last executing test programs: 4m22.310075957s ago: executing program 32 (id=383): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x2, 0x0, 0x0, 0xfffffffc}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3m52.69058984s ago: executing program 33 (id=1081): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1060a2, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) 3m50.955475667s ago: executing program 34 (id=1113): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300, 0x0, 0x0, 0x805}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x3, 0x7c3, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x0, 0x0, 0x0, "f01881a1deb9fbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x20000841) 3m5.892250013s ago: executing program 35 (id=2877): r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0xc0002014}) 2m57.747422561s ago: executing program 36 (id=2647): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2m44.810352599s ago: executing program 9 (id=3347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)={@val={0x6f01, 0x800}, @val={0x2, 0x1, 0x6, 0x6, 0x6, 0x81}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x2, 0x29, 0xfc0, 0x66, 0x0, 0x7f, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x14, 0xb, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, "0a23f8f332cf7bf423e8013db1e6fbe7e03857d663d5dac820b6d3a30a83e39d9f4d1c39f466e889ab49a0d6cfb46d08b5563bcf3650ac0d95436acfc6b5f7ea6b68867688d79e7c935c5c64033a4cbbf81cf2209c862afcdbd3e64ff5b4acc41a22be5d984766efc593db7fe2b6ba4dc12c719d7cf3561f10af6c825ccb4db86ebab359893c58f90cdf9a7d75e7985f6de9c1a735a6e0480b5372f6ff715067d9fa7b02af118920025e3c3f1d406cdab9b49d7d54b1e08620cf57b37222d70efae17f4968ad2e064c218a9dcd0c7b90004cafd3ad29fd8d94b8c3e91f3db389294bad70990b978a7a54f3eca227fd008c9e7da0a5fa66942d351bae98becb59ab0a544ce54fbacfe809b12f7ba7f3452871adcbc6f5aaf8f006bb6e5dbc815809842eb5f50e45ef174807914724829417d85409db7c0a4f8ebdc05442a1b86a5b7b01a869be11efb1bfef9a318b5ce969f75ae85547e6afe38d0d86d85928cc89e71e4197567b4e420fa86a16423fff4d86615aa5b6685323200041de675a70934051f227a85ff9a36f192ad106052f241c2ce7da2b7df542d43bfeeb4b4404dd4c94eb9931a9128f5f3f5ca657a61be8c29645fb442d9467c228fc45cd53a82c92b761d22a6d466a3b085e22c82642702c582c74f0f6556333bc672a2f38498fbb0c8f5e13c08b92a21f2fc26b2ab80891ed0c1c27f87de60b2a4bfce9c0e153cb06e4c83e1833cd1f3cca390c1707d2c70a59040d6ca9f91868afd556a5b12f617a6ca5c41a836df4ea88f088aae941e11398830885ef9488aa677b22aa9c2401cdf166866f3204733ff51d78df431374df261e7f08a0e294a0555c1e34670c62ea8cb8d03c0a97e4cbbf6cd4400905e0be8217721f9b0515b3b2eefadfdf4d6abf55c18d3f139cc4f6d0f54b700fc7cf108842d4b5f43d0d3ee0e0c8f07097aa92b4bf78a711529e393f3838063c21d06d3172c42d84e575ae3411521cc03ea6202e8c6234f22742410bb2ff1b15d59e2f3354294a7df6d6bd6529708194fd2386e269ccea0234fdb0324ec38fa633516241363e5bcbdf05991fa113d303b384949c1da648fbdb234a478b69c47a95f1495b96a9c5380225d2aeec111a12e9511072073213b9cb84b536bc51e6a6fdde352796a351ae3c30dd09c6a411d335ee51ada31b92004388754d8f7823363aa2a173ebcc1b9c681f22d7b3e9d28a4e68c1c576d94ef1a994c31cfd4f645cd8b92db18262c92c105353287ced2c498e3396b3915c6137e40da6fbd7708ef6b7a1739bd2ccddced15d183971aeb5cb8bc877794654c467b32ca86f6c3db15a68f193e8fca6288b9e602412986105902440110588ee136f948ee0c47651526a47a001c5e5f4b55713288320730c70ae55269057dcb422edec10018f6b2fa0a6b1290a600de7c22dd770fc9c7d92c86df3c83cfc72e051eb2a1e613f76472fbcc649c98fe14a3bb0be041f8f15de12f00c4d521c8503ef2f740b84f57713538b3e427e8463fd8876ed88ece065f49b76610a6e943a562fe4505c60a075f05c1a6422fb6ed59c98790b6dd372364f5a7702418769b204ffe8bba4ea5be3cbf1a45158c2c5d3e383480912439972a20193be5226d3759ce53621fadb43b126d76e2aa1cc1abb164bf6bf8f75221d810db3f78592da2142fee142105236b151f1c9406bef95f84ff4a6fc5482048ea0a4bebc537e4bb839b0c0706a1f91e6d86b0b70e2c32877a88918854740cebe56309fd406f6c3522408521c09f8786be31c377d65afd32b92a860fb2af1e2575ca0375044decad9b5f815cc11af34d584cfea3d60faafc0a0653660d952729292086d63e77756f2153d62f2ff0fd28f30f3e78e3b80a745d080e6063170ae66f9a850aec424e8514e00bd749dba3ba4f59acfc7c34ca5d296220ee9e97b01b449f40f9ff8bf18141e97749c56b55fdbfacaf0684b9c1d13783c020e8e53d76cfedddaf661cac9f8e69c4eccbf48ffeb5848ff72f47abc76c74a2266fe04a1e8c2fa0c5c7c4e6f364e178f7e35dc049b41b8485699f87ea63cde670164e8062084db40320130666e47419e3abf717f54f2fd7c77ea0400ad8166c113c3929b7e1322f93f07965485d9df6d262c42183f4d4de74048a1c88f30f2d9af34436a2721aea7fff4def627effa5c8da39a5d1f09b70829e32cdb7001419775f1244895da14f32b4f66829dd310f9c4409dc9c3e4fc4f0e65ad5c4ba76d508a752083dfffde490e1f935c5c68bd6cf608c1dcdd079f5a79b92531cf137bd82d703a38cd6c628e9803bfbe8624814d2c4b29f148e305bb586888a0634fce5678bce5ca3dedebd63dbb67222103a7b10d9284caebbf891b1c75e62ec7805d8ad7b9a0aef486cea909e188b512a6ab9a7ec69f799144dd5e2e57ea240ccec723fd52a81354f6b8ba89de03ab82a6259a0becc0ccd111282d98f4c60349f18f4bb17e59e3225586bccf9ebe7a9c93b787bbee0743c255814d9a0b21516bd0cf9ffd9b4e609a4c01456cd322c30a8e1234e9016bf4bb18ebee12ef89d7451c96f6b10fa828fdc3c7745ca72ee51420c1b10195820b2100e684d6ee78de2a27ec9540050f5c1ff383d1550428ff8153f98a5a83ee8c66fb365caebdf2beef04c8b997e7ea19387e3eef9e5783fee7c82848eadda50fbc9d57a0ef92b37f5feb5ae2267fbebb84505169a2d0be7bb6a1b2c056888e74fb31d57a12be63adf2a1e9aee27d41ebc3941038e0415d377dc83ed22891f444a38f56956c55875b4c35b49584f9c753c285547c57ee70ff42a4436479b2b1830d1ee6200625fb1623bfa834295ec42ccaafec1f8f63bdbfeae6405b0af97d443c6a54f9b1495a3542e6b61e86c08fef06bc61dec9e97b57a082604ed4d9a0eaa1529457de6551c900e9f51399d2078b7897581df04255f81e87bbd0b6228ffd1bfb403f5e61a7dc677ae1d4759430001e43fa258c6c43fdb7099512c1831e4faa6cdbc319f7ccb830742ca8bf9ded15ae15a236518db319ade961555c32440922f08768d3cb32f4ff28609e390e253bead09182ef551450536fe41f22c44982a0819f5fce4f2d092224f23d36760b6d74d97be399a51bbf15b00edfb6a3591ff263ee8af205732d4bf8a06b4362cac2b1061dee992c140d7fce82e1e1aeeb1037c840ade5e08ed34f10fabb205f7def71f9f524dc6e471d19cb70b6c6ae29b0ec54ca09947591854048701715aba871cb0b145eda3aff6ddbee8134e425392134e41b9035b40d872668a55da07cecf4e0590d1e35e111d36f25840000599ed99ca1c5f111b7469eeaadd26c4e0f06b152a1b810dd1cdb44701f019dc37dd8f3569f919431aebeaece87a892ae10e3b89babb148973cbbd74642a916aa2a92a92e9903b425db65f93643df1364055b42cdea64e30f02b04715c1d96233bb19463cd155677168333e783f052525322168762353f563f64faf5c1cae4cc024027168aa362aa18b630ac4dd69a6c7a1bc929d31538ce175035af573408b49e872865f08a60c804dac73f8dab0a8609f6a70618831e37da35c457401d05043afd37821467307e2401b3abe02795333089aec44fd8dab4af2ad0e4d7e1a98a909ef4c0021a181b362954ba28f83062eac79fca78860737ea6b3502b69cc1f105200fa13c67a144331f735931859ae5fc586688888c05454cf7631842a09dc66cc54431ba79a695a37511e2b263d885d526cdeafb77d5a7eac055e312ed57d6b4efa850a300390ade805bbc13b5642e8b2b60b4187b6f4f77bd38380f1149536f302763e0e2ac244b7df17c1f7954ff664bb378a36f6e1d4b465eb480d52c7a84381cbd551e76ded30ae7f2389c56deaae3ab0860be087b855a511f32632c6d80cabdf8225992657146a038256127a996f245c56f18b9661959effe3dcfad36ca9210af200e7ff32abad7f69673f06c64f1d48529c2a0dacfdff30eacde230f78d278c4f32877fb1bd1ff807eeea5efb74cba0531d103badc76f1519247064b41abcb0c4e83545540d7902602625ed7e8d4171f408ea56828b4e110003ce205c887573bd539255cae654b679f5421e870e3d1f4e300675a359a52d0cad5b22ad9774a1c2cb48b30e8c342cc7d78c76fa5842dade184e3871bfbc75e1453c579c868b53ad0678c8ab3e1abd31525d63a53ca55517f61f07df20fc5036c39458ccce5712d71bcb288f93633473f19f00d88cfc1d7787997ea9a807f5c2cda070977d58694a8abf06621d4fdb55d33997cb334e78cae708a929075b7fc45cb84535b3b5602dac59fcfe95d4163fe8011f058e12972e45f64bf6825a0a9b17b3002bc9c085f288c7cc991007c40d5373aad1b320c5bda3be69f5b517156c487933466dfa2aa9f92a9188593b68f0c9cdd1041f8b1d39f6cbb3e9b052ee043077699d520663b86710cd969ec60d147a560229f675ba704bffdc4777f5a235948dec27775b3e41efb1b9d739a547bc8fb38ace27941b29233ec659c2dc609694f69cc9fb5256a1582c926a69f4508e3bf49c1c23ef14dc6e5bcd98216f9fe83b2fc32ff980c1fdb15f793f313e2776744bf2ab39ad07ca55764ad495f19462486e0b4ed211074d7a174767af64c930180f89224d8999f0017fb68136a1cfcd6a686f8bcea98c87f4a94d60081f1d765aabafa9f1eb4097248e2db164811c2392b0aa638659e8e815b2e37ba5017e9361849eae657a4790d3107f213e22fbea401a4cb67c93a3ea57c9167d5fb8996b7ec212a26bca511c348f8c2626591f45ea9d3a7b25297d1e21f5fe5f962fbc5543373eb8ba9a5800e275bcca96ceb0daf6ab4d905083c5ecf8cab0996770fc901ff28860f318ae5c512a5e81474ebe6c2df468a48bd859035f6992d4d3c43c86bc81742a0b6c475e8cafaf1eb87af4535d5c50249296ad676ec325b3ecd8e9942b59b7d26d18cef1032703d3e45e4bd4d296f98a1fda6fd2120985d608c2b96ceebf686391adef1f9cb389062425450f6d6fac0faea0369f69c92af49bf4d3222acd0eac3024c083a6fb896e5c5856e10bb2777e0003c25c624c1dc01498f40dc29288365fa4d06f82945c8c839ac34b34d11c1c07cec4d250d9739d701a78ce23d7e57f04f55d8af200f31ed9de7df524c3f7c558ccf8fd75318e22fb3c9907470aa2c88dbc58c3146cec80baa1cbd30944620779408ce1c7af0ecdd25adc044ea07c01b0154168ab61bf65b17cdd45095339f65b1ec1a786e3b3b8bdaf3e883afff8872fa8114fcf13524326c2c96dfd251ec6316e25ae6e59464de4c68e6faa5f85479a4c07f8664a0b9da88f0d7e2218812e2dab5abea2bdff3c782c1bda885c65211f3b049311d96247b369594d628b8964b6e74f484b2f1df3fa74b38103098ccfffc27ca4fb36624c643add0e51eefc072cf12172e2203bbaad84cfca2dfe5eb02b08cd18d2ad21b3b2a9fa3d7ccee15b4867f14a87c9fc0cf04ccbdc5bbdf36aa5a0bfc551075aa93e40e8e2379362b429917d51344061fb3ef755d7a1d46de9b099631c8ba3e2f2a318602bb8f16e292176a56d75f8e8918238342c58a8f2c881c1d15ff246d04df0cd451d1e9a57f99554ff9832c1de1f1e4ae85b081cf6a4c0ac3af637130ad911dcf5"}}}}, 0xfce) 2m44.704867144s ago: executing program 9 (id=3349): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8, 0x0) 2m44.643228777s ago: executing program 9 (id=3351): r0 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffe, 0x67, 0x4, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/104, 0x68}) 2m43.755672291s ago: executing program 9 (id=3366): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x80, 0x0) 2m43.736607252s ago: executing program 9 (id=3367): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m43.672147356s ago: executing program 9 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m28.587692101s ago: executing program 37 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m25.186501411s ago: executing program 6 (id=3529): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file2\x00', 0xa4000061) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x54) 2m24.976861542s ago: executing program 6 (id=3533): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x4080) 2m24.881997936s ago: executing program 6 (id=3535): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000d00)={0x2, 0x0, @local}, 0x10) 2m24.221349179s ago: executing program 6 (id=3554): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') 2m24.157609303s ago: executing program 6 (id=3557): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x0, 0x800}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)="06ee035078e3e3ad2755285503c7914bff341afabc4a50960d4fa3ae8fb9ec856d1cab69909d5fba4d73a304b0c1274a4e2bfb06e3363f642011243c", 0x3c, 0x1) readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) 2m23.828238789s ago: executing program 6 (id=3569): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) 2m23.796008581s ago: executing program 38 (id=3569): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) 1m56.308091037s ago: executing program 3 (id=4255): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) write(r1, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) sendfile(r0, r1, 0x0, 0x101) 1m56.222264351s ago: executing program 3 (id=4258): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000) 1m56.04235008s ago: executing program 3 (id=4262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1m55.990816563s ago: executing program 3 (id=4265): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m55.922825546s ago: executing program 3 (id=4267): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x107) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) times(&(0x7f0000000000)) 1m55.691966668s ago: executing program 3 (id=4273): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1m55.690715798s ago: executing program 39 (id=4273): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1m28.007346384s ago: executing program 7 (id=5004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1m27.980576215s ago: executing program 7 (id=5006): unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = openat(r0, &(0x7f0000001480)='./cgroup.cpu/cgroup.procs\x00', 0x27, 0x92) sendfile(0xffffffffffffffff, r1, 0x0, 0xf2) 1m27.938777127s ago: executing program 7 (id=5009): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3c738, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x6, 0x100000001}, 0x10026, 0xffffffff, 0x1, 0x3, 0x100008, 0x482, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200040a, &(0x7f00000003c0)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@commit={'commit', 0x3d, 0xb8}}, {@orlov}], [{@subj_user={'subj_user', 0x3d, '}/'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@audit}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 1m27.703813539s ago: executing program 7 (id=5018): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0xfea}, 0x50) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r2, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) 1m27.520993518s ago: executing program 7 (id=5026): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x17d) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x201) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m27.478016021s ago: executing program 7 (id=5029): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfaf8, 0x10, 0x2, 0x11a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0xdb4, 0xff7ffffd, 0x0, 0x0, 0x0) 1m12.479148752s ago: executing program 40 (id=5029): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfaf8, 0x10, 0x2, 0x11a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0xdb4, 0xff7ffffd, 0x0, 0x0, 0x0) 10.881882725s ago: executing program 8 (id=6683): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff507000000000000030"], 0x0}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001d40)=""/4067, 0xfe4}, {&(0x7f00000006c0)=""/149, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {0x0}], 0x5}}], 0xffffffffffffff55, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x200010d4) 10.7919388s ago: executing program 8 (id=6687): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) 10.692817185s ago: executing program 8 (id=6700): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f00000008c0)="$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") syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/27, 0x1b) 10.479784665s ago: executing program 8 (id=6697): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 10.210922789s ago: executing program 8 (id=6702): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100039042abd70000000004000000000", @ANYRES32=r1, @ANYBLOB="0118020003110000300012800b00010065727370616e"], 0x50}, 0x1, 0x0, 0x0, 0x45845}, 0x4048084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 