x4, 0x20000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8001, 0x2, 0x6, 0xc59, 0xffff, 0x8, 0x1, 0x40, 0x2, 0xffffffff, 0xffff8000, 0x1, 0x69b, 0xfffffffa, 0x2, 0x63f4, 0xb534, 0x89a, 0x9, 0x7fff, 0x400, 0x4, 0x9, 0x4000, 0xfffffff8, 0x4, 0x0, 0x101, 0x0, 0x9, 0x0, 0x20000, 0x7fffffff, 0xd, 0xfffffffb, 0x40, 0x6, 0x3ff, 0x4, 0x4c08, 0x1, 0x80, 0x1000, 0x5, 0x3, 0x6, 0x9, 0x3, 0x3, 0x10000, 0x7fff, 0x1d3c, 0x0, 0x2ee3, 0x9a, 0x8, 0x10000, 0xf3a5, 0x0, 0x2, 0x2, 0x2, 0x80000000, 0x4, 0x0, 0xffffffff, 0x100, 0x8, 0x3, 0x6, 0xfffffffd, 0x3, 0xd, 0x5, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7fff, 0x5, 0x77a6, 0x0, 0x7, 0x400, 0x10000, 0x7f, 0xfffffffc, 0x0, 0x6, 0x5, 0x4, 0x6, 0x47, 0xaa, 0xe, 0x8, 0x7ff, 0x800, 0x7, 0x1893, 0x4, 0x1, 0x1, 0x8, 0x80000001, 0x0, 0x10, 0x80000001, 0x1, 0x8001, 0x9b6f, 0x2, 0x2f, 0x61, 0x8, 0x5, 0x8001, 0x401, 0x4, 0x31268a4e, 0x7fffffff, 0x1, 0x4, 0x2, 0x8, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x60e9, 0x8, 0xa, 0xf3a, 0x0, {0xb, 0x0, 0x1, 0x7, 0x9dcf, 0x1}, {0x6, 0x0, 0xe, 0xfffd, 0x9, 0x2}, 0x7fffffff, 0x2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x67, 0x9, 0x8, 0x3ff, 0x10, 0x840, 0x7fff, 0x68, 0x1, 0x2, 0xdb3, 0x5, 0x40, 0x6, 0x400, 0xd, 0x2537, 0x4, 0x4, 0x8, 0x100, 0x5, 0x8, 0x0, 0xffff, 0x7, 0x9, 0x7, 0xb, 0x3, 0x0, 0x400, 0x2, 0x10001, 0x7ff, 0xfffffffe, 0xffff8930, 0x2, 0x5, 0xffffffff, 0x8, 0x7, 0xa4, 0x401, 0x2, 0x100, 0x5, 0x3, 0x10000, 0x5, 0x0, 0x2, 0xa, 0x1, 0x8001, 0x4, 0x7, 0x8001, 0xc, 0x8, 0x10001, 0xa63, 0x3, 0x6, 0x4, 0x80, 0x2, 0x6, 0x7, 0x1, 0x8000, 0x7, 0x9, 0x9, 0xd7dd, 0xe2b, 0xe9ee, 0xfffffffd, 0x3, 0xffff, 0x3, 0x6, 0x3, 0x62, 0xa9, 0x20000, 0x0, 0x80, 0xd1c, 0xfffffff8, 0x10, 0x53e, 0xb2, 0x4, 0x8e, 0xd, 0x5, 0x1, 0x101, 0x8, 0x3, 0xfffffe00, 0x3ff, 0x0, 0x8, 0x1, 0x10, 0x3, 0xfff, 0x5, 0x6, 0xfffffff7, 0xa, 0x0, 0x10001, 0x81, 0xa, 0x9f6, 0x1ff, 0x0, 0x10, 0x40, 0x8, 0x7, 0x8, 0x800, 0x8, 0x10001, 0x4, 0x7, 0x3, 0x5, 0x80, 0x2, 0x0, 0x7, 0x800, 0x81, 0x80000000, 0xa, 0xec32, 0x1, 0x0, 0x4f, 0x2, 0x6d, 0x200, 0xd4b0, 0x9, 0x0, 0x2, 0x5, 0x9, 0x6, 0x1, 0x5, 0x7ff, 0x9, 0xfffffffb, 0x8, 0x1, 0xc, 0x1, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x4aec5ca0, 0x0, 0x2, 0x5, 0x26e8, 0xcf5b, 0xffff, 0x3, 0x2800, 0xffffffff, 0x9, 0x1, 0xfffffffe, 0x10001, 0x4, 0x67, 0x6, 0x4e, 0x0, 0xf40, 0x3, 0x10001, 0xffffffff, 0x0, 0x2, 0xfffff504, 0x9, 0xfffffff9, 0x7ff, 0x2, 0x80, 0x80000001, 0x7, 0x200, 0x7, 0x5, 0x4, 0x10001, 0x1ff, 0x2, 0x8, 0x191, 0x5, 0x80000000, 0x5, 0x7, 0x401, 0x1, 0x7, 0x8, 0x5, 0x7, 0x8, 0x9, 0x4, 0x3, 0x5, 0x8001, 0x3, 0x9, 0x4, 0x5, 0x1, 0x2342, 0x6cf, 0x4, 0x3, 0x6, 0x9, 0x5, 0x9, 0x3, 0xa7, 0x0, 0x6, 0x30, 0x81, 0x1, 0xfff, 0x1, 0xb, 0x200, 0x4, 0x5, 0x759, 0xd, 0x4]}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 555.919563ms ago: executing program 1 (id=23930): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204004, &(0x7f0000000440)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f0000002dc0)="$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") mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 532.319814ms ago: executing program 9 (id=23931): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) 484.193897ms ago: executing program 6 (id=23932): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) 482.763207ms ago: executing program 1 (id=23933): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r0, r1, 0x0, 0x0, 0x1000) 464.232647ms ago: executing program 6 (id=23935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000340)={0x0, 0x0}) 444.170629ms ago: executing program 6 (id=23937): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in=@dev, 0x1000}, [@srcaddr={0x14, 0xd, @in6=@local}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 384.163992ms ago: executing program 1 (id=23938): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0xe, 0x747f}, 0xa, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) wait4(r0, 0x0, 0x2, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000080)={0x5, 0x3, 0x69b, 0x10000, 0x50b7}) 52.469158ms ago: executing program 8 (id=23940): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone3(&(0x7f00000006c0)={0x100080, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/95, 0x5f}, {0x0}], 0x2, &(0x7f0000001f00)=[{&(0x7f0000000740)=""/253, 0xfd}], 0x1, 0x0) capset(0x0, 0x0) 51.903408ms ago: executing program 6 (id=23951): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x66200, 0x99) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20040, 0x0) 47.982728ms ago: executing program 4 (id=23952): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x7, 0x100}, 0x15108, 0x0, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) chown(0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1100) 27.819839ms ago: executing program 8 (id=23941): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 27.336489ms ago: executing program 9 (id=23954): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x6d6e, 0x1c080, 0x1, 0x20002f7}) 0s ago: executing program 4 (id=23943): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18090000080000000000000000000000850000001100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) kernel console output (not intermixed with test programs): ): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.21851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 789.531986][T26379] loop0: detected capacity change from 0 to 512 [ 789.588989][ T28] audit: type=1326 audit(2000001818.571:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26321 comm="syz.1.21851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 789.589918][T26379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.771673][T26379] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 789.952998][T26379] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.21875: corrupted inode contents [ 790.002270][T26413] EXT4-fs (loop0): shut down requested (2) [ 790.014811][T26379] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.21875: mark_inode_dirty error [ 790.057793][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.083530][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.087315][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.137565][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.156268][ T3476] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 790.170565][ T3476] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 790.191319][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.231824][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.251253][T26421] loop0: detected capacity change from 0 to 4096 [ 790.267733][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.276809][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.286787][T26421] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 790.326108][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21885'. [ 790.464107][T26437] loop9: detected capacity change from 0 to 1024 [ 790.497034][T26437] EXT4-fs (loop9): filesystem is read-only [ 790.527086][T26437] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 790.564645][T26437] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 790.595432][T26444] netlink: 'syz.6.21899': attribute type 1 has an invalid length. [ 790.617799][T26437] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 790.633976][T26444] netlink: 'syz.6.21899': attribute type 2 has an invalid length. [ 790.658821][T26437] EXT4-fs error (device loop9): ext4_get_journal_inode:5863: comm syz.9.21896: inode #1: comm syz.9.21896: iget: illegal inode # [ 790.710172][T26437] loop9: lost filesystem error report for type 5 error -117 [ 790.710373][T26437] EXT4-fs (loop9): no journal found [ 790.713706][T26453] SELinux: failed to load policy [ 790.717802][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 790.734518][ C0] EXT4-fs (loop9): initial error at time 2000001820: ext4_get_journal_inode:5863 [ 790.743786][ C0] EXT4-fs (loop9): last error at time 2000001820: ext4_get_journal_inode:5863 [ 790.809565][T26437] EXT4-fs (loop9): can't get journal size [ 790.832418][T26437] EXT4-fs error (device loop9): __ext4_fill_super:5563: inode #2: comm syz.9.21896: iget: special inode unallocated [ 790.857749][T26437] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 790.857881][T26437] EXT4-fs (loop9): get root inode failed [ 790.887714][T26437] EXT4-fs (loop9): mount failed [ 790.932424][T26437] loop9: detected capacity change from 0 to 512 [ 790.981049][T26437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 791.020872][T26437] ext4 filesystem being mounted at /199/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.115159][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 791.341688][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 791.341706][ T28] audit: type=1400 audit(2000001820.881:5656): avc: denied { ioctl } for pid=26478 comm="syz.8.21914" path="socket:[188050]" dev="sockfs" ino=188050 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 791.557757][T26503] loop9: detected capacity change from 0 to 512 [ 791.621487][T26503] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.672171][T26503] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 791.710026][T26503] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.21922: corrupted inode contents [ 791.732167][T26503] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.21922: mark_inode_dirty error [ 791.754037][T26503] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.21922: corrupted inode contents [ 791.768373][T26513] EXT4-fs (loop9): shut down requested (2) [ 791.810557][T26503] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.21922: mark_inode_dirty error [ 791.897465][ T28] audit: type=1400 audit(2000001821.431:5657): avc: denied { mount } for pid=26522 comm="syz.1.21930" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 791.921531][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.958082][ T12] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 791.988352][T26528] bond1: entered promiscuous mode [ 792.085786][ T28] audit: type=1326 audit(2000001821.621:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.1.21945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 792.176614][ T28] audit: type=1326 audit(2000001821.651:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.1.21945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 792.220467][T26544] __nla_validate_parse: 100 callbacks suppressed [ 792.220483][T26544] netlink: 56 bytes leftover after parsing attributes in process `syz.1.21938'. [ 792.272892][ T28] audit: type=1326 audit(2000001821.661:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.1.21945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 792.338010][T26550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.357999][ T28] audit: type=1326 audit(2000001821.661:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.1.21945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 792.359355][T26550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.451034][T26547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21939'. [ 792.468080][ T28] audit: type=1326 audit(2000001821.661:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26535 comm="syz.1.21945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 792.504210][T26547] netlink: 'syz.8.21939': attribute type 1 has an invalid length. [ 792.531120][T26547] netlink: 'syz.8.21939': attribute type 2 has an invalid length. [ 792.552669][ T28] audit: type=1400 audit(2000001821.761:5663): avc: denied { read } for pid=26539 comm="syz.9.21935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 792.652206][T26556] loop9: detected capacity change from 0 to 256 [ 792.868357][T26576] loop0: detected capacity change from 0 to 512 [ 792.887444][T26576] msdos: Bad value for 'umask' [ 792.911545][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21954'. [ 792.944090][T26576] netlink: 'syz.0.21954': attribute type 1 has an invalid length. [ 792.975651][T26576] netlink: 'syz.0.21954': attribute type 2 has an invalid length. [ 793.019484][T26578] bond1: entered promiscuous mode [ 793.034262][ T28] audit: type=1400 audit(2000001822.561:5664): avc: denied { read write } for pid=22918 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.090640][T26583] loop9: detected capacity change from 0 to 128 [ 793.230387][T26599] netlink: 40 bytes leftover after parsing attributes in process `syz.9.21962'. [ 793.252400][T26599] netlink: 40 bytes leftover after parsing attributes in process `syz.9.21962'. [ 793.467115][T26612] loop9: detected capacity change from 0 to 1024 [ 793.498210][T26612] EXT4-fs: Ignoring removed orlov option [ 793.524221][T26612] EXT4-fs: Ignoring removed nobh option [ 793.568157][T26612] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.668707][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.783937][T26635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21978'. [ 794.038465][T26658] loop0: detected capacity change from 0 to 164 [ 794.158937][T26668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26668 comm=syz.0.21996 [ 794.405307][T26690] EXT4-fs: Ignoring removed orlov option [ 794.420073][T26690] EXT4-fs: Ignoring removed nobh option [ 794.446857][T26690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.520424][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.359322][T26736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.373531][T26736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.093088][T26805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.102782][T26805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.391932][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 796.391976][ T28] audit: type=1326 audit(2000001825.931:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26834 comm="syz.9.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daac1c799 code=0x7ffc0000 [ 796.432764][ T28] audit: type=1326 audit(2000001825.931:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26834 comm="syz.9.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daac1c799 code=0x7ffc0000 [ 796.487742][ T28] audit: type=1326 audit(2000001825.931:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26834 comm="syz.9.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f9daac1c799 code=0x7ffc0000 [ 796.542909][ T28] audit: type=1326 audit(2000001825.931:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26834 comm="syz.9.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daac1c799 code=0x7ffc0000 [ 796.607783][ T28] audit: type=1326 audit(2000001825.931:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26834 comm="syz.9.22048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daac1c799 code=0x7ffc0000 [ 796.691370][ T28] audit: type=1400 audit(2000001826.181:5852): avc: denied { ioctl } for pid=26850 comm="syz.0.22054" path="socket:[189822]" dev="sockfs" ino=189822 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 796.729676][ T28] audit: type=1400 audit(2000001826.201:5853): avc: denied { mounton } for pid=26868 comm="syz.1.22062" path="/proc/1242/task" dev="proc" ino=189835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 796.755004][ T28] audit: type=1400 audit(2000001826.201:5854): avc: denied { mount } for pid=26868 comm="syz.1.22062" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 796.781600][ T28] audit: type=1400 audit(2000001826.211:5855): avc: denied { associate } for pid=26871 comm="syz.1.22062" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 796.818587][ T28] audit: type=1400 audit(2000001826.261:5856): avc: denied { write } for pid=26872 comm="syz.8.22064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 797.098156][T26896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.110466][T26896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.305513][T26908] set_capacity_and_notify: 1 callbacks suppressed [ 797.305532][T26908] loop9: detected capacity change from 0 to 256 [ 797.339549][T26908] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 797.391279][T26916] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 797.398883][T26916] vhci_hcd vhci_hcd.2: invalid port number 96 [ 797.405106][T26916] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 797.688445][T26930] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.695837][T26930] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.705016][T26942] loop0: detected capacity change from 0 to 128 [ 797.754613][T26942] syz.0.22093: attempt to access beyond end of device [ 797.754613][T26942] loop0: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 797.770774][T26942] syz.0.22093: attempt to access beyond end of device [ 797.770774][T26942] loop0: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 797.774105][T26930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.785912][T26942] syz.0.22093: attempt to access beyond end of device [ 797.785912][T26942] loop0: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 797.808545][T26942] syz.0.22093: attempt to access beyond end of device [ 797.808545][T26942] loop0: rw=2049, sector=234, nr_sectors = 8 limit=128 [ 797.809714][T26930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.838917][ T2042] kworker/u8:12: attempt to access beyond end of device [ 797.838917][ T2042] loop0: rw=1, sector=138, nr_sectors = 2 limit=128 [ 797.864717][T26948] SELinux: failed to load policy [ 797.870451][T26950] loop0: detected capacity change from 0 to 256 [ 797.893540][T26950] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 797.912305][ T2037] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.957729][ T2037] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.977128][ T2037] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.999053][ T2037] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.263621][T26972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.281793][T26972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.589629][T26996] batman_adv: batadv0: Adding interface: gretap1 [ 798.596264][T26996] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.622261][T26996] batman_adv: batadv0: Interface activated: gretap1 [ 798.659347][T27000] loop0: detected capacity change from 0 to 256 [ 798.676770][T27000] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 799.932019][T27082] batman_adv: batadv0: Interface deactivated: gretap1 [ 800.044329][T27097] loop0: detected capacity change from 0 to 512 [ 800.057519][T27097] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.22144: bg 0: block 393: padding at end of block bitmap is not set [ 800.077355][T27097] loop0: lost filesystem error report for type 5 error -117 [ 800.077563][T27097] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 800.084939][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 800.084964][ C0] EXT4-fs (loop0): initial error at time 2000001829: ext4_validate_block_bitmap:441 [ 800.084988][ C0] EXT4-fs (loop0): last error at time 2000001829: ext4_validate_block_bitmap:441 [ 800.119068][T27097] loop0: lost filesystem error report for type 5 error -117 [ 800.119358][T27097] EXT4-fs (loop0): 2 truncates cleaned up [ 800.134386][T27097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.165392][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.341879][T27128] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 800.366057][T27128] vhci_hcd vhci_hcd.2: invalid port number 96 [ 800.385595][T27128] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 800.993239][T27196] loop9: detected capacity change from 0 to 512 [ 801.028503][T27196] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.22173: bg 0: block 393: padding at end of block bitmap is not set [ 801.047996][T27196] loop9: lost filesystem error report for type 5 error -117 [ 801.048152][T27196] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 801.064338][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 801.064357][ C0] EXT4-fs (loop9): initial error at time 2000001830: ext4_validate_block_bitmap:441 [ 801.064382][ C0] EXT4-fs (loop9): last error at time 2000001830: ext4_validate_block_bitmap:441 [ 801.090204][T27196] loop9: lost filesystem error report for type 5 error -117 [ 801.094682][T27196] EXT4-fs (loop9): 2 truncates cleaned up [ 801.126663][T27196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.170130][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.204789][T27213] SELinux: failed to load policy [ 801.293438][T27230] loop9: detected capacity change from 0 to 1024 [ 801.342238][T27230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.370238][T27233] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 801.371842][T27226] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.384843][T27226] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.398648][T27233] vhci_hcd vhci_hcd.2: invalid port number 96 [ 801.404974][T27233] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 801.486768][T27226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.497985][T27226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.558891][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.583123][ T2037] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.613524][ T2037] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.638218][ T2037] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.667396][ T2037] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.910329][T27273] loop9: detected capacity change from 0 to 128 [ 802.015780][T27273] syz.9.22183: attempt to access beyond end of device [ 802.015780][T27273] loop9: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 802.075530][T27273] syz.9.22183: attempt to access beyond end of device [ 802.075530][T27273] loop9: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 802.100409][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 802.100424][ T28] audit: type=1400 audit(2000001831.641:5916): avc: denied { mount } for pid=27288 comm="syz.0.22185" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 802.177833][T27291] SELinux: failed to load policy [ 802.299927][ T12] kworker/u8:0: attempt to access beyond end of device [ 802.299927][ T12] loop9: rw=1, sector=138, nr_sectors = 2 limit=128 [ 802.335707][ T28] audit: type=1400 audit(2000001831.871:5917): avc: denied { module_request } for pid=27297 comm="syz.9.22187" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 802.378285][ T28] audit: type=1400 audit(2000001831.911:5918): avc: denied { write } for pid=27300 comm="syz.0.22189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 802.398998][ T28] audit: type=1400 audit(2000001831.921:5919): avc: denied { mount } for pid=27297 comm="syz.9.22187" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 802.453249][T27307] loop0: detected capacity change from 0 to 512 [ 802.475482][T27307] ext4: Unknown parameter 'uid<00000000000000060929' [ 802.491954][ T28] audit: type=1400 audit(2000001832.031:5920): avc: denied { read } for pid=27306 comm="syz.0.22190" dev="nsfs" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 802.524919][T27307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22190'. [ 802.545059][ T28] audit: type=1400 audit(2000001832.051:5921): avc: denied { open } for pid=27306 comm="syz.0.22190" path="net:[4026532519]" dev="nsfs" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 802.578871][ T28] audit: type=1400 audit(2000001832.061:5922): avc: denied { write } for pid=27306 comm="syz.0.22190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 802.637957][ T28] audit: type=1400 audit(2000001832.061:5923): avc: denied { read } for pid=27306 comm="syz.0.22190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 802.945213][ T28] audit: type=1400 audit(2000001832.481:5924): avc: denied { execute } for pid=27323 comm="syz.9.22197" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=190485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 803.098361][T27337] batman_adv: batadv0: Adding interface: gretap1 [ 803.108380][T27337] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.134410][T27337] batman_adv: batadv0: Interface activated: gretap1 [ 803.141800][T27340] syzkaller1: entered promiscuous mode [ 803.147426][T27340] syzkaller1: entered allmulticast mode [ 803.727517][T27372] batman_adv: batadv0: Adding interface: gretap1 [ 803.734181][T27372] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.760140][T27372] batman_adv: batadv0: Interface activated: gretap1 [ 806.260576][T27380] SELinux: failed to load policy [ 806.300710][ T28] audit: type=1400 audit(2000001835.841:5925): avc: denied { watch } for pid=27385 comm="syz.9.22226" path="/275" dev="tmpfs" ino=1439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 806.326418][T27384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22225'. [ 806.573589][T27418] syzkaller1: entered promiscuous mode [ 806.589229][T27418] syzkaller1: entered allmulticast mode [ 807.240258][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 807.240277][ T28] audit: type=1400 audit(2000001836.781:5933): avc: denied { create } for pid=27477 comm="syz.8.22268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 807.270719][ T28] audit: type=1400 audit(2000001836.781:5934): avc: denied { bind } for pid=27477 comm="syz.8.22268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 807.291595][ T28] audit: type=1400 audit(2000001836.781:5935): avc: denied { setopt } for pid=27477 comm="syz.8.22268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 807.590200][ T28] audit: type=1400 audit(2000001837.131:5936): avc: denied { create } for pid=27505 comm="syz.6.22290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 807.663344][ T28] audit: type=1400 audit(2000001837.201:5937): avc: denied { write } for pid=27505 comm="syz.6.22290" path="socket:[191856]" dev="sockfs" ino=191856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 807.816153][T27517] loop0: detected capacity change from 0 to 128 [ 807.850286][T27517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22295'. [ 807.860335][T27517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.22295'. [ 808.034900][ T28] audit: type=1400 audit(2000001837.571:5938): avc: denied { attach_queue } for pid=27539 comm="syz.1.22294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 808.151051][T27546] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22298'. [ 808.196300][T27552] team0: Port device syz_tun added [ 808.243066][ T28] audit: type=1400 audit(2000001837.781:5939): avc: denied { write } for pid=27553 comm="syz.8.22301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 808.264924][ T28] audit: type=1400 audit(2000001837.801:5940): avc: denied { read } for pid=27553 comm="syz.8.22301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 808.401231][T27563] sctp: [Deprecated]: syz.1.22305 (pid 27563) Use of int in max_burst socket option deprecated. [ 808.401231][T27563] Use struct sctp_assoc_value instead [ 808.423717][ T28] audit: type=1400 audit(2000001837.961:5941): avc: denied { bind } for pid=27562 comm="syz.1.22305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 808.452496][ T28] audit: type=1400 audit(2000001837.961:5942): avc: denied { name_bind } for pid=27562 comm="syz.1.22305" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 