9.840065547s ago: executing program 8 (id=6710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) 9.836886527s ago: executing program 41 (id=6710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) 1.412612449s ago: executing program 4 (id=6916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) 1.383059261s ago: executing program 4 (id=6919): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@data_err_ignore}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_io_uring_setup(0x6f21, &(0x7f00000010c0)={0x0, 0x4f0f, 0x100, 0x0, 0x2c5}, &(0x7f00000002c0), &(0x7f0000000000)) 1.313699114s ago: executing program 1 (id=6930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x8, 0x3, 0x0, 0xffda}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x202, 0x1c, 0x1000}, 0x10) sendto$inet6(r0, &(0x7f0000000280)="ff", 0x1, 0x4000080, &(0x7f0000000300)={0xa, 0x4e21, 0xbe4, @loopback, 0x800000c0}, 0x1c) 1.123435514s ago: executing program 4 (id=6925): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 976.937791ms ago: executing program 4 (id=6927): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 976.835921ms ago: executing program 5 (id=6928): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 938.771443ms ago: executing program 5 (id=6931): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, 0x0) 933.097443ms ago: executing program 4 (id=6932): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0xeffb, 0xe396) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xb, 0xffff}) 852.091577ms ago: executing program 5 (id=6934): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_GET_THP_DISABLE(0x2a) 681.882666ms ago: executing program 2 (id=6935): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 681.759746ms ago: executing program 5 (id=6936): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) 681.393226ms ago: executing program 4 (id=6945): r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x41, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 636.136778ms ago: executing program 2 (id=6937): semop(0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0xfffffd5f) 591.99461ms ago: executing program 5 (id=6938): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x575, &(0x7f0000000d00)="$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") setxattr$system_posix_acl(&(0x7f00000002c0)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [], {0x4, 0x3}, [], {0x10, 0x1}}, 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x444, 0x0, 0x1, 0x0, &(0x7f0000001280)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) 591.83782ms ago: executing program 2 (id=6939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 356.063842ms ago: executing program 1 (id=6942): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) 355.882522ms ago: executing program 2 (id=6943): socket(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 355.770002ms ago: executing program 0 (id=6944): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x1e0ff, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 354.953112ms ago: executing program 1 (id=6954): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x68be, 0x5002, 0x4, 0x0, 0x0) 243.348758ms ago: executing program 2 (id=6946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 242.618218ms ago: executing program 0 (id=6957): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}], 0x1}, 0x10182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="380100001a00016000feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e0000000535000002"], 0x138}}, 0x844) 216.488179ms ago: executing program 1 (id=6947): unshare(0x22020400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xff000000, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) 159.493692ms ago: executing program 0 (id=6948): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$packet(r0, &(0x7f0000000040)="9ff0d9abbd4d04845d67037b717cc1ec739a3dec6a7bb51b6a38", 0x1a, 0x20000800, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 151.285103ms ago: executing program 5 (id=6949): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) poll(&(0x7f000000bcc0)=[{r0, 0x40}], 0x1, 0x200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f000000c240)=0x11) 76.693616ms ago: executing program 1 (id=6950): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) 76.269566ms ago: executing program 0 (id=6951): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0xa, 0x4e29, 0x100, @local, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000600)='F', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000400)='a', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000002900000008000000dcba8f5b0000000098000000000000002900000037000000620f000000000000c91000000000000000000000ffff0a010101c910fe8000000000000000000000000000bb05020002052893965261c0fff7fb2856778fc00e21280de5e33a37a30897500a968e6de7902e70254e9b254e32d80401050502000301050000000000c204000000050502d35fc910fe80000000000000000000000000001e00000000e0"], 0x190}}], 0x2, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x81, 0x401}, &(0x7f0000000140)=0x90) 53.203537ms ago: executing program 2 (id=6952): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 305.07µs ago: executing program 1 (id=6953): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5d}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 124.94µs ago: executing program 0 (id=6955): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a6c000000060a010400000000000000000a0004050900010073797a3100000000400004"], 0x94}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 0 (id=6956): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe828, 0x800, 0x0, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/206, 0xce}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): type=1400 audit(2000001196.641:1459): avc: denied { execute } for pid=17054 comm="syz.2.5143" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 253.086192][T17072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5152'. [ 253.095373][T17072] bond0: ARP target 8.4.0.0 is already present [ 253.108448][T17072] bond0: option arp_ip_target: invalid value (1032) [ 253.922263][T17100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 253.946337][T17100] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 254.552261][T17133] loop4: detected capacity change from 0 to 2 [ 254.561277][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.577001][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.612726][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.622887][ T28] audit: type=1326 audit(2000001198.401:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.2.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 254.630411][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.650502][T12720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.709725][ T28] audit: type=1326 audit(2000001198.441:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.2.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 254.791949][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.803241][ T28] audit: type=1326 audit(2000001198.441:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.2.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 254.816413][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.872416][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.875726][ T28] audit: type=1326 audit(2000001198.441:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.2.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 254.883732][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.959337][ T28] audit: type=1326 audit(2000001198.441:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17136 comm="syz.2.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 255.026962][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.034971][T12294] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.314263][ T28] audit: type=1326 audit(2000001199.081:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 255.359748][T12720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.435339][ T3385] net_ratelimit: 16 callbacks suppressed [ 255.435359][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.445401][ T28] audit: type=1326 audit(2000001199.081:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 255.457858][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5192'. [ 255.515655][ T28] audit: type=1326 audit(2000001199.081:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 255.611980][ T28] audit: type=1326 audit(2000001199.081:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 255.659250][ T28] audit: type=1326 audit(2000001199.081:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17164 comm="syz.1.5191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 255.736677][T17185] vcan0: tx drop: invalid sa for name 0x0000000007fffffe [ 256.022900][T12720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.032335][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.040521][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.051177][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.059552][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.069461][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.427625][T17209] netlink: 'syz.2.5210': attribute type 5 has an invalid length. [ 256.637214][T12720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.646176][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.654327][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.753526][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5217'. [ 257.886265][T17261] syzkaller1: entered promiscuous mode [ 257.902937][T17261] syzkaller1: entered allmulticast mode [ 258.166556][T17271] 9p: Bad value for 'rfdno' [ 258.759526][T17300] loop4: detected capacity change from 0 to 2 [ 259.026375][T17313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.058673][T17313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.811638][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5265'. [ 259.903548][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 259.903568][ T28] audit: type=1400 audit(2000001203.671:1477): avc: denied { append } for pid=17343 comm="syz.1.5277" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 260.405863][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.453013][T17358] loop8: detected capacity change from 0 to 1024 [ 260.479289][T12720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.510254][T17358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.570864][T17358] IPVS: persistence engine module ip_vs_pe_€ not found [ 260.617676][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.787435][ T3385] kernel read not supported for file 451/task/452/status (pid: 3385 comm: kworker/1:3) [ 260.979079][ T28] audit: type=1400 audit(2000001204.751:1478): avc: denied { nlmsg_read } for pid=17379 comm="syz.8.5281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.979088][T17382] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5281'. [ 261.053433][ T28] audit: type=1400 audit(2000001204.781:1479): avc: denied { listen } for pid=17381 comm="syz.2.5283" lport=40354 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.106395][T17393] loop8: detected capacity change from 0 to 512 [ 261.161600][T17393] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5286: invalid indirect mapped block 256 (level 2) [ 261.175176][T17393] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 261.185151][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 261.200852][ C0] EXT4-fs (loop8): initial error at time 2000001204: ext4_free_branches:1023: inode 11 [ 261.210585][ C0] EXT4-fs (loop8): last error at time 2000001204: ext4_free_branches:1023: inode 11 [ 261.221081][T17393] EXT4-fs (loop8): 2 truncates cleaned up [ 261.235772][T17393] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.275379][ T3385] net_ratelimit: 6 callbacks suppressed [ 261.275460][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.326446][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.504887][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5289'. [ 261.561915][T17408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5290'. [ 261.582360][T17408] bridge0: port 3(syz_tun) entered disabled state [ 261.589242][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.596754][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.652386][T17413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5290'. [ 262.315895][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.397862][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.407498][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.425347][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.357568][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.449055][T17442] loop8: detected capacity change from 0 to 164 [ 263.454133][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'. [ 263.478278][T17442] ISOFS: Bad logical zone size 2816 [ 263.524161][T12720] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.602442][T17423] chnl_net:caif_netlink_parms(): no params data found [ 263.663898][T17423] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.677332][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.685058][T17423] bridge_slave_0: entered allmulticast mode [ 263.694635][T17423] bridge_slave_0: entered promiscuous mode [ 263.702262][T17423] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.709518][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.716885][T17423] bridge_slave_1: entered allmulticast mode [ 263.723412][T17423] bridge_slave_1: entered promiscuous mode [ 263.751295][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.765312][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.807400][T17423] team0: Port device team_slave_0 added [ 263.818726][T17423] team0: Port device team_slave_1 added [ 263.842446][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.851287][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.881614][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.967198][ T50] team0: Port device bond0 removed [ 263.973345][ T50] bond0 (unregistering): Released all slaves [ 263.981257][ T50] bond1 (unregistering): Released all slaves [ 263.990109][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.997487][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.024015][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.034956][ T50] tipc: Disabling bearer [ 264.040517][ T50] tipc: Left network mode [ 264.051321][ T50] hsr_slave_0: left promiscuous mode [ 264.057506][ T50] veth1_vlan: left allmulticast mode [ 264.133472][T17423] hsr_slave_0: entered promiscuous mode [ 264.139999][T17423] hsr_slave_1: entered promiscuous mode [ 264.146167][T17423] debugfs: 'hsr0' already exists in 'hsr' [ 264.152169][T17423] Cannot create hsr debugfs directory [ 264.222101][T17423] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.308308][T17423] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.338453][ T50] IPVS: stop unused estimator thread 0... [ 264.357434][T17423] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.405531][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.446971][T17423] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.530330][T17423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.541429][T17423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.558088][T17423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.573023][T17423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.642483][T17423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.679180][T17423] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.710879][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.718139][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.747714][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.754977][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.884046][T17423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.254789][T17423] veth0_vlan: entered promiscuous mode [ 265.264642][T17423] veth1_vlan: entered promiscuous mode [ 265.286984][T17423] veth0_macvtap: entered promiscuous mode [ 265.295015][T17423] veth1_macvtap: entered promiscuous mode [ 265.314617][T17423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.333613][T17423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.348570][T11221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.365501][T11221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.374347][T11221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.396188][T11221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.435693][T11221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.447091][T13011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.455437][T13011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.512408][T17507] syz.2.5315 (17507) used greatest stack depth: 6664 bytes left [ 265.538019][T17577] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 265.596872][T11221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.606791][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.611115][T13955] Bluetooth: hci0: command 0x1003 tx timeout [ 266.134621][ T3385] kernel write not supported for file bpf-prog (pid: 3385 comm: kworker/1:3) [ 266.199435][T17626] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 266.224483][T17623] loop8: detected capacity change from 0 to 4096 [ 266.301614][T17623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.345870][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.481220][ T3385] net_ratelimit: 3 callbacks suppressed [ 266.481236][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.675567][T17656] syzkaller1: entered promiscuous mode [ 266.681127][T17656] syzkaller1: entered allmulticast mode [ 266.726163][ T28] audit: type=1326 audit(2000001210.501:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 266.771761][ T28] audit: type=1326 audit(2000001210.501:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 266.835596][ T28] audit: type=1326 audit(2000001210.531:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 266.889216][ T28] audit: type=1326 audit(2000001210.531:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 266.928247][ T28] audit: type=1326 audit(2000001210.531:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.2.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 267.018270][T17677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.026825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.036090][T17677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.044427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.052779][T11221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.429475][T17700] loop8: detected capacity change from 0 to 8192 [ 267.516355][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.536898][T17700] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 267.570800][T17700] FAT-fs (loop8): Filesystem has been set read-only [ 268.304608][ T28] audit: type=1326 audit(2000001212.071:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17757 comm="syz.1.5398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 268.359584][ T28] audit: type=1326 audit(2000001212.101:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17757 comm="syz.1.5398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 268.425186][ T28] audit: type=1326 audit(2000001212.101:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17757 comm="syz.1.5398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 268.475436][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.493645][ T28] audit: type=1326 audit(2000001212.101:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17757 comm="syz.1.5398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 268.548832][ T28] audit: type=1326 audit(2000001212.101:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17757 comm="syz.1.5398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 268.574236][T13023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.795212][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.049846][T17776] Process accounting resumed [ 269.105778][T17779] netem: change failed [ 269.298156][T17785] loop8: detected capacity change from 0 to 128 [ 269.316934][T17785] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.339869][T17785] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.351612][T17788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.394706][T14839] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.430980][T17794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.492135][T17798] loop8: detected capacity change from 0 to 512 [ 269.621800][T17798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.642211][T17798] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.887625][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.915852][T13011] page_pool_release_retry() stalled pool shutdown: id 120, 1 inflight 60 sec [ 271.365053][ T809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.368113][T12720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.401792][T17854] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5436'. [ 271.517669][ T3403] net_ratelimit: 4 callbacks suppressed [ 271.517689][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.577611][T17865] loop8: detected capacity change from 0 to 512 [ 271.646948][T17865] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 271.675239][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.684313][T17865] EXT4-fs (loop8): orphan cleanup on readonly fs [ 271.694243][T17865] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 271.709157][T17865] EXT4-fs (loop8): Cannot turn on quotas: error -5 [ 271.728098][T17865] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5440: bg 0: block 64: padding at end of block bitmap is not set [ 271.742887][T17865] loop8: lost filesystem error report for type 5 error -117 [ 271.743182][T17865] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 271.750825][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 271.750853][ C1] EXT4-fs (loop8): initial error at time 2000001215: ext4_validate_block_bitmap:441 [ 271.750885][ C1] EXT4-fs (loop8): last error at time 2000001215: ext4_validate_block_bitmap:441 [ 271.787464][T17865] loop8: lost filesystem error report for type 5 error -117 [ 271.793521][T17865] EXT4-fs (loop8): 1 truncate cleaned up [ 271.807488][T17865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.855552][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.247805][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5445'. [ 272.307097][T17880] vlan2: entered allmulticast mode [ 272.312564][T17880] bridge0: port 3(vlan2) entered blocking state [ 272.335348][T17880] bridge0: port 3(vlan2) entered disabled state [ 272.342790][T17880] vlan2: entered promiscuous mode [ 272.725328][T13023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.131569][T17953] Invalid argument reading file caps for ./file0 [ 273.448696][T17972] netlink: 792 bytes leftover after parsing attributes in process `syz.8.5486'. [ 273.479126][T17972] netlink: 792 bytes leftover after parsing attributes in process `syz.8.5486'. [ 273.505252][T17972] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5486'. [ 273.514698][T17976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.755243][T13023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.037615][T17999] netlink: 'syz.0.5495': attribute type 30 has an invalid length. [ 274.364180][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 274.364261][ T28] audit: type=1400 audit(2000001218.131:1507): avc: denied { read } for pid=18014 comm="syz.1.5500" path="socket:[59083]" dev="sockfs" ino=59083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 274.545141][T18028] loop8: detected capacity change from 0 to 128 [ 274.556273][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.593473][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.593473][ T809] loop8: rw=1, sector=141, nr_sectors = 8 limit=128 [ 274.648217][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.648217][ T809] loop8: rw=8388609, sector=157, nr_sectors = 1 limit=128 [ 274.705193][ T809] buffer_io_error: 26 callbacks suppressed [ 274.705213][ T809] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 274.743131][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.743131][ T809] loop8: rw=8388609, sector=158, nr_sectors = 1 limit=128 [ 274.788753][ T809] Buffer I/O error on dev loop8, logical block 158, lost async page write [ 274.797547][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.825159][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.825159][ T809] loop8: rw=8388609, sector=159, nr_sectors = 1 limit=128 [ 274.849254][ T809] Buffer I/O error on dev loop8, logical block 159, lost async page write [ 274.865178][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.865178][ T809] loop8: rw=8388609, sector=160, nr_sectors = 1 limit=128 [ 274.882863][ T809] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 274.891579][T17969] syz.4.5481 (17969) used greatest stack depth: 6072 bytes left [ 274.945570][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.945570][ T809] loop8: rw=8388609, sector=161, nr_sectors = 1 limit=128 [ 274.961435][ T809] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 274.971067][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.971067][ T809] loop8: rw=8388609, sector=133, nr_sectors = 1 limit=128 [ 274.986520][ T809] Buffer I/O error on dev loop8, logical block 133, lost async page write [ 274.995540][ T809] kworker/u8:6: attempt to access beyond end of device [ 274.995540][ T809] loop8: rw=8388609, sector=134, nr_sectors = 1 limit=128 [ 275.012025][ T809] Buffer I/O error on dev loop8, logical block 134, lost async page write [ 275.023334][ T809] kworker/u8:6: attempt to access beyond end of device [ 275.023334][ T809] loop8: rw=8388609, sector=135, nr_sectors = 1 limit=128 [ 275.039530][ T809] Buffer I/O error on dev loop8, logical block 135, lost async page write [ 275.048459][ T809] kworker/u8:6: attempt to access beyond end of device [ 275.048459][ T809] loop8: rw=8388609, sector=152, nr_sectors = 1 limit=128 [ 275.084561][ T809] Buffer I/O error on dev loop8, logical block 152, lost async page write [ 275.107586][ T809] Buffer I/O error on dev loop8, logical block 153, lost async page write [ 275.362803][T18046] netlink: 'syz.0.5514': attribute type 2 has an invalid length. [ 275.466666][T18063] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5517'. [ 275.476670][T18054] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5517'. [ 275.601761][T18078] netlink: 792 bytes leftover after parsing attributes in process `syz.1.5527'. [ 275.613120][T18078] netlink: 792 bytes leftover after parsing attributes in process `syz.1.5527'. [ 275.645164][T18078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5527'. [ 275.835348][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.844235][T13023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.000583][ T28] audit: type=1400 audit(2000001219.771:1508): avc: denied { read } for pid=18106 comm="syz.0.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.391474][ T28] audit: type=1400 audit(2000001220.161:1509): avc: denied { getopt } for pid=18153 comm="syz.4.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.494677][T18163] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5552'. [ 276.506266][T18156] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5552'. [ 276.700265][T18167] loop8: detected capacity change from 0 to 32768 [ 276.839348][T18184] netlink: 'syz.1.5557': attribute type 4 has an invalid length. [ 276.875247][T13023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.053558][T18216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.116514][T12714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.130060][ T809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.595390][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.794426][T18262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.925313][T13023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.341213][ T28] audit: type=1400 audit(2000001222.111:1510): avc: denied { recv } for pid=14839 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.81 dest=37424 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.416294][ T28] audit: type=1400 audit(2000001222.111:1511): avc: denied { read write } for pid=14839 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.461956][ T28] audit: type=1400 audit(2000001222.111:1512): avc: denied { open } for pid=14839 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.508301][ T28] audit: type=1400 audit(2000001222.111:1513): avc: denied { ioctl } for pid=14839 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.555205][ T28] audit: type=1400 audit(2000001222.171:1514): avc: denied { egress } for pid=3481 comm="kworker/0:5" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 278.580714][ T28] audit: type=1400 audit(2000001222.171:1515): avc: denied { sendto } for pid=3481 comm="kworker/0:5" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 278.613436][T18296] loop8: detected capacity change from 0 to 1024 [ 278.620052][ T28] audit: type=1400 audit(2000001222.171:1516): avc: denied { create } for pid=18290 comm="syz.8.5590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.643727][T18296] EXT4-fs: inline encryption not supported [ 278.676982][T18298] loop4: detected capacity change from 0 to 128 [ 278.685479][T18296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.714625][T18296] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.5592: Allocating blocks 385-513 which overlap fs metadata [ 278.760381][T18295] EXT4-fs (loop8): pa ffff888107c68460: logic 16, phys. 129, len 24 [ 278.768540][T18295] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 278.879275][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.935353][T18247] syz.2.5574 (18247) used greatest stack depth: 5776 bytes left [ 278.955449][T13023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.100701][T18321] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5600'. [ 279.167970][T18325] netlink: 'syz.8.5602': attribute type 4 has an invalid length. [ 279.368257][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 279.368276][ T28] audit: type=1326 audit(2000001223.141:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.411956][ T28] audit: type=1326 audit(2000001223.171:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.436885][ T28] audit: type=1326 audit(2000001223.171:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.462213][ T28] audit: type=1400 audit(2000001223.171:1627): avc: denied { create } for pid=18341 comm="syz.2.