808.515793][T27573] blktrace: Concurrent blktraces are not allowed on loop16 [ 808.533196][T27575] netlink: 60 bytes leftover after parsing attributes in process `syz.6.22311'. [ 808.542500][T27575] netlink: 60 bytes leftover after parsing attributes in process `syz.6.22311'. [ 808.984347][T27620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22330'. [ 808.993940][T27620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22330'. [ 809.004007][T27620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22330'. [ 809.216725][T27645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22339'. [ 809.555356][T27686] netlink: 28 bytes leftover after parsing attributes in process `syz.8.22368'. [ 809.565156][T27682] loop9: detected capacity change from 0 to 1024 [ 809.584538][T27682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 809.617334][T27682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.668695][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.131317][T27802] loop9: detected capacity change from 0 to 1024 [ 811.140471][T27802] EXT4-fs: Ignoring removed orlov option [ 811.171344][T27802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.293185][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.571109][T27841] SELinux: Context ›Y is not valid (left unmapped). [ 812.059339][T27880] sctp: [Deprecated]: syz.8.22440 (pid 27880) Use of int in max_burst socket option deprecated. [ 812.059339][T27880] Use struct sctp_assoc_value instead [ 812.115541][T27889] syzkaller1: entered promiscuous mode [ 812.121321][T27889] syzkaller1: entered allmulticast mode [ 812.871402][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 812.871419][ T28] audit: type=1400 audit(2000001842.411:5998): avc: denied { getopt } for pid=27925 comm="syz.9.22459" lport=56411 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 812.942594][T27933] loop0: detected capacity change from 0 to 1024 [ 812.967858][ T28] audit: type=1326 audit(2000001842.501:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.1.22462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 812.993413][ T28] audit: type=1326 audit(2000001842.511:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.1.22462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 813.018229][ T28] audit: type=1326 audit(2000001842.531:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.1.22462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 813.042936][ T28] audit: type=1326 audit(2000001842.531:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.1.22462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 813.048544][T27933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.067121][ T28] audit: type=1326 audit(2000001842.531:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27935 comm="syz.1.22462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc919d4c799 code=0x7ffc0000 [ 813.152873][T27944] loop9: detected capacity change from 0 to 1024 [ 813.169587][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.198611][T27944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.283302][T27951] SELinux: failed to load policy [ 813.396477][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.431486][ T28] audit: type=1400 audit(2000001842.971:6004): avc: denied { create } for pid=27968 comm="syz.6.22480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.465171][ T28] audit: type=1400 audit(2000001842.991:6005): avc: denied { write } for pid=27968 comm="syz.6.22480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.486152][ T28] audit: type=1400 audit(2000001842.991:6006): avc: denied { read } for pid=27968 comm="syz.6.22480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.486371][T27975] Invalid argument reading file caps for ./file0 [ 813.494971][T27978] futex_wake_op: syz.1.22482 tries to shift op by -1; fix this program [ 813.556591][ T28] audit: type=1400 audit(2000001843.091:6007): avc: denied { sys_module } for pid=27981 comm="syz.0.22483" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 814.292574][T28005] loop0: detected capacity change from 0 to 128 [ 814.315885][T28005] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 814.332365][T28005] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.357052][T28005] EXT4-fs (loop0): shut down requested (2) [ 814.406872][T22999] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.446222][T28014] loop0: detected capacity change from 0 to 2048 [ 814.499108][T28019] syzkaller1: entered promiscuous mode [ 814.504637][T28019] syzkaller1: entered allmulticast mode [ 814.585188][T28027] Invalid argument reading file caps for ./file0 [ 814.742750][T28035] SELinux: failed to load policy [ 815.676936][T28070] Invalid argument reading file caps for ./file0 [ 815.707148][T28075] loop0: detected capacity change from 0 to 1024 [ 815.752475][T28075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.767957][T28085] loop9: detected capacity change from 0 to 512 [ 815.781198][T28085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.810128][T28085] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 815.854769][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.967232][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.117109][T28138] loop0: detected capacity change from 0 to 512 [ 816.143314][T28138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.157446][T28138] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 816.237151][T22999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.397979][T28168] hsr0: entered allmulticast mode [ 816.403249][T28168] hsr_slave_0: entered allmulticast mode [ 816.409574][T28168] hsr_slave_1: entered allmulticast mode [ 816.416122][T28168] __nla_validate_parse: 14 callbacks suppressed [ 816.416140][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22563'. [ 816.434808][T28168] hsr_slave_0: left promiscuous mode [ 816.440797][T28168] hsr_slave_1: left promiscuous mode [ 816.447157][T28168] hsr0 (unregistering): left allmulticast mode [ 816.540792][T28175] net_ratelimit: 16 callbacks suppressed [ 816.540812][T28175] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 816.881734][T28200] hsr0: entered allmulticast mode [ 816.886872][T28200] hsr_slave_0: entered allmulticast mode [ 816.908769][T28200] hsr_slave_1: entered allmulticast mode [ 816.922261][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22577'. [ 816.946525][T28200] hsr_slave_0: left promiscuous mode [ 816.967780][T28200] hsr_slave_1: left promiscuous mode [ 816.987372][T28200] hsr0 (unregistering): left allmulticast mode [ 817.261346][T28238] ref_ctr_offset mismatch. inode: 0x37f offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 817.341205][T28244] hsr0: entered allmulticast mode [ 817.360023][T28244] hsr_slave_0: entered allmulticast mode [ 817.372000][T28244] hsr_slave_1: entered allmulticast mode [ 817.384616][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22595'. [ 817.398685][T28244] hsr_slave_0: left promiscuous mode [ 817.404497][T28244] hsr_slave_1: left promiscuous mode [ 817.418461][T28244] hsr0 (unregistering): left allmulticast mode [ 817.608215][T28265] loop0: detected capacity change from 0 to 128 [ 817.783659][T28278] netlink: 'syz.0.22608': attribute type 1 has an invalid length. [ 817.793446][T28278] loop0: detected capacity change from 0 to 128 [ 817.947055][T28285] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 817.962704][T28285] syzkaller0: ignored: set checksum disabled [ 817.970389][T28285] syzkaller0: tun_chr_ioctl cmd 35111 [ 817.976138][T28287] ref_ctr_offset mismatch. inode: 0x738 offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 818.112209][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22626'. [ 818.127288][T28312] netlink: 24 bytes leftover after parsing attributes in process `syz.9.22626'. [ 818.136837][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22626'. [ 818.148605][T28312] netlink: 24 bytes leftover after parsing attributes in process `syz.9.22626'. [ 818.233782][T28327] ref_ctr_offset mismatch. inode: 0x618 offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 818.487863][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 818.487879][ T28] audit: type=1400 audit(2000001848.031:6037): avc: denied { setopt } for pid=28353 comm="syz.0.22644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 818.547377][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22645'. [ 818.549086][T28356] netlink: 'syz.9.22646': attribute type 1 has an invalid length. [ 818.558194][T28358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22645'. [ 818.573768][T28356] loop9: detected capacity change from 0 to 128 [ 818.574039][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22645'. [ 818.642025][T28362] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 818.644784][ T3476] IPVS: starting estimator thread 0... [ 818.660133][ T28] audit: type=1400 audit(2000001848.201:6038): avc: denied { write } for pid=28367 comm="syz.6.22650" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 818.777712][T28365] IPVS: using max 2160 ests per chain, 108000 per kthread [ 819.618512][ T28] audit: type=1400 audit(2000001849.161:6039): avc: denied { mounton } for pid=28470 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 819.868813][T28470] chnl_net:caif_netlink_parms(): no params data found [ 819.928051][T28470] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.935385][T28470] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.943482][T28470] bridge_slave_0: entered allmulticast mode [ 819.949999][T28470] bridge_slave_0: entered promiscuous mode [ 819.958133][T28470] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.965542][T28470] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.973106][T28470] bridge_slave_1: entered allmulticast mode [ 819.979804][T28470] bridge_slave_1: entered promiscuous mode [ 819.998972][T28470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.009707][T28470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.042928][T28470] team0: Port device team_slave_0 added [ 820.052519][ T28] audit: type=1400 audit(2000001849.591:6040): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 820.075579][T28470] team0: Port device team_slave_1 added [ 820.104631][T28470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.111741][T28470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.137820][T28470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.149510][T28470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.156458][T28470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.182680][T28470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.219628][ T70] bridge_slave_1: left allmulticast mode [ 820.225299][ T70] bridge_slave_1: left promiscuous mode [ 820.231235][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.238976][ T70] bridge_slave_0: left allmulticast mode [ 820.244740][ T70] bridge_slave_0: left promiscuous mode [ 820.250501][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.258463][ T70] batman_adv: batadv0: Interface deactivated: gretap1 [ 820.275219][ T70] batman_adv: batadv0: Removing interface: gretap1 [ 820.309840][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.319387][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.328587][ T70] bond0 (unregistering): Released all slaves [ 820.335912][ T70] bond1 (unregistering): Released all slaves [ 820.350268][T28470] hsr_slave_0: entered promiscuous mode [ 820.356508][T28470] hsr_slave_1: entered promiscuous mode [ 820.370996][T28497] chnl_net:caif_netlink_parms(): no params data found [ 820.388066][ T70] hsr_slave_0: left promiscuous mode [ 820.393826][ T70] hsr_slave_1: left promiscuous mode [ 820.399630][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.407074][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.451780][ T70] team0 (unregistering): Port device team_slave_1 removed [ 820.461783][ T70] team0 (unregistering): Port device team_slave_0 removed [ 820.567585][T28497] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.575228][T28497] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.587830][T28497] bridge_slave_0: entered allmulticast mode [ 820.594418][T28497] bridge_slave_0: entered promiscuous mode [ 820.602129][T28497] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.609332][T28497] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.616687][T28497] bridge_slave_1: entered allmulticast mode [ 820.623336][T28497] bridge_slave_1: entered promiscuous mode [ 820.641246][T28497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.652250][T28497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.672440][T28497] team0: Port device team_slave_0 added [ 820.679315][T28497] team0: Port device team_slave_1 added [ 820.695638][T28497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.702714][T28497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.729096][T28497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.740492][T28497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.747446][T28497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.773567][T28497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.800299][T28497] hsr_slave_0: entered promiscuous mode [ 820.806541][T28497] hsr_slave_1: entered promiscuous mode [ 820.812957][T28497] debugfs: 'hsr0' already exists in 'hsr' [ 820.818827][T28497] Cannot create hsr debugfs directory [ 821.926442][T28470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 821.937054][T28470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 821.961447][T28470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 