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.484000][ T28] audit: type=1400 audit(2000001223.171:1628): avc: denied { write } for pid=18341 comm="syz.2.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.505363][ T28] audit: type=1326 audit(2000001223.181:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.529835][ T28] audit: type=1326 audit(2000001223.211:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.554453][ T28] audit: type=1326 audit(2000001223.211:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.598316][ T28] audit: type=1326 audit(2000001223.241:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.633331][ T28] audit: type=1326 audit(2000001223.261:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18332 comm="syz.8.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0f5b5cfce code=0x7ffc0000 [ 279.730686][T18358] netlink: 'syz.4.5615': attribute type 4 has an invalid length. [ 279.832784][T18362] netlink: 'syz.4.5616': attribute type 15 has an invalid length. [ 280.156701][T18393] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.5631'. [ 280.232827][T18402] loop4: detected capacity change from 0 to 128 [ 280.273337][T18402] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.306111][T18402] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.395403][T17423] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.613311][T18342] syz.2.5609 (18342) used greatest stack depth: 5736 bytes left [ 280.803622][T18430] loop5: detected capacity change from 0 to 7 [ 280.997633][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5648'. [ 281.211870][T13023] IPVS: starting estimator thread 0... [ 281.305512][T18458] IPVS: using max 2208 ests per chain, 110400 per kthread [ 281.314193][T18472] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5663'. [ 281.628714][T18486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5669'. [ 281.979501][T18503] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5675'. [ 282.237315][T12714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.782294][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'. [ 282.791493][T18521] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5682'. [ 282.899689][T11221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.314377][T13024] IPVS: starting estimator thread 0... [ 283.326095][T18569] loop2: detected capacity change from 0 to 7 [ 283.404408][T18573] batadv_slave_1: entered promiscuous mode [ 283.405750][T18566] IPVS: using max 2208 ests per chain, 110400 per kthread [ 283.448182][T18572] batadv_slave_1: left promiscuous mode [ 283.680679][T18598] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5711'. [ 283.693089][T18598] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5711'. [ 284.400318][ T28] kauditd_printk_skb: 387 callbacks suppressed [ 284.400335][ T28] audit: type=1400 audit(2000001228.171:2021): avc: denied { allowed } for pid=18646 comm="syz.2.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 284.454186][ T28] audit: type=1400 audit(2000001228.211:2022): avc: denied { create } for pid=18646 comm="syz.2.5739" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.497002][ T28] audit: type=1400 audit(2000001228.211:2023): avc: denied { map } for pid=18646 comm="syz.2.5739" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.522038][ T28] audit: type=1400 audit(2000001228.211:2024): avc: denied { read write } for pid=18646 comm="syz.2.5739" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.580250][ T28] audit: type=1400 audit(2000001228.321:2025): avc: denied { create } for pid=18654 comm="syz.0.5742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 284.601407][ T28] audit: type=1400 audit(2000001228.351:2026): avc: denied { create } for pid=18658 comm="syz.8.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.656704][ T28] audit: type=1400 audit(2000001228.351:2027): avc: denied { write } for pid=18658 comm="syz.8.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.677916][ T28] audit: type=1400 audit(2000001228.351:2028): avc: denied { read } for pid=18658 comm="syz.8.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.699316][ T28] audit: type=1400 audit(2000001228.381:2029): avc: denied { firmware_load } for pid=18658 comm="syz.8.5744" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 284.727293][ T28] audit: type=1400 audit(2000001228.501:2030): avc: denied { setopt } for pid=18662 comm="syz.8.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 284.885849][T18672] loop5: detected capacity change from 0 to 7 [ 285.005368][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 285.015477][ C1] buffer_io_error: 9 callbacks suppressed [ 285.015494][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 285.194202][T18691] tap0: tun_chr_ioctl cmd 1074025675 [ 285.199994][T18691] tap0: persist disabled [ 285.204566][T18691] tap0: tun_chr_ioctl cmd 1074025675 [ 285.210788][T18691] tap0: persist disabled [ 285.348681][T18700] loop4: detected capacity change from 0 to 512 [ 285.355828][T18700] EXT4-fs: Ignoring removed oldalloc option [ 285.369881][T18700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.390936][T18700] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5771: bad orphan inode 131083 [ 285.401765][T18700] loop4: lost filesystem error report for type 5 error -117 [ 285.402305][T18700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.451965][T18710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5764'. [ 285.492922][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.529939][T18718] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5769'. [ 285.561317][T18718] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5769'. [ 285.781058][T18749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=18749 comm=syz.8.5784 [ 286.148865][T18765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.165320][T18765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.929780][T18808] loop8: detected capacity change from 0 to 1024 [ 286.985513][T18808] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 287.036766][T18808] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 2: comm syz.8.5806: lblock 2 mapped to illegal pblock 2 (length 1) [ 287.103833][T18808] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 287.104282][T18808] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.5806: lblock 0 mapped to illegal pblock 48 (length 1) [ 287.113479][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 287.113505][ C0] EXT4-fs (loop8): initial error at time 2000001230: ext4_map_blocks:776: inode 3: block 2 [ 287.113550][ C0] EXT4-fs (loop8): last error at time 2000001230: ext4_map_blocks:776: inode 3: block 2 [ 287.164131][T18808] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 287.166951][T18808] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.5806: Failed to acquire dquot type 0 [ 287.199301][T18808] loop8: lost filesystem error report for type 5 error -117 [ 287.199497][T18808] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 287.219443][T18808] loop8: lost filesystem error report for type 5 error -117 [ 287.219543][T18808] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.5806: mark_inode_dirty error [ 287.249025][T18808] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.249192][T18808] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 287.295187][T18808] EXT4-fs (loop8): 1 orphan inode deleted [ 287.314063][T18808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.335245][ T809] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 287.372771][ T809] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 287.397654][T18808] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 287.415176][T18808] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 287.440417][T18808] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.5806: lblock 0 mapped to illegal pblock 48 (length 1) [ 287.474725][T18808] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 287.520364][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.824014][T18840] netlink: 'syz.8.5819': attribute type 1 has an invalid length. [ 287.995805][ T1724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.476280][T18887] loop4: detected capacity change from 0 to 128 [ 288.489362][T18887] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 288.635480][T18890] loop4: detected capacity change from 0 to 1024 [ 288.640237][ T1724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.665562][T18892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.685388][T18890] EXT4-fs: inline encryption not supported [ 288.726803][T18890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.775237][T18890] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.826612][T18890] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.5842: lblock 3 mapped to illegal pblock 3 (length 3) [ 288.866522][T18890] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 288.905407][T18890] EXT4-fs (loop4): This should not happen!! Data will be lost [ 288.905407][T18890] [ 288.965334][ T809] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 289.015717][ T809] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 289.045371][ T809] EXT4-fs (loop4): This should not happen!! Data will be lost [ 289.045371][ T809] [ 289.080770][ T809] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 289.097029][ T809] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 52 with max blocks 16 with error 117 [ 289.110212][ T809] EXT4-fs (loop4): This should not happen!! Data will be lost [ 289.110212][ T809] [ 289.122225][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 289.168337][ T3403] kernel read not supported for file /rfkill (pid: 3403 comm: kworker/0:3) [ 289.339564][T18927] loop8: detected capacity change from 0 to 1024 [ 289.386786][T18927] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 289.415148][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 289.415206][ T28] audit: type=1400 audit(2000001233.181:2096): avc: denied { setopt } for pid=18928 comm="syz.4.5858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 289.461720][ T28] audit: type=1400 audit(2000001233.181:2097): avc: denied { name_bind } for pid=18924 comm="syz.8.5857" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 289.508505][ T28] audit: type=1400 audit(2000001233.181:2098): avc: denied { node_bind } for pid=18924 comm="syz.8.5857" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 289.565195][ T28] audit: type=1400 audit(2000001233.331:2099): avc: denied { write } for pid=18936 comm="syz.8.5861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.621513][ T28] audit: type=1400 audit(2000001233.381:2100): avc: denied { getopt } for pid=18940 comm="syz.8.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 289.689380][ T2967] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 289.705107][ T28] audit: type=1400 audit(2000001233.461:2101): avc: denied { append } for pid=18946 comm="syz.8.5866" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.733196][ T28] audit: type=1400 audit(2000001233.461:2102): avc: denied { map } for pid=18946 comm="syz.8.5866" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.806553][ T28] audit: type=1400 audit(2000001233.581:2103): avc: denied { ioctl } for pid=18950 comm="syz.8.5868" path="socket:[62579]" dev="sockfs" ino=62579 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.955297][ T28] audit: type=1400 audit(2000001233.721:2104): avc: denied { append } for pid=18958 comm="syz.1.5872" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 289.988728][ T28] audit: type=1400 audit(2000001233.721:2105): avc: denied { write } for pid=18958 comm="syz.1.5872" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.016031][T13023] kernel read not supported for file /input/event0 (pid: 13023 comm: kworker/1:7) [ 290.038556][T18962] SELinux: Context › is not valid (left unmapped). [ 290.055369][T18962] SELinux: Context netdevsim025 is not valid (left unmapped). [ 290.156792][T18977] loop8: detected capacity change from 0 to 512 [ 290.170154][T18977] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.185308][T18977] EXT4-fs (loop8): orphan cleanup on readonly fs [ 290.195469][T18977] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 290.211859][T18977] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5880: attempt to clear invalid blocks 2 len 1 [ 290.226456][T18977] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.227001][T18977] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, [ 290.236544][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 290.236576][ C1] EXT4-fs (loop8): initial error at time 2000001234: ext4_clear_blocks:876: inode 13 [ 290.236613][ C1] EXT4-fs (loop8): last error at time 2000001234: ext4_clear_blocks:876: inode 13 [ 290.271079][T18977] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 290.281083][T18977] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5880: invalid indirect mapped block 1819239214 (level 0) [ 290.295661][T18977] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.296665][T18977] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5880: invalid indirect mapped block 1819239214 (level 1) [ 290.323766][T18977] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.324278][T18977] EXT4-fs (loop8): 1 truncate cleaned up [ 290.340252][T18977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.359011][T18977] EXT4-fs (loop8): Quota file not on filesystem root. Journaled quota will not work [ 290.398090][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.433171][T18993] loop8: detected capacity change from 0 to 1024 [ 290.442644][T18993] EXT4-fs: Ignoring removed oldalloc option [ 290.462035][T18993] EXT4-fs: Ignoring removed bh option [ 290.505688][T18993] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.630257][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.887162][T19037] team0: Port device syz_tun added [ 290.916631][T19037] team0: Port device syz_tun removed [ 290.950072][T19037] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.976389][T19037] bridge_slave_1: left allmulticast mode [ 290.976410][T19037] bridge_slave_1: left promiscuous mode [ 290.976558][T19037] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.985540][T19037] bond0: (slave bond_slave_0): Releasing backup interface [ 290.988584][T19037] bond0: (slave bond_slave_1): Releasing backup interface [ 291.000939][T19037] team0: Port device team_slave_0 removed [ 291.010977][T19037] team0: Port device team_slave_1 removed [ 291.015866][T19037] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 291.195458][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.302729][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.430155][T19075] loop8: detected capacity change from 0 to 1024 [ 291.441463][T19075] EXT4-fs: Ignoring removed nobh option [ 291.461978][T19075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 291.480364][T19075] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.493365][T19075] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5922: bg 0: block 112: padding at end of block bitmap is not set [ 291.542098][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 291.612387][T19093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5928'. [ 291.655934][T19096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.963365][T19125] loop8: detected capacity change from 0 to 512 [ 292.010111][T19125] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.043773][T19125] EXT4-fs (loop8): 1 truncate cleaned up [ 292.059265][T19125] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.073846][T19125] EXT4-fs (loop8): Online resizing not supported with sparse_super2 [ 292.093834][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.120252][T19134] netem: incorrect gi model size [ 292.127314][T19134] netem: change failed [ 292.149612][T19136] tun0: tun_chr_ioctl cmd 1074025675 [ 292.156252][T19136] tun0: persist enabled [ 292.162397][T19136] tun0: tun_chr_ioctl cmd 1074025675 [ 292.168633][T19136] tun0: persist disabled [ 292.328249][T19146] loop4: detected capacity change from 0 to 512 [ 292.560415][T19161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5959'. [ 293.451016][T19211] loop4: detected capacity change from 0 to 512 [ 293.493738][T19211] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 293.509257][T19211] EXT4-fs (loop4): orphan cleanup on readonly fs [ 293.544963][T19211] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.5982: corrupted inode contents [ 293.559305][T19211] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 293.573149][T19211] EXT4-fs (loop4): Remounting filesystem read-only [ 293.582633][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 293.582703][ C1] EXT4-fs (loop4): initial error at time 2000001237: ext4_do_update_inode:5569: inode 16 [ 293.582888][ C1] EXT4-fs (loop4): last error at time 2000001237: ext4_do_update_inode:5569: inode 16 [ 293.625634][T19211] EXT4-fs (loop4): 1 truncate cleaned up [ 293.632137][T11221] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 293.643821][T11221] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 293.655503][T11221] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 293.669277][T19211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.755763][T11221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.822451][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.951743][T19248] Invalid argument reading file caps for ./file0 [ 294.395534][T12720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.785992][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 294.786011][ T28] audit: type=1400 audit(2000001238.561:2134): avc: denied { connect } for pid=19262 comm="syz.2.6004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.873182][T19261] loop8: detected capacity change from 0 to 512 [ 294.985517][ T28] audit: type=1400 audit(2000001238.691:2135): avc: denied { mount } for pid=19275 comm="syz.1.6008" name="/" dev="configfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 295.010437][ T28] audit: type=1400 audit(2000001238.691:2136): avc: denied { search } for pid=19275 comm="syz.1.6008" name="/" dev="configfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.049574][ T28] audit: type=1400 audit(2000001238.691:2137): avc: denied { search } for pid=19275 comm="syz.1.6008" name="/" dev="configfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.077145][T19261] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 295.086276][T19261] EXT4-fs (loop8): orphan cleanup on readonly fs [ 295.099669][T19261] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.6002: corrupted inode contents [ 295.112452][T19261] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 295.113146][T19261] EXT4-fs (loop8): Remounting filesystem read-only [ 295.122905][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 295.122990][ C1] EXT4-fs (loop8): initial error at time 2000001238: ext4_do_update_inode:5569: inode 16 [ 295.123324][ C1] EXT4-fs (loop8): last error at time 2000001238: ext4_do_update_inode:5569: inode 16 [ 295.159346][T19261] EXT4-fs (loop8): 1 truncate cleaned up [ 295.195994][ T809] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.216736][ T809] Quota error (device loop8): write_blk: dquota write failed [ 295.251160][ T809] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 295.261327][ T809] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.274782][ T809] Quota error (device loop8): write_blk: dquota write failed [ 295.282680][ T809] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 295.292836][ T809] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 295.306650][ T809] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 295.316107][ T809] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 295.338241][T19261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.397144][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.420062][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6016'. [ 295.429836][T19291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6016'. [ 295.686221][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.710496][T19313] loop4: detected capacity change from 0 to 512 [ 295.740998][T19313] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 295.756987][T19313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.805048][T19313] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6026: corrupted inode contents [ 295.848489][T19313] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 295.848943][T19313] EXT4-fs (loop4): Remounting filesystem read-only [ 295.858798][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 295.858888][ C1] EXT4-fs (loop4): initial error at time 2000001239: ext4_do_update_inode:5569: inode 16 [ 295.859041][ C1] EXT4-fs (loop4): last error at time 2000001239: ext4_do_update_inode:5569: inode 16 [ 295.896007][T19313] EXT4-fs (loop4): 1 truncate cleaned up [ 295.956799][T12714] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.983173][T12714] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 295.997094][T12714] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 296.050358][T19313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.111243][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.548738][T19351] syz_tun: left allmulticast mode [ 296.554222][T19351] syz_tun: left promiscuous mode [ 296.615328][T19351] bridge0: port 3(syz_tun) entered disabled state [ 296.624888][T19351] team0: Port device syz_tun added [ 296.716468][T19354] team0: Port device syz_tun removed [ 296.741151][T19354] bridge_slave_0: left allmulticast mode [ 296.747885][T19354] bridge_slave_0: left promiscuous mode [ 296.753885][T19354] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.764544][T19354] bridge_slave_1: left allmulticast mode [ 296.770781][T19354] bridge_slave_1: left promiscuous mode [ 296.777281][T19354] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.796020][T19360] loop8: detected capacity change from 0 to 128 [ 296.805983][T19354] bond0: (slave bond_slave_0): Releasing backup interface [ 296.828707][T19354] bond0: (slave bond_slave_1): Releasing backup interface [ 296.843390][T19354] team0: Port device team_slave_0 removed [ 296.853580][T19360] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.870122][T19354] team0: Port device team_slave_1 removed [ 296.877458][T19354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.884998][T19354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.892734][T19360] ext4 filesystem being mounted at /371/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.927688][T19354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.938131][T19354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.948135][T19354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 297.028393][T14839] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.248263][T19383] netlink: 'syz.4.6056': attribute type 6 has an invalid length. [ 297.338712][T19388] loop4: detected capacity change from 0 to 1024 [ 297.366650][T19388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.530500][T19388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.636165][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.705933][T19400] team0: Port device syz_tun added [ 297.768571][T19400] team0: Port device syz_tun removed [ 297.802879][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6066'. [ 297.838653][T19400] bridge_slave_0: left allmulticast mode [ 297.856576][T19400] bridge_slave_0: left promiscuous mode [ 297.877573][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.918495][T19400] bridge_slave_1: left allmulticast mode [ 297.924910][T19400] bridge_slave_1: left promiscuous mode [ 297.960060][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.984965][T19411] loop8: detected capacity change from 0 to 512 [ 297.994868][T19400] bond0: (slave bond_slave_0): Releasing backup interface [ 298.043074][T19400] bond0: (slave bond_slave_1): Releasing backup interface [ 298.056679][T19400] team0: Port device team_slave_0 removed [ 298.066487][T19411] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 298.082460][T19400] team0: Port device team_slave_1 removed [ 298.093498][T19411] EXT4-fs (loop8): orphan cleanup on readonly fs [ 298.103865][T19400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.120484][T19400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.133813][T19400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.145522][T19411] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.6068: corrupted inode contents [ 298.160020][T19411] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.160706][T19411] EXT4-fs (loop8): Remounting filesystem read-only [ 298.170695][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 298.170874][ C0] EXT4-fs (loop8): initial error at time 2000001241: ext4_do_update_inode:5569: inode 16 [ 298.171104][ C0] EXT4-fs (loop8): last error at time 2000001241: ext4_do_update_inode:5569: inode 16 [ 298.217756][T19400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.255660][T19411] EXT4-fs (loop8): 1 truncate cleaned up [ 298.268896][T19400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.286570][ T50] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 298.298416][ T50] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 298.325563][ T50] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 298.381138][T19411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.576264][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.515991][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.528300][T12714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.989552][T19457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6086'. [ 300.121373][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 300.121393][ T28] audit: type=1400 audit(2000001243.891:2159): avc: denied { create } for pid=19467 comm="syz.1.6090" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.175180][ T28] audit: type=1400 audit(2000001243.931:2160): avc: denied { write } for pid=19467 comm="syz.1.6090" name="file0" dev="tmpfs" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.207910][ T28] audit: type=1400 audit(2000001243.931:2161): avc: denied { open } for pid=19467 comm="syz.1.6090" path="/355/file0" dev="tmpfs" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.236154][ T28] audit: type=1400 audit(2000001243.931:2162): avc: denied { ioctl } for pid=19467 comm="syz.1.6090" path="/355/file0" dev="tmpfs" ino=1836 ioctlcmd=0x70cf scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.282127][ T28] audit: type=1400 audit(2000001244.011:2163): avc: denied { unlink } for pid=14802 comm="syz-executor" name="file0" dev="tmpfs" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.375735][ T28] audit: type=1400 audit(2000001244.151:2164): avc: denied { bind } for pid=19477 comm="syz.4.6095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.475188][ T28] audit: type=1400 audit(2000001244.151:2165): avc: denied { setopt } for pid=19477 comm="syz.4.6095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.649589][ T28] audit: type=1400 audit(2000001244.421:2166): avc: denied { read } for pid=19493 comm="syz.2.6102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.848238][ T28] audit: type=1400 audit(2000001244.621:2167): avc: denied { connect } for pid=19503 comm="syz.8.6107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 300.898949][ T28] audit: type=1400 audit(2000001244.621:2168): avc: denied { write } for pid=19503 comm="syz.8.6107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.021855][T19512] serio: Serial port ptm0 [ 301.819589][T19524] 9p: Bad value for 'wfdno' [ 302.124650][T19547] loop4: detected capacity change from 0 to 1024 [ 302.161465][T19547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.260109][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.296271][T19530] tipc: Started in network mode [ 302.301160][T19530] tipc: Node identity 0101010101010101, cluster identity 4711 [ 302.325755][T19530] tipc: Enabling of bearer rejected, failed to enable media [ 302.365001][T19562] syzkaller1: entered promiscuous mode [ 302.376617][T19562] syzkaller1: entered allmulticast mode [ 302.716683][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6146'. [ 302.760581][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6146'. [ 302.784488][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'. [ 302.857788][T19595] syz_tun: entered promiscuous mode [ 302.875314][T19595] macsec3: entered promiscuous mode [ 302.889825][T19595] macsec3: entered allmulticast mode [ 302.908371][T19595] syz_tun: entered allmulticast mode [ 302.919436][T19595] syz_tun: left allmulticast mode [ 302.926709][T19595] syz_tun: left promiscuous mode [ 303.066605][T19613] syzkaller1: entered promiscuous mode [ 303.078932][T19613] syzkaller1: entered allmulticast mode [ 303.094341][T19617] loop8: detected capacity change from 0 to 1024 [ 303.116983][T19617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 303.175538][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 303.454263][T19655] team0: Port device gtp0 added [ 303.851831][T19695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6193'. [ 303.871458][T19695] bond1: option primary_reselect: invalid value (8) [ 303.882387][T19695] bond1 (unregistering): Released all slaves [ 303.905253][T19700] loop4: detected capacity change from 0 to 512 [ 303.932082][T19700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.945713][T19700] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.015742][T19689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.024736][T19689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.032970][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.734259][T19728] loop4: detected capacity change from 0 to 1024 [ 304.780023][T19728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.882748][T19728] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.6206: Allocating blocks 449-513 which overlap fs metadata [ 304.897682][T19728] EXT4-fs (loop4): Remounting filesystem read-only [ 304.914037][T19726] EXT4-fs (loop4): pa ffff888107c682a0: logic 48, phys. 177, len 21 [ 305.019739][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.121604][T19743] loop4: detected capacity change from 0 to 8192 [ 305.155220][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 305.155240][ T28] audit: type=1400 audit(2000001248.921:2183): avc: denied { remount } for pid=19742 comm="syz.4.6211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 305.189412][T19753] netlink: 'syz.8.6216': attribute type 16 has an invalid length. [ 305.198356][T19753] netlink: 'syz.8.6216': attribute type 17 has an invalid length. [ 305.216815][ T28] audit: type=1326 audit(2000001248.991:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.269605][ T28] audit: type=1326 audit(2000001248.991:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.276947][T12714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.304497][ T1724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.357432][ T28] audit: type=1326 audit(2000001249.001:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.419651][ T28] audit: type=1326 audit(2000001249.001:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.485134][ T28] audit: type=1326 audit(2000001249.021:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.535230][ T28] audit: type=1326 audit(2000001249.021:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.561150][T19756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.575189][ T28] audit: type=1326 audit(2000001249.021:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.583201][T19756] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.623177][T19756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.625212][ T28] audit: type=1326 audit(2000001249.021:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.667077][ T1724] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.685321][T12720] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.701684][T12720] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.710670][ T1724] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.719747][ T28] audit: type=1326 audit(2000001249.021:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19754 comm="syz.1.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f57e45cc799 code=0x7ffc0000 [ 305.781249][T12714] Bluetooth: hci0: Frame reassembly failed (-84) [ 307.835217][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 307.841465][T13955] Bluetooth: hci0: command 0x1003 tx timeout [ 308.764884][T19768] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 308.844277][T19794] loop4: detected capacity change from 0 to 128 [ 309.081713][T19816] loop4: detected capacity change from 0 to 512 [ 309.093308][T19816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.138759][T19816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.141753][T19825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6248'. [ 309.153794][T19816] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.167660][T19825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6248'. [ 309.183594][T19825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6248'. [ 309.194208][T19825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6248'. [ 309.235594][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.269771][T19831] loop8: detected capacity change from 0 to 512 [ 309.289254][T19831] EXT4-fs: Ignoring removed orlov option [ 309.304063][T19831] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.317567][T19831] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.6251: corrupted in-inode xattr: e_value size too large [ 309.332992][T19831] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.333196][T19831] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6251: couldn't read orphan inode 15 (err -117) [ 309.336601][T19835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19835 comm=syz.0.6253 [ 309.342527][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 309.373604][ C0] EXT4-fs (loop8): initial error at time 2000001253: ext4_iget_extra_inode:5025: inode 15 [ 309.383942][ C0] EXT4-fs (loop8): last error at time 2000001253: ext4_iget_extra_inode:5025: inode 15 [ 309.394444][T19831] loop8: lost filesystem error report for type 5 error -117 [ 309.395426][T19831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.475643][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.597831][T19850] loop4: detected capacity change from 0 to 512 [ 309.614916][T19850] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6260: invalid indirect mapped block 256 (level 2) [ 309.650479][T19850] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 309.650803][T19850] EXT4-fs (loop4): 2 truncates cleaned up [ 309.660627][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 309.660666][ C1] EXT4-fs (loop4): initial error at time 2000001253: ext4_free_branches:1023: inode 11 [ 309.660706][ C1] EXT4-fs (loop4): last error at time 2000001253: ext4_free_branches:1023: inode 11 [ 309.700678][T19850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.753732][T19861] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 309.770012][T19850] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.6260: bg 0: block 5: invalid block bitmap [ 309.783145][T19850] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 309.799823][T19850] EXT4-fs (loop4): This should not happen!! Data will be lost [ 309.799823][T19850] [ 309.814287][T19850] EXT4-fs (loop4): Total free blocks count 0 [ 309.850833][T19850] EXT4-fs (loop4): Free/Dirty block details [ 309.858853][T19850] EXT4-fs (loop4): free_blocks=0 [ 309.864221][T19850] EXT4-fs (loop4): dirty_blocks=2 [ 309.884463][T19850] EXT4-fs (loop4): Block reservation details [ 309.896621][T19850] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 310.017824][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.758203][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 310.758222][ T28] audit: type=1400 audit(2000001254.531:2216): avc: denied { read } for pid=19917 comm="syz.0.6290" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 310.830683][ T28] audit: type=1400 audit(2000001254.571:2217): avc: denied { mount } for pid=19919 comm="syz.8.6291" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 310.957173][ T28] audit: type=1400 audit(2000001254.731:2218): avc: denied { accept } for pid=19935 comm="syz.0.6299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 311.036742][T12714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.049576][ T1724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.535704][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6323'. [ 311.549478][ T28] audit: type=1400 audit(2000001255.321:2219): avc: denied { setopt } for pid=19993 comm="syz.0.6325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.632390][T19997] loop4: detected capacity change from 0 to 512 [ 311.658738][T19997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 311.721592][T19997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.734380][T19997] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.800601][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.827696][ T28] audit: type=1400 audit(2000001255.591:2220): avc: denied { append } for pid=20010 comm="syz.8.6333" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 311.901039][ T28] audit: type=1400 audit(2000001255.591:2221): avc: denied { read } for pid=20010 comm="syz.8.6333" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 311.928801][ T28] audit: type=1400 audit(2000001255.591:2222): avc: denied { open } for pid=20010 comm="syz.8.6333" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 311.985339][ T28] audit: type=1400 audit(2000001255.631:2223): avc: denied { ioctl } for pid=20012 comm="syz.0.6332" path="socket:[65436]" dev="sockfs" ino=65436 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 312.028286][ T28] audit: type=1400 audit(2000001255.731:2224): avc: denied { getopt } for pid=20015 comm="syz.0.6335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.302394][T20045] netlink: 'syz.4.6347': attribute type 10 has an invalid length. [ 312.310387][T20045] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.6347'. [ 312.348356][ T28] audit: type=1400 audit(2000001256.121:2225): avc: denied { name_bind } for pid=20048 comm="syz.8.6348" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 312.429015][T20056] loop4: detected capacity change from 0 to 512 [ 312.483053][T20056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.518010][T20056] EXT4-fs (loop4): 1 truncate cleaned up [ 312.524104][T20056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.619983][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.789037][T20083] SELinux: Context ›Y is not valid (left unmapped). [ 313.013012][T20103] netlink: 'syz.4.6374': attribute type 3 has an invalid length. [ 313.025888][T20103] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.6374'. [ 313.420985][T20122] loop8: detected capacity change from 0 to 512 [ 313.457183][T20122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.495701][T20122] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.533464][T20122] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 93 vs 96 free clusters [ 313.568273][T20122] EXT4-fs (loop8): Remounting filesystem read-only [ 313.614998][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.783732][T20212] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 314.876562][T20220] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 314.895745][T20220] SELinux: failed to load policy [ 314.940455][T20225] xt_hashlimit: size too large, truncated to 1048576 [ 315.257163][T20245] loop8: detected capacity change from 0 to 1024 [ 315.264083][T20245] EXT4-fs: inline encryption not supported [ 315.337166][T20245] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.355177][T20245] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.382119][T12714] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 112: padding at end of block bitmap is not set [ 315.405811][T12714] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 315.419771][T12714] EXT4-fs (loop8): This should not happen!! Data will be lost [ 315.419771][T12714] [ 315.431391][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 315.917990][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 315.918010][ T28] audit: type=1400 audit(2000001259.691:2244): avc: denied { bind } for pid=20291 comm="syz.0.6456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.951469][ T28] audit: type=1400 audit(2000001259.691:2245): avc: denied { write } for pid=20291 comm="syz.0.6456" path="socket:[66881]" dev="sockfs" ino=66881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.018880][T20301] syzkaller1: entered promiscuous mode [ 316.024534][T20301] syzkaller1: entered allmulticast mode [ 316.217225][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6471'. [ 316.226581][T20326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6471'. [ 316.235978][ T28] audit: type=1400 audit(2000001260.011:2246): avc: denied { read } for pid=20325 comm="syz.4.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 316.356698][ T28] audit: type=1400 audit(2000001260.131:2247): avc: denied { nlmsg_read } for pid=20331 comm="syz.4.6474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 316.378256][T20332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20332 comm=syz.4.6474 [ 316.433731][ T28] audit: type=1400 audit(2000001260.201:2248): avc: denied { listen } for pid=20335 comm="syz.4.6476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.454219][ T28] audit: type=1400 audit(2000001260.221:2249): avc: denied { accept } for pid=20335 comm="syz.4.6476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.712383][T20351] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 316.721848][T20351] SELinux: failed to load policy [ 316.795934][ T1724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.809282][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.029974][T20378] xt_hashlimit: size too large, truncated to 1048576 [ 317.975186][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6523'. [ 317.992135][T20445] macsec1: entered promiscuous mode [ 318.002093][T20445] syz_tun: entered promiscuous mode [ 318.012953][T20445] macsec1: entered allmulticast mode [ 318.023163][T20445] syz_tun: entered allmulticast mode [ 318.036765][T20445] syz_tun: left allmulticast mode [ 318.042392][T20445] syz_tun: left promiscuous mode [ 318.172455][T20449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20449 comm=syz.0.6525 [ 318.291173][ T28] audit: type=1326 audit(2000001262.061:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20450 comm="syz.0.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7ed3c799 code=0x7ffc0000 [ 318.318010][T20453] syzkaller1: entered promiscuous mode [ 318.332321][T20453] syzkaller1: entered allmulticast mode [ 318.337516][ T28] audit: type=1326 audit(2000001262.061:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20450 comm="syz.0.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7ed3c799 code=0x7ffc0000 [ 318.377081][ T28] audit: type=1326 audit(2000001262.091:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20450 comm="syz.0.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc7ed3c799 code=0x7ffc0000 [ 318.441924][ T28] audit: type=1326 audit(2000001262.091:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20450 comm="syz.0.