821.970205][T28470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.024041][T28470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.040699][T28470] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.050467][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.057757][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.076662][T28470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.088731][T28470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.105349][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.112502][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.176901][T28497] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 822.190208][T28497] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 822.199082][T28497] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 822.209752][T28470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.218105][T28497] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 822.297278][T28497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.312717][T28497] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.323661][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.330764][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.360057][ T2039] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.367254][ T2039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.385532][T28470] veth0_vlan: entered promiscuous mode [ 822.416322][T28470] veth1_vlan: entered promiscuous mode [ 822.446698][T28470] veth0_macvtap: entered promiscuous mode [ 822.465687][T28470] veth1_macvtap: entered promiscuous mode [ 822.478691][T28470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.492164][T28470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.508125][ T355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.517174][ T355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.530873][ T355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.550759][ T355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.562525][T28497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.582224][ T28] audit: type=1400 audit(2000001852.121:6041): avc: denied { mounton } for pid=28470 comm="syz-executor" path="/root/syzkaller.K9hgO6/syz-tmp" dev="sda1" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 822.615477][ T28] audit: type=1400 audit(2000001852.121:6042): avc: denied { mount } for pid=28470 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 822.681679][ T28] audit: type=1400 audit(2000001852.121:6043): avc: denied { mounton } for pid=28470 comm="syz-executor" path="/root/syzkaller.K9hgO6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 822.713432][T28742] __nla_validate_parse: 1 callbacks suppressed [ 822.713452][T28742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22714'. [ 822.731437][ T28] audit: type=1400 audit(2000001852.121:6044): avc: denied { mounton } for pid=28470 comm="syz-executor" path="/root/syzkaller.K9hgO6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=195959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 822.762926][T28742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22714'. [ 822.772790][ T28] audit: type=1400 audit(2000001852.151:6045): avc: denied { mounton } for pid=28470 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 822.843118][ T28] audit: type=1400 audit(2000001852.151:6046): avc: denied { mount } for pid=28470 comm="syz-executor" name="/" dev="gadgetfs" ino=4681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 822.893105][T28497] veth0_vlan: entered promiscuous mode [ 822.907980][T28497] veth1_vlan: entered promiscuous mode [ 822.929478][T28497] veth0_macvtap: entered promiscuous mode [ 822.936771][T28497] veth1_macvtap: entered promiscuous mode [ 822.952612][T28497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.964524][T28497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.982864][ T2042] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.993299][ T2042] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.018120][ T2042] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.047984][ T2042] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.091924][T28773] loop9: detected capacity change from 0 to 128 [ 823.120675][T28773] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 823.152819][T28773] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 823.168864][T28774] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 823.178844][ T1033] IPVS: starting estimator thread 0... [ 823.217168][ T2042] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 823.277957][T28786] IPVS: using max 2688 ests per chain, 134400 per kthread [ 823.482379][T28816] smc: net device bond0 applied user defined pnetid SYZ2 [ 823.511459][T28816] netlink: 14 bytes leftover after parsing attributes in process `syz.6.22730'. [ 823.544081][T28830] loop9: detected capacity change from 0 to 512 [ 823.570090][T28816] smc: removing net device bond0 with user defined pnetid SYZ2 [ 823.580676][T28830] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 823.608446][T28816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.621292][T28830] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.22713: bad orphan inode 131083 [ 823.633461][T28816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.659303][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 823.659319][ T28] audit: type=1400 audit(2000001853.201:6052): avc: denied { connect } for pid=28845 comm="syz.3.22727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 823.665981][T28830] loop9: lost filesystem error report for type 5 error -117 [ 823.689276][T28816] bond0 (unregistering): Released all slaves [ 823.707676][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 823.714151][ C1] EXT4-fs (loop9): initial error at time 2000001853: ext4_orphan_get:1417 [ 823.722871][ C1] EXT4-fs (loop9): last error at time 2000001853: ext4_orphan_get:1417 [ 823.735828][T28830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.815375][ T355] bridge_slave_1: left allmulticast mode [ 823.832830][ T355] bridge_slave_1: left promiscuous mode [ 823.846338][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.883904][ T355] bridge_slave_0: left allmulticast mode [ 823.909144][ T355] bridge_slave_0: left promiscuous mode [ 823.914988][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.009955][ T355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.029256][ T355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.048812][ T355] bond0 (unregistering): Released all slaves [ 824.093291][ T355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.109511][ T355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.117260][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.146671][ T28] audit: type=1400 audit(2000001853.681:6053): avc: denied { setopt } for pid=28889 comm="syz.9.22734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 824.168500][ T28] audit: type=1400 audit(2000001853.701:6054): avc: denied { connect } for pid=28889 comm="syz.9.22734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 824.207007][ T355] team0 (unregistering): Port device team_slave_1 removed [ 824.216612][ T355] team0 (unregistering): Port device team_slave_0 removed [ 824.289228][T28897] loop3: detected capacity change from 0 to 128 [ 824.312200][T28897] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 824.342300][T28897] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 824.367757][ T28] audit: type=1400 audit(2000001853.901:6055): avc: denied { execute } for pid=28896 comm="syz.3.22736" path="/11/mnt/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 824.422187][T28470] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.478299][T28824] chnl_net:caif_netlink_parms(): no params data found [ 824.585479][ T355] IPVS: stop unused estimator thread 0... [ 824.697379][T28824] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.727489][ T28] audit: type=1400 audit(2000001854.261:6056): avc: denied { watch } for pid=28936 comm="syz.8.22744" path="/199/file1" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 824.733714][T28824] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.814801][T28824] bridge_slave_0: entered allmulticast mode [ 824.836636][T28824] bridge_slave_0: entered promiscuous mode [ 824.863595][T28824] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.864100][ T28] audit: type=1400 audit(2000001854.401:6057): avc: denied { watch_reads } for pid=28949 comm="syz.6.22747" path="/5/file1" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 824.893935][T28824] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.913809][T28824] bridge_slave_1: entered allmulticast mode [ 824.946145][T28824] bridge_slave_1: entered promiscuous mode [ 824.985049][T28824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.008061][T28824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.028488][T28824] team0: Port device team_slave_0 added [ 825.035131][T28824] team0: Port device team_slave_1 added [ 825.093914][T28824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.107688][T28824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.155735][T28824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.169879][T28824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.178768][ T28] audit: type=1400 audit(2000001854.721:6058): avc: denied { write } for pid=28977 comm="syz.3.22755" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 825.185921][T28824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.227989][ T28] audit: type=1400 audit(2000001854.771:6059): avc: denied { ioctl } for pid=28977 comm="syz.3.22755" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 825.237322][T28824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.286775][T28824] hsr_slave_0: entered promiscuous mode [ 825.293159][T28824] hsr_slave_1: entered promiscuous mode [ 825.305831][T28824] debugfs: 'hsr0' already exists in 'hsr' [ 825.312104][T28824] Cannot create hsr debugfs directory [ 825.357748][ T28] audit: type=1400 audit(2000001854.891:6060): avc: denied { read } for pid=28993 comm="syz.6.22758" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.402201][ T28] audit: type=1400 audit(2000001854.891:6061): avc: denied { open } for pid=28993 comm="syz.6.22758" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.743820][T28824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 825.771281][T28824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 825.790889][T28824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 825.831889][T28824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 825.910733][T28824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.958555][T28824] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.988560][ T2037] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.995911][ T2037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.013378][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.020649][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.147170][T28824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.227827][T28824] veth0_vlan: entered promiscuous mode [ 826.240720][T28824] veth1_vlan: entered promiscuous mode [ 826.262825][T28824] veth0_macvtap: entered promiscuous mode [ 826.271308][T28824] veth1_macvtap: entered promiscuous mode [ 826.284819][T28824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.312029][T28824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.360420][ T355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.375602][ T2037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.400635][ T2037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.418623][ T2037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.841592][T29178] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 826.842093][ T3476] IPVS: starting estimator thread 0... [ 826.937872][T29181] IPVS: using max 2688 ests per chain, 134400 per kthread [ 827.467560][T29223] can0: slcan on ptm0. [ 827.640990][T29245] loop3: detected capacity change from 0 to 512 [ 827.656910][T29245] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.22836: inode has both inline data and extents flags [ 827.671015][T29245] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 827.671157][T29245] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.22836: couldn't read orphan inode 15 (err -117) [ 827.680302][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 827.680336][ C1] EXT4-fs (loop3): initial error at time 2000001857: ext4_orphan_get:1391: inode 15 [ 827.680357][ C1] EXT4-fs (loop3): last error at time 2000001857: ext4_orphan_get:1391: inode 15 [ 827.718070][T29245] loop3: lost filesystem error report for type 5 error -117 [ 827.718552][T29245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.757042][ T3476] IPVS: starting estimator thread 0... [ 827.758003][T28470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.764222][T29251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 827.867693][T29252] IPVS: using max 2736 ests per chain, 136800 per kthread [ 827.977798][T29221] can0 (unregistered): slcan off ptm0. [ 827.984694][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22847'. [ 828.022586][T29275] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22847'. [ 828.092295][T29286] loop9: detected capacity change from 0 to 512 [ 828.132253][T29286] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.22851: inode has both inline data and extents flags [ 828.166046][T29286] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 828.166623][T29286] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.22851: couldn't read orphan inode 15 (err -117) [ 828.175892][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 828.175912][ C0] EXT4-fs (loop9): initial error at time 2000001857: ext4_orphan_get:1391: inode 15 [ 828.175941][ C0] EXT4-fs (loop9): last error at time 2000001857: ext4_orphan_get:1391: inode 15 [ 828.214232][T29286] loop9: lost filesystem error report for type 5 error -117 [ 828.215543][T29286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.274145][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.585104][T29341] smc: net device bond0 applied user defined pnetid SYZ2 [ 828.601544][T29341] netlink: 14 bytes leftover after parsing attributes in process `syz.9.22865'. [ 828.612503][T29341] smc: removing net device bond0 with user defined pnetid SYZ2 [ 828.620849][T29341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.630314][T29341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.650431][T29341] bond0 (unregistering): Released all slaves [ 828.761730][T29361] netlink: 'syz.9.22874': attribute type 5 has an invalid length. [ 828.904994][T29375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.000131][T29385] loop9: detected capacity change from 0 to 512 [ 829.078415][T29396] netlink: 'syz.6.22892': attribute type 5 has an invalid length. [ 829.116544][T29399] can0: slcan on ptm0. [ 829.433112][T29429] loop2: detected capacity change from 0 to 7 [ 829.581722][T29445] netlink: 'syz.8.22906': attribute type 5 has an invalid length. [ 829.637768][T29392] can0 (unregistered): slcan off ptm0. [ 829.680067][T29460] loop9: detected capacity change from 0 to 1024 [ 829.712006][T29460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.779824][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.008071][T29498] syzkaller1: entered promiscuous mode [ 830.017722][T29498] syzkaller1: entered allmulticast mode [ 830.178073][T29526] smc: net device bond0 applied user defined pnetid SYZ2 [ 830.195975][T29526] netlink: 14 bytes leftover after parsing attributes in process `syz.3.22929'. [ 830.247081][T29526] smc: removing net device bond0 with user defined pnetid SYZ2 [ 830.265854][T29526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.279391][T29526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.299504][T29526] bond0 (unregistering): Released all slaves [ 830.366897][T29538] loop2: detected capacity change from 0 to 7 [ 830.450099][T29544] syzkaller1: entered promiscuous mode [ 830.460561][T29548] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 830.477706][T29544] syzkaller1: entered allmulticast mode [ 830.571061][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 830.571087][ T28] audit: type=1400 audit(2000001860.111:6068): avc: denied { mount } for pid=29556 comm="syz.3.22945" name="/" dev="ramfs" ino=197373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 830.617833][T29563] loop2: detected capacity change from 0 to 7 [ 830.690708][T29571] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.22952'. [ 830.747923][T29584] syzkaller1: entered promiscuous mode [ 830.753508][T29584] syzkaller1: entered allmulticast mode [ 830.787067][T29587] can0: slcan on ptm0. [ 830.853804][T29596] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22959'. [ 830.867538][T29598] netlink: 'syz.1.22960': attribute type 3 has an invalid length. [ 830.892196][T29598] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.22960'. [ 830.952260][ T28] audit: type=1400 audit(2000001860.491:6069): avc: denied { map } for pid=29613 comm="syz.8.22965" path="socket:[198614]" dev="sockfs" ino=198614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 830.978791][ T28] audit: type=1400 audit(2000001860.491:6070): avc: denied { read accept } for pid=29613 comm="syz.8.22965" path="socket:[198614]" dev="sockfs" ino=198614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 831.022492][ T28] audit: type=1400 audit(2000001860.561:6071): avc: denied { write } for pid=29616 comm="syz.1.22967" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 831.298003][T29582] can0 (unregistered): slcan off ptm0. [ 831.344350][ T28] audit: type=1400 audit(2000001860.881:6072): avc: denied { recv } for pid=28497 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.135 dest=55648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 831.397734][ T28] audit: type=1400 audit(2000001860.921:6073): avc: denied { create } for pid=29650 comm="syz.6.22978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.418238][ T28] audit: type=1400 audit(2000001860.921:6074): avc: denied { connect } for pid=29650 comm="syz.6.22978" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.442475][ T28] audit: type=1400 audit(2000001860.921:6075): avc: denied { setopt } for pid=29650 comm="syz.6.22978" laddr=fe80::aa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.469782][ T28] audit: type=1400 audit(2000001860.921:6076): avc: denied { write } for pid=29650 comm="syz.6.22978" laddr=fe80::aa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.528277][ T28] audit: type=1400 audit(2000001860.931:6077): avc: denied { search } for pid=29652 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.608085][T29673] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.22986'. [ 831.850403][T29721] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.23004'. [ 832.061212][T29745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23017'. [ 832.112934][T29745] smc: adding net device bond0 with user defined pnetid SYZ2 [ 832.137936][T29749] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.312551][T29776] can0: slcan on ptm0. [ 832.406138][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 832.818568][T29769] can0 (unregistered): slcan off ptm0. [ 832.827344][ T3476] IPVS: starting estimator thread 0... [ 832.833504][T29836] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.927715][T29845] IPVS: using max 2736 ests per chain, 136800 per kthread [ 833.140405][T29889] loop3: detected capacity change from 0 to 512 [ 833.157013][T29889] EXT4-fs: Ignoring removed oldalloc option [ 833.170490][T29889] EXT4-fs (loop3): 1 truncate cleaned up [ 833.186765][T29889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.244894][T28470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.325775][T29902] can0: slcan on ptm0. [ 833.395757][T29914] loop9: detected capacity change from 0 to 512 [ 833.407145][T29914] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.23074: inode has both inline data and extents flags [ 833.426217][T29914] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 833.426354][T29914] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.23074: couldn't read orphan inode 15 (err -117) [ 833.435629][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 833.435662][ C1] EXT4-fs (loop9): initial error at time 2000001862: ext4_orphan_get:1391: inode 15 [ 833.435689][ C1] EXT4-fs (loop9): last error at time 2000001862: ext4_orphan_get:1391: inode 15 [ 833.473506][T29914] loop9: lost filesystem error report for type 5 error -117 [ 833.474335][T29914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.518613][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.813050][T29944] netlink: 92 bytes leftover after parsing attributes in process `syz.9.23091'. [ 833.828035][T29895] can0 (unregistered): slcan off ptm0. [ 833.949379][T29965] netem: incorrect gi model size [ 833.957233][T29965] netem: change failed [ 834.061835][T29983] loop3: detected capacity change from 0 to 1024 [ 834.078147][T29983] EXT4-fs: Ignoring removed bh option [ 834.088272][T29983] EXT4-fs: inline encryption not supported [ 834.107298][T29983] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 834.124524][T29983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 834.149119][T29983] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.23093: lblock 2 mapped to illegal pblock 2 (length 1) [ 834.168219][T29983] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 834.168381][T29983] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.23093: lblock 0 mapped to illegal pblock 48 (length 1) [ 834.178023][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 834.178063][ C1] EXT4-fs (loop3): initial error at time 2000001863: ext4_map_blocks:776: inode 3: block 2 [ 834.178106][ C1] EXT4-fs (loop3): last error at time 2000001863: ext4_map_blocks:776: inode 3: block 2 [ 834.220218][T29983] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 834.220374][T29983] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.23093: Failed to acquire dquot type 0 [ 834.241430][T29983] loop3: lost filesystem error report for type 5 error -117 [ 834.249192][T29983] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 834.266095][T29983] loop3: lost filesystem error report for type 5 error -117 [ 834.266199][T29983] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.23093: mark_inode_dirty error [ 834.276510][T30000] netlink: 92 bytes leftover after parsing attributes in process `syz.1.23096'. [ 834.294396][T29983] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 834.296393][T29983] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 834.316663][T29983] EXT4-fs (loop3): 1 orphan inode deleted [ 834.323108][T29983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.337211][ T355] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 834.362187][ T355] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 834.377011][T28470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.386752][T28470] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 834.399958][T28470] loop3: lost filesystem error report for type 5 error -117 [ 834.400114][T28470] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 834.417291][T28470] loop3: lost filesystem error report for type 5 error -117 [ 834.417464][T28470] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 834.436852][T29790] Bluetooth: hci0: command 0x1003 tx timeout [ 834.437739][ T3080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 834.450876][T28470] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 834.501348][T30012] loop9: detected capacity change from 0 to 512 [ 834.542758][T30012] EXT4-fs: Ignoring removed oldalloc option [ 834.564161][T30012] EXT4-fs (loop9): 1 truncate cleaned up [ 834.582149][T30012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.641783][T30034] netlink: 92 bytes leftover after parsing attributes in process `syz.3.23112'. [ 834.656870][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.730415][T30047] netem: incorrect gi model size [ 834.735673][T30047] netem: change failed [ 835.049522][T30092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.066966][T30085] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 835.075237][ T3419] IPVS: starting estimator thread 0... [ 835.093610][T30098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 835.155645][T30104] SELinux: failed to load policy [ 835.187723][T30095] IPVS: using max 2688 ests per chain, 134400 per kthread [ 835.283020][T30125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.598451][T30133] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 835.717402][ T28] kauditd_printk_skb: 222 callbacks suppressed [ 835.717421][ T28] audit: type=1326 audit(2000001865.251:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.750558][ T28] audit: type=1326 audit(2000001865.291:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.774485][ T28] audit: type=1326 audit(2000001865.291:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.798528][ T28] audit: type=1326 audit(2000001865.291:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.822716][ T28] audit: type=1326 audit(2000001865.291:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.858112][ T28] audit: type=1326 audit(2000001865.291:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.881810][ T28] audit: type=1326 audit(2000001865.291:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.907871][ T28] audit: type=1326 audit(2000001865.291:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.932481][ T28] audit: type=1326 audit(2000001865.291:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 835.987692][ T28] audit: type=1326 audit(2000001865.291:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.1.23158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4c694c799 code=0x7ffc0000 [ 836.091353][T30154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 836.737842][T29790] Bluetooth: hci0: command 0x1003 tx timeout [ 836.738804][ T3080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 837.073750][T30177] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 837.189628][T30190] loop9: detected capacity change from 0 to 128 [ 837.231858][T30190] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 837.275922][ T2035] Bluetooth: hci0: Frame reassembly failed (-84) [ 837.290478][T30190] FAT-fs (loop9): error, parent dir link count too low (2) [ 837.298974][T30190] FAT-fs (loop9): Filesystem has been set read-only [ 837.315791][T22918] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 837.403532][T30215] dvmrp1: entered allmulticast mode [ 837.929864][T30224] netlink: 104 bytes leftover after parsing attributes in process `syz.6.23197'. [ 837.974637][T30228] syzkaller1: entered promiscuous mode [ 837.980499][T30228] syzkaller1: entered allmulticast mode [ 838.026051][T30232] SELinux: failed to load policy [ 838.616282][T30317] netlink: 104 bytes leftover after parsing attributes in process `syz.9.23235'. [ 838.883108][T30331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.891861][T30331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.060008][T30359] netlink: 104 bytes leftover after