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7ed3c799 code=0x7ffc0000 [ 318.849199][T20474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6537'. [ 319.088279][T20490] loop4: detected capacity change from 0 to 512 [ 319.112371][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6542'. [ 319.123708][T20490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.161854][T20490] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 319.163397][T20491] syz_tun: entered promiscuous mode [ 319.176814][T20491] macsec1: entered promiscuous mode [ 319.182515][T20491] macsec1: entered allmulticast mode [ 319.188293][T20491] syz_tun: entered allmulticast mode [ 319.190010][T20490] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #12: comm syz.4.6543: checksumming directory block 0 [ 319.206861][T20491] syz_tun: left allmulticast mode [ 319.212460][T20491] syz_tun: left promiscuous mode [ 319.226222][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.531187][ T3481] Process accounting resumed [ 320.875693][T20591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6583'. [ 320.953752][T20598] loop8: detected capacity change from 0 to 512 [ 320.976902][T20598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.995331][T20598] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.008882][T20598] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6586: corrupted inode contents [ 321.024917][T20598] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.6586: mark_inode_dirty error [ 321.094425][T20611] EXT4-fs (loop8): shut down requested (2) [ 321.104919][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 321.104937][ T28] audit: type=1400 audit(2000001264.871:2271): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 321.136260][T20598] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6586: corrupted inode contents [ 321.162807][ T28] audit: type=1400 audit(2000001264.871:2272): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.188924][ T28] audit: type=1400 audit(2000001264.871:2273): avc: denied { append } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 321.214743][ T28] audit: type=1400 audit(2000001264.871:2274): avc: denied { open } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 321.239640][ T28] audit: type=1400 audit(2000001264.871:2275): avc: denied { getattr } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 321.263364][ T28] audit: type=1400 audit(2000001264.991:2276): avc: denied { create } for pid=20597 comm="syz.8.6586" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 321.269316][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6595'. [ 321.316786][ T28] audit: type=1400 audit(2000001265.091:2277): avc: denied { write } for pid=36 comm="kworker/1:1" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=67671 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 321.370047][T20622] macsec1: entered promiscuous mode [ 321.385012][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.395290][ T1724] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 321.402602][T20622] syz_tun: entered promiscuous mode [ 321.416642][ T28] audit: type=1326 audit(2000001265.191:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20627 comm="syz.2.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 321.418699][T20622] macsec1: entered allmulticast mode [ 321.461942][T20622] syz_tun: entered allmulticast mode [ 321.496833][ T28] audit: type=1326 audit(2000001265.191:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20627 comm="syz.2.6597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7815f8c799 code=0x7ffc0000 [ 321.537483][T20622] syz_tun: left allmulticast mode [ 321.542867][T20622] syz_tun: left promiscuous mode [ 321.702171][T20648] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 321.711459][T20656] netlink: 'syz.4.6607': attribute type 16 has an invalid length. [ 321.727407][T20656] netlink: 'syz.4.6607': attribute type 17 has an invalid length. [ 321.835750][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.946658][T20663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.954954][T20663] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.966040][T20663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.989147][T12714] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.008624][T12714] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.018062][T12714] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.029309][T12714] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.086969][T20675] loop8: detected capacity change from 0 to 512 [ 322.129796][T20675] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.6618: inode has both inline data and extents flags [ 322.151996][T20675] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 322.152290][T20675] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6618: couldn't read orphan inode 15 (err -117) [ 322.162368][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 322.162387][ C1] EXT4-fs (loop8): initial error at time 2000001265: ext4_orphan_get:1391: inode 15 [ 322.162418][ C1] EXT4-fs (loop8): last error at time 2000001265: ext4_orphan_get:1391: inode 15 [ 322.205783][T20675] loop8: lost filesystem error report for type 5 error -117 [ 322.206234][T20675] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 322.229092][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6621'. [ 322.252916][T20687] veth1_vlan: left promiscuous mode [ 322.268653][T20687] netlink: 'syz.0.6621': attribute type 1 has an invalid length. [ 322.277131][T20687] netlink: 'syz.0.6621': attribute type 2 has an invalid length. [ 322.286674][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 322.340817][T12720] Bluetooth: hci0: Frame reassembly failed (-84) [ 322.363430][ T3403] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 322.372963][ T3403] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 322.558732][T12720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.674628][T20718] loop8: detected capacity change from 0 to 128 [ 322.806421][T20730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20730 comm=syz.2.6650 [ 322.840583][T20734] xt_hashlimit: size too large, truncated to 1048576 [ 322.867273][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6642'. [ 322.879491][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6642'. [ 322.891228][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6642'. [ 322.900910][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6642'. [ 323.218263][T20769] loop4: detected capacity change from 0 to 512 [ 323.258828][T20769] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.6657: corrupted inode contents [ 323.296364][T20775] netlink: 'syz.1.6658': attribute type 16 has an invalid length. [ 323.316216][T20769] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.316431][T20769] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.6657: mark_inode_dirty error [ 323.325716][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 323.325736][ C0] EXT4-fs (loop4): initial error at time 2000001267: ext4_do_update_inode:5569: inode 3 [ 323.325784][ C0] EXT4-fs (loop4): last error at time 2000001267: ext4_do_update_inode:5569: inode 3 [ 323.379926][T20775] netlink: 'syz.1.6658': attribute type 17 has an invalid length. [ 323.388814][T20769] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.389390][T20769] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.6657: corrupted inode contents [ 323.414028][T20769] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.414254][T20769] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.6657: mark_inode_dirty error [ 323.436866][T20769] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.455433][T20769] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6657: Failed to acquire dquot type 0 [ 323.468081][T20776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.471473][T20769] loop4: lost filesystem error report for type 5 error -117 [ 323.496988][T20769] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6657: corrupted inode contents [ 323.525233][T20769] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.535703][T20769] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.6657: mark_inode_dirty error [ 323.558055][T20769] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.558276][T20769] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6657: corrupted inode contents [ 323.581049][T20769] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.581239][T20769] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.6657: mark_inode_dirty error [ 323.606958][T20769] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.607209][T20769] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6657: corrupted inode contents [ 323.629543][T20769] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 323.629833][T20769] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 323.648799][T20769] loop4: lost filesystem error report for type 5 error -117 [ 323.648992][T20769] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.6657: corrupted inode contents [ 323.671491][T20769] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.6657: mark_inode_dirty error [ 323.683841][T20769] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 323.694967][T20769] loop4: lost filesystem error report for type 5 error -117 [ 323.695566][T20769] EXT4-fs (loop4): 1 truncate cleaned up [ 323.710037][T20769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.723680][T20769] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.739208][T20769] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.6657: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 323.739208][T20769] [ 323.797587][T20769] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 323.820898][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.838908][T20778] loop8: detected capacity change from 0 to 1024 [ 323.865028][T20778] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 323.877080][ T1724] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.895311][ T1724] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.904611][ T1724] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.929416][T20778] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 2: comm syz.8.6660: lblock 2 mapped to illegal pblock 2 (length 1) [ 323.956927][ T1724] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.957109][T20778] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.6660: lblock 0 mapped to illegal pblock 48 (length 1) [ 323.966026][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 323.966049][ C0] EXT4-fs (loop8): initial error at time 2000001267: ext4_map_blocks:776: inode 3: block 2 [ 323.966089][ C0] EXT4-fs (loop8): last error at time 2000001267: ext4_map_blocks:776: inode 3: block 2 [ 324.016872][T20778] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.6660: Failed to acquire dquot type 0 [ 324.029885][T20786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6662'. [ 324.045793][T20778] loop8: lost filesystem error report for type 5 error -117 [ 324.045924][T20778] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 324.071798][T20778] loop8: lost filesystem error report for type 5 error -117 [ 324.071980][T20778] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.6660: mark_inode_dirty error [ 324.118566][T20778] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 324.131043][T20778] EXT4-fs (loop8): 1 orphan inode deleted [ 324.137477][T20778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.149798][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6665'. [ 324.159056][T12720] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.179808][T12720] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 0 [ 324.306113][T14839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.321426][T14839] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 324.334641][T14839] loop8: lost filesystem error report for type 5 error -117 [ 324.334767][T14839] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 324.352527][T14839] loop8: lost filesystem error report for type 5 error -117 [ 324.352755][T14839] EXT4-fs error (device loop8): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 324.395169][T13955] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 324.401467][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 324.409518][T20697] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 324.498226][T20817] loop4: detected capacity change from 0 to 2048 [ 324.501890][T20818] netlink: 'syz.0.6673': attribute type 16 has an invalid length. [ 324.553398][T20818] netlink: 'syz.0.6673': attribute type 17 has an invalid length. [ 324.599937][T20818] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.607587][T20818] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.719347][T20818] ip6gre1: left promiscuous mode [ 324.724516][T20818] ip6gre1: left allmulticast mode [ 324.731996][T20818] macvlan2: left promiscuous mode [ 324.741455][T20818] geneve2: left promiscuous mode [ 324.761673][T20812] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 324.820512][T12720] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.841917][T12720] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.867710][T12720] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.888402][T12714] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.091989][T20851] loop8: detected capacity change from 0 to 256 [ 325.117971][T20851] loop8: detected capacity change from 0 to 256 [ 325.262420][T20864] xt_hashlimit: size too large, truncated to 1048576 [ 325.293551][ T3481] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 325.305535][ T3481] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 325.328160][T20870] loop8: detected capacity change from 0 to 512 [ 325.385553][T20870] EXT4-fs: Ignoring removed nobh option [ 325.391219][T20870] EXT4-fs: Ignoring removed bh option [ 325.405553][T20870] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 325.442401][T20870] EXT4-fs (loop8): 1 truncate cleaned up [ 325.451297][T20870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.550950][T14839] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 325.635827][T14839] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 325.671058][T14839] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 325.789789][T16606] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.012977][T20902] loop4: detected capacity change from 0 to 2048 [ 326.117030][T20902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.148473][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 326.148488][ T28] audit: type=1400 audit(2000001269.921:2303): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 326.185551][ T1724] vlan2: left allmulticast mode [ 326.190472][ T1724] bridge_slave_0: left allmulticast mode [ 326.198704][ T1724] vlan2: left promiscuous mode [ 326.203515][ T1724] bridge_slave_0: left promiscuous mode [ 326.209462][ T1724] bridge0: port 3(vlan2) entered disabled state [ 326.223520][T20902] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 326.276115][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.277029][ T1724] team0: Port device gtp0 removed [ 326.373060][ T1724] bond0 (unregistering): Released all slaves [ 326.380945][ T1724] bond1 (unregistering): Released all slaves [ 326.404404][ T28] audit: type=1400 audit(2000001270.171:2304): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.486777][ T28] audit: type=1400 audit(2000001270.171:2305): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.566143][ T28] audit: type=1400 audit(2000001270.171:2306): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.651309][ T1724] hsr_slave_0: left promiscuous mode [ 326.656922][ T28] audit: type=1400 audit(2000001270.171:2307): avc: denied { read } for pid=3041 comm="dhcpcd" name="n59" dev="tmpfs" ino=18028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.699148][ T1724] hsr_slave_1: left promiscuous mode [ 326.746751][ T28] audit: type=1400 audit(2000001270.171:2308): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=18028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.826952][ T28] audit: type=1400 audit(2000001270.171:2309): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=18028 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.896057][ T28] audit: type=1400 audit(2000001270.311:2310): avc: denied { read open } for pid=20943 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.965504][ T28] audit: type=1400 audit(2000001270.311:2311): avc: denied { getattr } for pid=20943 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.018432][ T28] audit: type=1400 audit(2000001270.381:2312): avc: denied { create } for pid=20948 comm="syz.4.6725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 327.106956][T20907] chnl_net:caif_netlink_parms(): no params data found [ 327.269462][ T1724] IPVS: stop unused estimator thread 0... [ 327.310911][T20907] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.333149][T20907] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.341976][T20907] bridge_slave_0: entered allmulticast mode [ 327.349239][T20907] bridge_slave_0: entered promiscuous mode [ 327.359948][T20907] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.367810][T20907] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.375580][T20907] bridge_slave_1: entered allmulticast mode [ 327.382412][T20907] bridge_slave_1: entered promiscuous mode [ 327.409822][T20907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.444018][T20907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.507754][T20907] team0: Port device team_slave_0 added [ 327.532860][T20907] team0: Port device team_slave_1 added [ 327.580010][T20907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.596474][T20907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.630660][T20907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.662581][T20907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.675523][T20907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.712330][T20907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.754350][T20907] hsr_slave_0: entered promiscuous mode [ 327.786079][T20907] hsr_slave_1: entered promiscuous mode [ 327.796744][T20907] debugfs: 'hsr0' already exists in 'hsr' [ 327.815964][T20907] Cannot create hsr debugfs directory [ 328.334517][T20907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.351333][T20907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.377868][T20907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 328.417818][T20907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.499749][T21062] Invalid argument reading file caps for ./file0 [ 328.603939][T20907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.654628][T20907] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.690326][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.697454][T12708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.727876][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.735114][T12708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.808475][T20907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.991550][T20907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.401555][T20907] veth0_vlan: entered promiscuous mode [ 329.434064][T20907] veth1_vlan: entered promiscuous mode [ 329.518025][T20907] veth0_macvtap: entered promiscuous mode [ 329.534905][T20907] veth1_macvtap: entered promiscuous mode [ 329.552128][T20907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.577344][T20907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.615317][T12708] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.644831][T12708] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.670049][T12708] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.696020][T12708] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.773074][T21193] netlink: 'syz.2.6771': attribute type 3 has an invalid length. [ 329.804027][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'. [ 329.970707][T21224] netlink: 'syz.2.6779': attribute type 3 has an invalid length. [ 329.996602][T21224] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.6779'. [ 330.438959][T21254] syzkaller1: entered promiscuous mode [ 330.480192][T21254] syzkaller1: entered allmulticast mode [ 330.734246][T21287] loop5: detected capacity change from 0 to 1024 [ 330.802635][T21287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.915997][T20907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.345707][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 331.345759][ T28] audit: type=1400 audit(2000001275.121:2334): avc: denied { mounton } for pid=21385 comm="syz.2.6820" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 331.982376][T21443] loop5: detected capacity change from 0 to 512 [ 332.055026][T21447] loop5: detected capacity change from 0 to 256 [ 332.087443][T21446] loop4: detected capacity change from 0 to 1024 [ 332.111765][T21446] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 332.158833][T21446] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.6834: lblock 2 mapped to illegal pblock 2 (length 1) [ 332.199609][T21446] fserror_report: 6 callbacks suppressed [ 332.199630][T21446] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 332.224482][T21446] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 332.234053][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 332.234074][ C0] EXT4-fs (loop4): initial error at time 2000001275: ext4_map_blocks:776: inode 3: block 2 [ 332.234146][ C0] EXT4-fs (loop4): last error at time 2000001275: ext4_map_blocks:776: inode 3: block 2 [ 332.284660][T21446] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.6834: lblock 0 mapped to illegal pblock 48 (length 1) [ 332.299872][T21446] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 332.300887][T21446] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 332.330617][T21446] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6834: Failed to acquire dquot type 0 [ 332.342568][T21446] loop4: lost filesystem error report for type 5 error -117 [ 332.342736][T21446] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 332.359873][T21446] loop4: lost filesystem error report for type 5 error -117 [ 332.360031][T21446] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.6834: mark_inode_dirty error [ 332.381846][T21446] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 332.381994][T21446] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 332.420861][T21446] EXT4-fs (loop4): 1 orphan inode deleted [ 332.433986][T21446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.446332][ T1724] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 332.467531][ T1724] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 332.485491][ T1724] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 332.576773][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.602346][T21465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6843'. [ 332.611347][T17423] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 332.625162][T17423] loop4: lost filesystem error report for type 5 error -117 [ 332.625266][T17423] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 332.642540][T17423] loop4: lost filesystem error report for type 5 error -117 [ 332.642768][T17423] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 332.661479][T17423] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 332.690523][T21468] loop4: detected capacity change from 0 to 256 [ 332.835563][ T28] audit: type=1400 audit(2000001276.601:2335): avc: denied { execute } for pid=21477 comm="syz.1.6848" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=70890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 332.878914][T21468] loop4: detected capacity change from 0 to 256 [ 333.008395][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6857'. [ 333.018001][T21491] netlink: 'syz.0.6857': attribute type 30 has an invalid length. [ 333.030916][T12708] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.042287][T12708] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.062332][T12708] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.077885][T12708] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.131991][T21503] loop4: detected capacity change from 0 to 1024 [ 333.145470][T21503] EXT4-fs: Ignoring removed orlov option [ 333.192787][T21503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.255102][ T28] audit: type=1400 audit(2000001277.021:2336): avc: denied { add_name } for pid=21502 comm="syz.4.6854" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 333.296805][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.306474][ T28] audit: type=1400 audit(2000001277.021:2337): avc: denied { reparent } for pid=21502 comm="syz.4.6854" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.330121][ T28] audit: type=1400 audit(2000001277.021:2338): avc: denied { remove_name } for pid=21502 comm="syz.4.6854" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 333.417981][ T28] audit: type=1400 audit(2000001277.021:2339): avc: denied { rmdir } for pid=21502 comm="syz.4.6854" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 333.461184][ T28] audit: type=1400 audit(2000001277.021:2340): avc: denied { rename } for pid=21502 comm="syz.4.6854" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 333.461369][T21529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6871'. [ 333.761351][T21570] loop4: detected capacity change from 0 to 128 [ 333.776193][T21570] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.799918][T21570] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.850177][ T809] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 334.190479][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6909'. [ 334.406256][T21633] loop4: detected capacity change from 0 to 4096 [ 334.423229][T21633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.529456][T21644] loop5: detected capacity change from 0 to 1024 [ 334.537619][T21644] EXT4-fs: Ignoring removed orlov option [ 334.558266][T21644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.603863][T20907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.643752][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.852051][T21665] loop4: detected capacity change from 0 to 1024 [ 334.871815][T21665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.952414][T17423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.168526][T21682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.185154][T21682] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.202612][T21682] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.6938: corrupted inode contents [ 335.233961][T21682] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.6938: mark_inode_dirty error [ 335.266928][T21682] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.6938: corrupted inode contents [ 335.336720][T21690] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.6938: corrupted inode contents [ 335.385309][T21690] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.6938: mark_inode_dirty error [ 335.415453][T21690] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.6938: corrupted inode contents [ 335.438832][T21690] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.6938: mark_inode_dirty error [ 335.458768][T21690] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.6938: corrupted inode contents [ 335.478409][T21690] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.6938: mark_inode_dirty error [ 335.490933][T21694] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.6938: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 335.490933][T21694] [ 335.517876][T21694] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.6938: corrupted inode contents [ 335.547344][T21705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6957'. [ 335.557309][T21705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6957'. [ 335.605796][T20907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.721052][T21717] can0: slcan on ptm0. [ 335.761166][T21723] ================================================================== [ 335.769340][T21723] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 335.777326][T21723] [ 335.779686][T21723] write to 0xffff88811b2939a0 of 8 bytes by task 21724 on cpu 0: [ 335.787588][T21723] cpu_map_kthread_run+0x4fe/0x1680 [ 335.792851][T21723] kthread+0x22a/0x280 [ 335.797196][T21723] ret_from_fork+0x150/0x360 [ 335.801908][T21723] ret_from_fork_asm+0x1a/0x30 [ 335.806791][T21723] [ 335.809306][T21723] read to 0xffff88811b2939a0 of 8 bytes by task 21723 on cpu 1: [ 335.816963][T21723] bq_flush_to_queue+0x124/0x360 [ 335.821941][T21723] cpu_map_enqueue+0x1ad/0x1c0 [ 335.826752][T21723] xdp_do_redirect_frame+0x27b/0x580 [ 335.832085][T21723] bpf_test_run_xdp_live+0xac3/0x1360 [ 335.837538][T21723] bpf_prog_test_run_xdp+0x57b/0xa10 [ 335.842946][T21723] bpf_prog_test_run+0x204/0x340 [ 335.848030][T21723] __sys_bpf+0x52e/0x7e0 [ 335.852297][T21723] __x64_sys_bpf+0x41/0x50 [ 335.856756][T21723] x64_sys_call+0x10cb/0x3020 [ 335.861469][T21723] do_syscall_64+0x12c/0x370 [ 335.866097][T21723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.872037][T21723] [ 335.874476][T21723] value changed: 0xffff8881585ad070 -> 0x0000000000000000 [ 335.881606][T21723] [ 335.883950][T21723] Reported by Kernel Concurrency Sanitizer on: [ 335.890243][T21723] CPU: 1 UID: 0 PID: 21723 Comm: syz.2.6952 Tainted: G W syzkaller #0 PREEMPT(full) [ 335.901434][T21723] Tainted: [W]=WARN [ 335.905259][T21723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.915509][T21723] ================================================================== [ 336.245444][T21711] can0 (unregistered): slcan off ptm0. [ 337.302081][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 337.302154][ T28] audit: type=1400 audit(2000001281.071:2349): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=48976 daddr=10.128.0.81 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1