parsing attributes in process `syz.1.23250'. [ 839.298012][ T3080] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 839.333480][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.427436][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.529355][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.559601][T30414] netlink: 16 bytes leftover after parsing attributes in process `syz.8.23271'. [ 839.577679][T30414] netlink: 20 bytes leftover after parsing attributes in process `syz.8.23271'. [ 839.613288][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.636709][T30420] loop3: detected capacity change from 0 to 512 [ 839.669818][T30420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 839.686304][T30420] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.729407][ T70] bridge_slave_1: left allmulticast mode [ 839.735188][ T70] bridge_slave_1: left promiscuous mode [ 839.745492][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.753460][ T70] bridge_slave_0: left allmulticast mode [ 839.759608][ T70] bridge_slave_0: left promiscuous mode [ 839.765387][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.766312][T28470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 839.898238][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.913194][T30440] loop9: detected capacity change from 0 to 1024 [ 839.922186][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.941766][ T70] bond0 (unregistering): Released all slaves [ 839.962392][T30440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.016849][T30440] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.23288: inode #1886284079: comm syz.9.23288: iget: illegal inode # [ 840.036434][T30440] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.23288: error while reading EA inode 1886284079 err=-117 [ 840.052364][ T70] hsr_slave_0: left promiscuous mode [ 840.073649][ T70] hsr_slave_1: left promiscuous mode [ 840.082009][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.101508][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.114959][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.125352][T30462] xt_hashlimit: size too large, truncated to 1048576 [ 840.136783][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.152531][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.212666][ T70] veth1_macvtap: left promiscuous mode [ 840.229452][ T70] veth0_macvtap: left promiscuous mode [ 840.314066][ T70] veth1_vlan: left promiscuous mode [ 840.319392][ T70] veth0_vlan: left promiscuous mode [ 840.424151][ T70] team0 (unregistering): Port device team_slave_1 removed [ 840.440290][ T70] team0 (unregistering): Port device team_slave_0 removed [ 840.477737][T30394] chnl_net:caif_netlink_parms(): no params data found [ 840.553922][T30394] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.568807][T30394] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.577403][T30394] bridge_slave_0: entered allmulticast mode [ 840.585714][T30394] bridge_slave_0: entered promiscuous mode [ 840.595009][T30394] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.602290][T30394] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.609736][T30394] bridge_slave_1: entered allmulticast mode [ 840.616905][T30394] bridge_slave_1: entered promiscuous mode [ 840.638533][T30394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.650386][T30394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.683685][T30394] team0: Port device team_slave_0 added [ 840.698390][T30394] team0: Port device team_slave_1 added [ 840.714014][T30394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.721139][T30394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.749193][T30394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.760851][T30394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.767853][T30394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.794210][T30394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.811515][ T70] IPVS: stop unused estimator thread 0... [ 840.848439][T30394] hsr_slave_0: entered promiscuous mode [ 840.854544][T30394] hsr_slave_1: entered promiscuous mode [ 840.860660][T30394] debugfs: 'hsr0' already exists in 'hsr' [ 840.866394][T30394] Cannot create hsr debugfs directory [ 841.035558][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.111056][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.193562][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.269609][T30394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.282654][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.294602][T30394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 841.307214][T30534] chnl_net:caif_netlink_parms(): no params data found [ 841.318159][T30394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 841.335154][T30394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 841.387235][ T70] bridge_slave_1: left allmulticast mode [ 841.394360][ T70] bridge_slave_1: left promiscuous mode [ 841.400371][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.408704][ T70] bridge_slave_0: left allmulticast mode [ 841.414538][ T70] bridge_slave_0: left promiscuous mode [ 841.420591][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.540665][T30394] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.547790][T30394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.555169][T30394] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.562238][T30394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.569946][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 841.569962][ T28] audit: type=1400 audit(2000001871.081:6352): avc: denied { create } for pid=30603 comm="syz.6.23307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 841.598916][ T28] audit: type=1400 audit(2000001871.081:6353): avc: denied { write } for pid=30603 comm="syz.6.23307" path="socket:[201875]" dev="sockfs" ino=201875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 841.626852][ T28] audit: type=1400 audit(2000001871.141:6354): avc: denied { setopt } for pid=30603 comm="syz.6.23307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 841.647467][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.662849][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.683509][T30534] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.698007][T30534] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.705445][T30534] bridge_slave_0: entered allmulticast mode [ 841.712766][T30534] bridge_slave_0: entered promiscuous mode [ 841.720217][T30534] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.727334][T30534] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.739619][T30534] bridge_slave_1: entered allmulticast mode [ 841.746267][T30534] bridge_slave_1: entered promiscuous mode [ 841.756811][ T70] hsr_slave_0: left promiscuous mode [ 841.768882][ T70] hsr_slave_1: left promiscuous mode [ 841.781762][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.789593][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.797501][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.805444][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.816181][ T70] veth1_macvtap: left promiscuous mode [ 841.822068][ T70] veth0_macvtap: left promiscuous mode [ 841.827807][ T70] veth1_vlan: left promiscuous mode [ 841.833092][ T70] veth0_vlan: left promiscuous mode [ 841.873432][T30621] Invalid argument reading file caps for ./file0 [ 841.932559][ T70] team0 (unregistering): Port device team_slave_1 removed [ 841.948880][ T70] team0 (unregistering): Port device team_slave_0 removed [ 841.998877][T30534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.012328][T30534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.030868][ T28] audit: type=1400 audit(2000001871.571:6355): avc: denied { mount } for pid=30636 comm="syz.8.23312" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 842.038911][T30534] team0: Port device team_slave_0 added [ 842.060923][T30534] team0: Port device team_slave_1 added [ 842.081038][T30534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.088957][T30534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.115332][T30534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.135529][T30394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.148168][T30534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.155300][T30534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.188459][T30534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.203916][T30394] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.231902][ T2035] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.239155][ T2035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.248583][ T2035] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.255668][ T2035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.273049][ T70] IPVS: stop unused estimator thread 0... [ 842.291645][T30534] hsr_slave_0: entered promiscuous mode [ 842.301259][T30534] hsr_slave_1: entered promiscuous mode [ 842.380171][T30394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.464498][T30394] veth0_vlan: entered promiscuous mode [ 842.472914][T30394] veth1_vlan: entered promiscuous mode [ 842.492438][T30394] veth0_macvtap: entered promiscuous mode [ 842.500270][T30394] veth1_macvtap: entered promiscuous mode [ 842.511691][T30394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.521321][T30394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.540303][ T2039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.554583][ T2039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.564101][ T2039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.577019][ T2039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.595868][ T28] audit: type=1400 audit(2000001872.131:6356): avc: denied { mounton } for pid=30394 comm="syz-executor" path="/root/syzkaller.AsknP2/syz-tmp" dev="sda1" ino=2106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 842.622040][ T28] audit: type=1400 audit(2000001872.131:6357): avc: denied { mount } for pid=30394 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 842.646684][ T28] audit: type=1400 audit(2000001872.131:6358): avc: denied { mounton } for pid=30394 comm="syz-executor" path="/root/syzkaller.AsknP2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 842.676190][ T28] audit: type=1400 audit(2000001872.131:6359): avc: denied { mounton } for pid=30394 comm="syz-executor" path="/root/syzkaller.AsknP2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=202128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 842.720214][T30694] netlink: 'syz.1.23274': attribute type 8 has an invalid length. [ 842.743890][T30694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23274'. [ 842.761826][T30534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 842.783789][ T28] audit: type=1400 audit(2000001872.161:6360): avc: denied { mounton } for pid=30394 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 842.796644][T30706] Invalid argument reading file caps for ./file0 [ 842.807649][ T28] audit: type=1400 audit(2000001872.161:6361): avc: denied { mount } for pid=30394 comm="syz-executor" name="/" dev="gadgetfs" ino=4681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 842.839023][T30534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 842.853264][T30534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 842.863082][T30534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 842.918124][T30534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.933936][T30534] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.953313][ T2035] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.960607][ T2035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.983673][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.990906][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.023634][T30534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 843.058356][T30534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.190074][T30534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.404761][T30534] veth0_vlan: entered promiscuous mode [ 843.429278][T30534] veth1_vlan: entered promiscuous mode [ 843.465596][T30785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=30785 comm=syz.9.23329 [ 843.483253][T30534] veth0_macvtap: entered promiscuous mode [ 843.491547][T30534] veth1_macvtap: entered promiscuous mode [ 843.518435][T30534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.554776][T30534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.566468][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.581232][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.613341][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.636079][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.657528][T30806] loop9: detected capacity change from 0 to 512 [ 843.667283][T30806] EXT4-fs: Ignoring removed nobh option [ 843.686285][T30806] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 843.717098][T30806] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.23334: iget: bad i_size value: 38620345925642 [ 843.763003][T30806] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 843.765626][T30806] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.23334: couldn't read orphan inode 15 (err -117) [ 843.774916][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 843.774942][ C0] EXT4-fs (loop9): initial error at time 2000001873: ext4_orphan_get:1391: inode 15 [ 843.774992][ C0] EXT4-fs (loop9): last error at time 2000001873: ext4_orphan_get:1391: inode 15 [ 843.837195][T30806] loop9: lost filesystem error report for type 5 error -117 [ 843.848349][T30806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.898748][T30829] program syz.1.23339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.909996][T30806] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.23334: bg 0: block 5: invalid block bitmap [ 843.960322][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.282875][T30880] netlink: 'syz.6.23347': attribute type 8 has an invalid length. [ 844.291134][T30880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23347'. [ 845.302869][T31023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=31023 comm=syz.1.23366 [ 845.308775][T31020] netlink: 'syz.6.23365': attribute type 16 has an invalid length. [ 845.334016][T31020] netlink: 'syz.6.23365': attribute type 17 has an invalid length. [ 845.391909][T31020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 845.473405][T31040] ipvlan2: entered promiscuous mode [ 845.484209][T31040] team0: Device ipvlan2 failed to register rx_handler [ 845.726638][T31067] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=31067 comm=syz.8.23383 [ 845.882171][T31076] netlink: 'syz.9.23386': attribute type 16 has an invalid length. [ 845.918901][T31076] netlink: 'syz.9.23386': attribute type 17 has an invalid length. [ 845.960902][T31081] loop4: detected capacity change from 0 to 1024 [ 845.977927][T31081] EXT4-fs: inline encryption not supported [ 846.040175][T31081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 846.077758][T31081] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.084812][T31073] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 846.139336][T31081] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.23391: lblock 3 mapped to illegal pblock 3 (length 3) [ 846.166920][T31081] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 846.180386][T31081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 846.180386][T31081] [ 846.211146][ T2035] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 846.226613][ T2035] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 846.239256][ T2035] EXT4-fs (loop4): This should not happen!! Data will be lost [ 846.239256][ T2035] [ 846.249445][ T2035] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 846.264918][ T2035] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 52 with max blocks 16 with error 117 [ 846.277595][ T2035] EXT4-fs (loop4): This should not happen!! Data will be lost [ 846.277595][ T2035] [ 846.288242][T30534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 847.018424][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 847.018443][ T28] audit: type=1326 audit(2000001876.561:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.8.23405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972b13c799 code=0x7ffc0000 [ 847.087687][ T28] audit: type=1326 audit(2000001876.561:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.8.23405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972b13c799 code=0x7ffc0000 [ 847.180862][ T28] audit: type=1326 audit(2000001876.561:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.8.23405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f972b13c799 code=0x7ffc0000 [ 847.211837][ T28] audit: type=1326 audit(2000001876.561:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.8.23405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972b13c799 code=0x7ffc0000 [ 847.261277][ T28] audit: type=1326 audit(2000001876.561:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31111 comm="syz.8.23405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972b13c799 code=0x7ffc0000 [ 847.312206][ T28] audit: type=1400 audit(2000001876.751:6387): avc: denied { read write } for pid=31121 comm="syz.9.23408" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 847.336585][ T28] audit: type=1400 audit(2000001876.751:6388): avc: denied { open } for pid=31121 comm="syz.9.23408" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 847.402693][ T28] audit: type=1400 audit(2000001876.941:6389): avc: denied { mount } for pid=31135 comm="syz.4.23414" name="/" dev="ramfs" ino=203846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 847.425789][ T28] audit: type=1400 audit(2000001876.941:6390): avc: denied { create } for pid=31135 comm="syz.4.23414" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 847.452261][ C1] vcan0: j1939_tp_rxtimer: 0xffff888120b94800: rx timeout, send abort [ 847.460708][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888120b94800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 847.484224][ T28] audit: type=1400 audit(2000001877.021:6391): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 847.630092][T31136] IPVS: You probably need to specify IP address on multicast interface. [ 847.638622][T31136] IPVS: Error connecting to the multicast addr [ 848.115782][T31165] tmpfs: Bad value for 'mpol' [ 848.126135][T31167] syzkaller1: entered promiscuous mode [ 848.132248][T31167] syzkaller1: entered allmulticast mode [ 848.152053][T31168] netlink: 'syz.4.23426': attribute type 16 has an invalid length. [ 848.161240][T31168] netlink: 'syz.4.23426': attribute type 17 has an invalid length. [ 848.213620][T31168] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.220879][T31168] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.272561][T31168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.285035][T31168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.287191][T31184] loop9: detected capacity change from 0 to 256 [ 848.329113][T31186] program syz.9.23437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.372584][T31162] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 848.401908][T31190] tmpfs: Bad value for 'mpol' [ 848.406816][ T2039] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.434855][ T2039] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.462123][ T2039] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.478989][ T2039] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.508382][T31205] netlink: 56 bytes leftover after parsing attributes in process `syz.1.23446'. [ 848.511037][T31202] syzkaller1: entered promiscuous mode [ 848.536368][T31202] syzkaller1: entered allmulticast mode [ 848.594279][T31215] program syz.8.23451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.708679][T31228] tmpfs: Bad value for 'mpol' [ 848.728451][T31212] IPVS: You probably need to specify IP address on multicast interface. [ 848.745690][T31212] IPVS: Error connecting to the multicast addr [ 848.977961][T31253] netlink: 24 bytes leftover after parsing attributes in process `syz.6.23461'. [ 848.990895][T31253] bond0: ARP target 8.4.0.0 is already present [ 848.997263][T31253] bond0: option arp_ip_target: invalid value (1032) [ 849.007076][T31251] netlink: 'syz.1.23458': attribute type 16 has an invalid length. [ 849.015282][T31251] netlink: 'syz.1.23458': attribute type 17 has an invalid length. [ 849.022858][T31257] program syz.6.23463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.029113][T31251] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 849.076296][T31263] syzkaller1: entered promiscuous mode [ 849.082065][T31263] syzkaller1: entered allmulticast mode [ 849.152602][T31269] loop9: detected capacity change from 0 to 1024 [ 849.161505][T31269] EXT4-fs: inline encryption not supported [ 849.178911][T31269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.195077][T31269] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.23475: Allocating blocks 449-513 which overlap fs metadata [ 849.220948][T31269] EXT4-fs (loop9): Remounting filesystem read-only [ 849.242468][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.518612][T31293] IPVS: Error connecting to the multicast addr [ 849.655056][T31295] netlink: 'syz.8.23483': attribute type 16 has an invalid length. [ 849.686255][T31295] netlink: 'syz.8.23483': attribute type 17 has an invalid length. [ 849.710090][T31295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 849.826150][T31303] syzkaller1: entered promiscuous mode [ 849.832683][T31303] syzkaller1: entered allmulticast mode [ 849.971677][T31323] netlink: 24 bytes leftover after parsing attributes in process `syz.8.23497'. [ 849.981032][T31321] netlink: 56 bytes leftover after parsing attributes in process `syz.6.23506'. [ 849.990889][T31323] bond0: ARP target 8.4.0.0 is already present [ 849.997163][T31323] bond0: option arp_ip_target: invalid value (1032) [ 850.561700][T31359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23514'. [ 850.583330][T31359] bond0: ARP target 8.4.0.0 is already present [ 850.590177][T31359] bond0: option arp_ip_target: invalid value (1032) [ 850.718459][T31361] IPVS: You probably need to specify IP address on multicast interface. [ 850.727209][T31361] IPVS: Error connecting to the multicast addr [ 850.880728][T31382] syzkaller1: entered promiscuous mode [ 850.886264][T31382] syzkaller1: entered allmulticast mode [ 851.705471][T31430] loop9: detected capacity change from 0 to 512 [ 851.725084][T31430] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.753910][T31430] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 851.772836][T31408] IPVS: Error connecting to the multicast addr [ 851.910969][T31462] Invalid argument reading file caps for ./file0 [ 852.007590][T31472] syzkaller1: entered promiscuous mode [ 852.011318][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.016874][T31472] syzkaller1: entered allmulticast mode [ 852.070111][T31480] loop9: detected capacity change from 0 to 164 [ 852.085649][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 852.085666][ T28] audit: type=1400 audit(2000001881.621:6416): avc: denied { lock } for pid=31483 comm="syz.1.23555" path="socket:[205219]" dev="sockfs" ino=205219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 852.127886][ T28] audit: type=1400 audit(2000001881.661:6417): avc: denied { mount } for pid=31479 comm="syz.9.23549" name="/" dev="loop9" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 852.162401][ T28] audit: type=1400 audit(2000001881.671:6418): avc: denied { bind } for pid=31485 comm="syz.4.23556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 852.224654][T31496] loop4: detected capacity change from 0 to 512 [ 852.251702][ T28] audit: type=1400 audit(2000001881.691:6419): avc: denied { setopt } for pid=31485 comm="syz.4.23556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 852.272899][ T28] audit: type=1400 audit(2000001881.701:6420): avc: denied { unmount } for pid=22918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 852.308695][T31496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.347790][T31496] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 852.427982][T30534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.541215][T31517] syzkaller1: entered promiscuous mode [ 852.546734][T31517] syzkaller1: entered allmulticast mode [ 852.552345][ T28] audit: type=1400 audit(2000001882.081:6421): avc: denied { create } for pid=31520 comm="syz.8.23571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 852.917907][T31525] IPVS: You probably need to specify IP address on multicast interface. [ 852.957859][T31525] IPVS: Error connecting to the multicast addr [ 853.259307][T31590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23613'. [ 853.285327][T31593] loop4: detected capacity change from 0 to 256 [ 853.482821][ T28] audit: type=1326 audit(2000001883.021:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.1.23610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 853.513382][ T28] audit: type=1400 audit(2000001883.021:6423): avc: denied { getopt } for pid=31605 comm="syz.9.23622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 853.533765][ T28] audit: type=1326 audit(2000001883.041:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.1.23610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 853.578010][ T28] audit: type=1326 audit(2000001883.041:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31603 comm="syz.1.23610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 853.636850][ T3385] IPVS: starting estimator thread 0... [ 853.682388][T31624] loop4: detected capacity change from 0 to 164 [ 853.693908][T31624] rock: directory entry would overflow storage [ 853.706499][T31624] rock: sig=0x66, size=4, remaining=3 [ 853.712764][T31624] rock: directory entry would overflow storage [ 853.719397][T31624] rock: sig=0x66, size=4, remaining=3 [ 853.727672][T31619] IPVS: using max 2640 ests per chain, 132000 per kthread [ 853.793760][T31635] loop4: detected capacity change from 0 to 512 [ 853.809238][T31635] EXT4-fs: Ignoring removed oldalloc option [ 853.810041][T31637] bridge1: entered promiscuous mode [ 853.820732][T31637] bridge1: entered allmulticast mode [ 853.831481][T31637] team0: Port device bridge1 added [ 853.834384][T31635] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.23625: invalid indirect mapped block 4294967295 (level 1) [ 853.851020][T31635] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 853.852398][T31635] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.23625: invalid indirect mapped block 4294967295 (level 1) [ 853.861591][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 853.861632][ C0] EXT4-fs (loop4): initial error at time 2000001883: ext4_free_branches:1023: inode 11 [ 853.861666][ C0] EXT4-fs (loop4): last error at time 2000001883: ext4_free_branches:1023: inode 11 [ 853.865703][T31637] bridge0: port 3(team0) entered blocking state [ 853.910769][T31635] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 853.911118][T31635] EXT4-fs (loop4): 2 truncates cleaned up [ 853.926927][T31635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.939892][T31637] bridge0: port 3(team0) entered disabled state [ 853.956253][T31637] team0: entered allmulticast mode [ 853.963570][T31637] team_slave_0: entered allmulticast mode [ 853.975648][T31637] team_slave_1: entered allmulticast mode [ 853.994530][T30534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.017094][T31637] team0: entered promiscuous mode [ 854.024237][T31637] team_slave_0: entered promiscuous mode [ 854.030264][T31637] team_slave_1: entered promiscuous mode [ 854.036397][T31637] bridge0: port 3(team0) entered blocking state [ 854.042802][T31637] bridge0: port 3(team0) entered forwarding state [ 854.156752][T31652] loop9: detected capacity change from 0 to 256 [ 854.268619][T31657] netlink: 'syz.4.23635': attribute type 12 has an invalid length. [ 854.306997][T31657] netlink: 'syz.4.23635': attribute type 29 has an invalid length. [ 854.347822][T31657] netlink: 148 bytes leftover after parsing attributes in process `syz.4.23635'. [ 854.407740][T31649] IPVS: You probably need to specify IP address on multicast interface. [ 854.416480][T31649] IPVS: Error connecting to the multicast addr [ 854.810396][T31688] netlink: 'syz.9.23648': attribute type 12 has an invalid length. [ 854.846348][T31688] netlink: 'syz.9.23648': attribute type 29 has an invalid length. [ 854.882191][T31688] netlink: 148 bytes leftover after parsing attributes in process `syz.9.23648'. [ 855.132791][ T3385] IPVS: starting estimator thread 0... [ 855.237758][T31701] IPVS: using max 2352 ests per chain, 117600 per kthread [ 855.430290][T31721] netlink: 'syz.8.23661': attribute type 12 has an invalid length. [ 855.438736][T31721] netlink: 'syz.8.23661': attribute type 29 has an invalid length. [ 855.446909][T31721] netlink: 148 bytes leftover after parsing attributes in process `syz.8.23661'. [ 855.484283][T31722] bridge1: entered promiscuous mode [ 855.497589][T31722] bridge1: entered allmulticast mode [ 855.549057][T31722] team0: Port device bridge1 added [ 855.550476][T31736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23668'. [ 855.640158][T31730] bridge0: port 3(team0) entered blocking state [ 855.647921][T31730] bridge0: port 3(team0) entered disabled state [ 855.667275][T31730] team0: entered allmulticast mode [ 855.680340][T31730] team_slave_0: entered allmulticast mode [ 855.697430][T31730] team_slave_1: entered allmulticast mode [ 855.715511][T31730] team0: entered promiscuous mode [ 855.740899][T31730] team_slave_0: entered promiscuous mode [ 855.755103][T31730] team_slave_1: entered promiscuous mode [ 855.771573][T31730] bridge0: port 3(team0) entered blocking state [ 855.778006][T31730] bridge0: port 3(team0) entered forwarding state [ 856.650838][T31790] loop9: detected capacity change from 0 to 164 [ 856.660308][T31792] loop4: detected capacity change from 0 to 512 [ 856.714143][T31792] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 856.724029][T31792] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 856.748220][T31790] rock: directory entry would overflow storage [ 856.761523][T31792] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 856.775712][T31790] rock: sig=0x66, size=4, remaining=3 [ 856.798364][T31787] rock: directory entry would overflow storage [ 856.804833][T31792] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 856.815285][T31787] rock: sig=0x66, size=4, remaining=3 [ 856.823471][T31792] System zones: 0-2, 18-18, 34-35 [ 856.834639][T31792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.059148][T30534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.141475][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 857.141492][ T28] audit: type=1326 audit(2000001886.681:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 857.182845][T31834] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23690'. [ 857.195872][ T28] audit: type=1326 audit(2000001886.711:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 857.241699][ T28] audit: type=1326 audit(2000001886.711:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 857.274033][ T28] audit: type=1326 audit(2000001886.721:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 857.304552][ T28] audit: type=1326 audit(2000001886.721:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 857.371498][ T28] audit: type=1326 audit(2000001886.721:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31839 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8dc476cfce code=0x7ffc0000 [ 857.417333][ T28] audit: type=1326 audit(2000001886.721:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 857.442938][ T28] audit: type=1326 audit(2000001886.871:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31839 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 857.467847][ T28] audit: type=1326 audit(2000001886.881:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8dc474db19 code=0x7ffc0000 [ 857.509250][ T28] audit: type=1326 audit(2000001886.881:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.6.23689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc47ac799 code=0x7ffc0000 [ 858.399800][T31897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23711'. [ 858.420882][T31897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23711'. [ 858.588530][T31911] loop4: detected capacity change from 0 to 512 [ 858.605186][T31911] journal_path: Lookup failure for './file2' [ 858.621137][T31911] EXT4-fs: error: could not find journal device path [ 858.821277][T31927] loop4: detected capacity change from 0 to 164 [ 859.095146][T31955] loop9: detected capacity change from 0 to 164 [ 859.142138][T31957] loop9: detected capacity change from 0 to 1024 [ 859.165407][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23741'. [ 859.165482][T31957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.196345][T31957] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.23739: inode #26214: comm syz.9.23739: iget: illegal inode # [ 859.210847][T31957] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.23739: error while reading EA inode 26214 err=-117 [ 859.239332][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.822047][T32018] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23764'. [ 859.825203][T10397] kernel write not supported for file bpf-prog (pid: 10397 comm: kworker/0:12) [ 859.957244][T32042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.965503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.010286][T32046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23780'. [ 860.097822][T10397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.133502][T32060] netlink: 32 bytes leftover after parsing attributes in process `syz.8.23788'. [ 860.257836][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.432627][T32091] loop4: detected capacity change from 0 to 1024 [ 860.461911][T32091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 860.542363][T32091] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.23800: inode #26214: comm syz.4.23800: iget: illegal inode # [ 860.556869][T32091] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.23800: error while reading EA inode 26214 err=-117 [ 860.603497][T30534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.961318][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 861.021375][T32129] loop9: detected capacity change from 0 to 1024 [ 861.060619][T32129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.096221][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.297770][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.309692][ T3419] kernel write not supported for file bpf-prog (pid: 3419 comm: kworker/1:3) [ 861.522230][T32172] syzkaller1: entered promiscuous mode [ 861.531863][T32172] syzkaller1: entered allmulticast mode [ 861.684113][T32185] loop9: detected capacity change from 0 to 4096 [ 861.707147][T32185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.788923][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.903464][T32199] loop9: detected capacity change from 0 to 4096 [ 861.931857][T32199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.978944][T22918] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.105632][T32220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23853'. [ 862.331394][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 862.331411][ T28] audit: type=1400 audit(2000001891.871:6570): avc: denied { view } for pid=32256 comm="syz.8.23871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 862.359311][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.057068][ T28] audit: type=1326 audit(2000001892.591:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.087996][ T28] audit: type=1326 audit(2000001892.591:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.112447][ T28] audit: type=1326 audit(2000001892.621:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.136702][ T28] audit: type=1326 audit(2000001892.621:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.165736][ T28] audit: type=1326 audit(2000001892.621:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.191388][ T28] audit: type=1326 audit(2000001892.621:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.229894][ T28] audit: type=1326 audit(2000001892.621:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.253821][ T28] audit: type=1326 audit(2000001892.621:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.277823][ T28] audit: type=1326 audit(2000001892.621:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32289 comm="syz.1.23883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fb47c799 code=0x7ffc0000 [ 863.308259][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.378347][T21914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.398817][T32297] SELinux: failed to load policy [ 863.488230][T32312] syzkaller1: entered promiscuous mode [ 863.527695][T32312] syzkaller1: entered allmulticast mode [ 863.917748][T32362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23915'. [ 863.989312][T32369] netlink: 'syz.6.23928': attribute type 1 has an invalid length. [ 864.001790][T32369] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.23928'. [ 864.257942][T21914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.274190][T32408] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 864.341597][T32415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23937'. [ 864.355213][T32415] netlink: 'syz.6.23937': attribute type 29 has an invalid length. [ 864.364764][T32415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23937'. [ 864.423261][T21914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.813571][T32428] ================================================================== [ 864.821660][T32428] BUG: KCSAN: data-race in __stop_tty / __uart_start [ 864.828509][T32428] [ 864.830834][T32428] write to 0xffff88813277f1bc of 1 bytes by task 32434 on cpu 1: [ 864.838534][T32428] __stop_tty+0x36/0x90 [ 864.842863][T32428] n_tty_ioctl_helper+0x2d1/0x370 [ 864.847980][T32428] n_tty_ioctl+0x101/0x230 [ 864.852392][T32428] tty_ioctl+0x83e/0xb80 [ 864.856627][T32428] __se_sys_ioctl+0xce/0x140 [ 864.861205][T32428] __x64_sys_ioctl+0x43/0x50 [ 864.865937][T32428] x64_sys_call+0x1563/0x3020 [ 864.870607][T32428] do_syscall_64+0x12c/0x370 [ 864.875199][T32428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.881085][T32428] [ 864.883403][T32428] read to 0xffff88813277f1bc of 1 bytes by task 32428 on cpu 0: [ 864.891017][T32428] __uart_start+0x8a/0x2d0 [ 864.895433][T32428] uart_write+0x186/0x530 [ 864.899749][T32428] n_tty_write+0x856/0xc20 [ 864.904247][T32428] file_tty_write+0x378/0x690 [ 864.908976][T32428] tty_write+0x25/0x30 [ 864.913036][T32428] iter_file_splice_write+0x6c4/0xa80 [ 864.918658][T32428] direct_splice_actor+0x156/0x2a0 [ 864.923856][T32428] splice_direct_to_actor+0x311/0x670 [ 864.929389][T32428] do_splice_direct+0x119/0x1a0 [ 864.934313][T32428] do_sendfile+0x382/0x650 [ 864.938742][T32428] __x64_sys_sendfile64+0x105/0x150 [ 864.943967][T32428] x64_sys_call+0x2dc4/0x3020 [ 864.949039][T32428] do_syscall_64+0x12c/0x370 [ 864.953643][T32428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.959970][T32428] [ 864.962367][T32428] value changed: 0x00 -> 0x01 [ 864.967031][T32428] [ 864.969445][T32428] Reported by Kernel Concurrency Sanitizer on: [ 864.975825][T32428] CPU: 0 UID: 0 PID: 32428 Comm: syz.8.23941 Tainted: G W syzkaller #0 PREEMPT(full) [ 864.986852][T32428] Tainted: [W]=WARN [ 864.990831][T32428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 865.001027][T32428] ================================================================== [ 865.022867][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.459602][T21914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.498264][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.297879][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.538004][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.578392][T21914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.377950][T10397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.617914][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.018276][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.658804][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.297893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.697786][T21914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.947907][T10397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.418129][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.738033][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.777994][T21914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog